Privacy Policy
Last updated: October 6, 2026
This policy explains what personal data CallBooker handles, why, who processes it, how long we keep it, and your rights. It covers our customers (you) and the leads you call through CallBooker.
1. Who decides what
Your account data: CallBooker decides how it is used (we are the "controller").
Your leads' data: you decide who is called and why, so you are the controller and CallBooker processes that data only on your instructions, to run the service for you (we are your "processor", under our Data Processing Agreement). You are responsible for having a legal basis, such as consent, to call your leads and to share their data with us.
2. What we collect
- Account: name, email, company, password (stored by Google Firebase, never in plain text), billing details (handled by Stripe; we don't see your full card number).
- Connections: your Twilio account credentials, and access tokens for Google Calendar or Calendly when you connect them.
- Your leads: what you upload or send through the API, such as names, phone numbers, emails, companies and notes.
- Calls: who was called, when, how long, the outcome, the transcript, the agent's summary and notes, and answers to your qualifying questions. Calls are recorded by ElevenLabs; on paid plans you can play a call's recording in CallBooker for 30, 90 or 365 days depending on your plan. CallBooker doesn't keep its own copy of the audio.
- Meetings: the meetings your agents book (time, attendee name and email).
- Usage and technical data: IP address, browser, pages visited, actions in the app, and API request logs.
- Demo calls from our website: the name, email and phone number you enter, and the call's transcript and result.
3. How we use it
- To run the service: place calls, run the conversation, book meetings, show results, and send the notifications and emails you choose.
- To bill you, provide support, keep the service secure, and prevent abuse (for example rate limits and fraud checks).
- To improve CallBooker, using aggregated usage statistics.
- To send product emails. Marketing emails (such as after a website demo call) include an unsubscribe link and stop as soon as you use it.
4. Services that process data for us
We share data only with the services needed to run CallBooker:
- ElevenLabs: the voice AI that holds the conversation. It processes call audio and transcripts, and keeps conversation data according to its own retention settings.
- Twilio (your own account): places the phone calls.
- Google Cloud / Firebase: hosting, database, sign-in and translation of agent greetings.
- Google Calendar and Calendly (when you connect them): checking availability and creating meetings.
- Stripe: payments. Resend: sending emails. Vercel: hosting the website. Google Analytics: website statistics.
We don't sell personal data. We may disclose data if the law requires it, to protect our rights or users, or as part of a sale or merger of the business.
5. Google user data
When you connect Google Calendar, CallBooker reads your calendars' free/busy times and creates, updates or cancels events for meetings your agents book. We use this data only to provide booking features in CallBooker, don't use it for advertising, don't sell it, and don't let people read it except with your permission, for security, or when the law requires it.
CallBooker's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can disconnect Google Calendar at any time in Integrations.
6. How long we keep data
- Account, leads, calls, transcripts and meetings: while your account is active, until you delete them or ask us to.
- In-app notifications: 90 days. API request and webhook delivery logs: 30 days.
- Call recordings: playable in CallBooker for 30 days (Starter), 90 days (Growth) or 365 days (Scale) after the call. The audio itself is held by ElevenLabs under its retention settings.
- When you ask us to delete your account, we delete its data within 30 days, except what we must keep by law (such as invoices).
7. Security
Data is encrypted in transit and stored on Google Cloud with access controls. API keys are stored hashed and webhooks are signed. No system is perfectly secure; if a breach affects your data, we will tell you without undue delay.
8. International transfers
Our providers may process data in the United States and other countries. Where the law requires it, transfers rely on safeguards such as the European Commission's Standard Contractual Clauses.
9. Your rights
Depending on where you live (for example under the GDPR or US state laws), you can ask to access, correct, delete or export your data, object to or restrict its use, and withdraw consent. You can export your leads, calls and meetings as CSV files from the dashboard at any time.
To use these rights, email support@callbooker.com. If you are a lead who was called by one of our customers, contact that business first; we will help them answer your request. You can also complain to your data protection authority.
11. Children
CallBooker is for businesses and isn't meant for anyone under 18.
12. Changes to this policy
We may update this policy. For important changes we'll tell you by email or in the app. See also our Terms of Service.
13. Contact
Questions or requests about privacy: support@callbooker.com.