Privacy Policy
Effective Date: May 31, 2026 | Last Updated: May 31, 2026
1. What Information Do We Collect?
Information You Provide
- Account Information: Name, business name, email address, phone number, billing address
- Payment Information: Credit card details (processed securely by Stripe — we do not store card numbers)
- Call Configuration: Business hours, call routing preferences, custom greetings, FAQ content
- Communication Data: Email correspondence, support tickets, chat messages
Information We Collect Automatically
- Call Data: Phone numbers (caller and business), call duration, timestamps, call recordings, transcripts
- Usage Information: Pages visited, features used, session duration, IP address, browser type
- Server Logs: HTTP requests, error logs, access timestamps
- Cookies: Session cookies, analytics cookies (see Cookie Policy)
Information from Third Parties
- Vapi (AI Voice Provider): Call audio, transcripts, voice synthesis data
- Twilio (Phone Service): Phone numbers, call metadata, SMS delivery status
- Stripe (Payment Processing): Transaction records, payment method details
- Google Places API: Business location data for client provisioning
2. How Do We Use the Information?
We use collected information to:
- Provide Services: Answer calls, route inquiries, transcribe conversations, send call summaries
- Account Management: Create and manage your account, process payments, send invoices
- Communication: Send transactional emails (call reports, billing notifications, service updates)
- Improvement: Analyze call quality, improve AI accuracy, develop new features
- Support: Respond to customer inquiries, troubleshoot technical issues
- Compliance: Maintain records for legal and regulatory requirements
- Marketing: Send promotional emails about new features (you can opt out anytime)
We do NOT:
- Sell your personal information to third parties
- Use call recordings for purposes other than service delivery and quality improvement
- Share client data between different PrimCall customers
3. What Information Do We Share?
Service Providers
- Vapi: Call audio and transcripts for AI processing
- Twilio: Phone numbers and call routing data
- Stripe: Payment and billing information
- Resend: Email delivery service for transactional emails
- Google: Business location verification via Places API
Legal Requirements
We may disclose information if required by court orders, subpoenas, legal process, law enforcement requests, or protection of our rights, property, or safety.
Business Transfers
If PrimCall is acquired or merged, your information may be transferred to the new owner.
We do NOT share your information with:
- Marketing partners
- Advertisers
- Data brokers
4. Your Data Rights
Access Your Data
Request a copy of all personal information we hold about you.
Delete Your Data
Request permanent deletion of your account and all associated data. We will delete your account within 30 days, remove all call recordings and transcripts, cancel active phone numbers and subscriptions, and notify third-party services to delete your data.
To request deletion: Email hello@primcall.co with subject "Data Deletion Request"
Correct Your Data
Update inaccurate information through your account dashboard or by contacting support.
Export Your Data
Download call transcripts, recordings, and account data in machine-readable format (CSV, JSON).
Opt-Out of Marketing
Unsubscribe from promotional emails via the link in any marketing email, or email hello@primcall.co.
Restrict Processing
Request limitation of how we use your data (subject to legal obligations).
5. Data Retention
- Call Recordings: 90 days (configurable in account settings)
- Call Transcripts: 1 year
- Account Information: Duration of active subscription + 7 years (tax/billing records)
- Support Tickets: 3 years
- Server Logs: 90 days
After retention periods, data is permanently deleted from our systems and backups.
6. Data Security
- Encryption: TLS 1.3 for data in transit, AES-256 for data at rest
- Access Controls: Role-based permissions, multi-factor authentication for staff
- Secure Infrastructure: Hosted on dedicated servers (Primcast datacenter, Miami)
- Regular Audits: Security reviews, penetration testing, vulnerability scans
- Vendor Security: All third-party services (Vapi, Twilio, Stripe) are SOC 2 Type II certified
7. International Data Transfers
PrimCall operates in the United States. If you are located outside the US, your data will be transferred to and processed in the US. We comply with GDPR for EU users and PIPEDA for Canadian users, and use Standard Contractual Clauses for international transfers.
8. Children's Privacy
PrimCall is not intended for users under 18. We do not knowingly collect information from children. If you believe a child has provided us with personal information, contact hello@primcall.co.
9. Cookie Policy
See our separate Cookie Policy for details on how we use cookies.
10. Changes to This Policy
We may update this Privacy Policy. Changes will be posted on this page with an updated "Last Updated" date. Continued use of PrimCall after changes constitutes acceptance.
11. Contact Us
Compliance
- • Australia Privacy Act 1988
- • GDPR (EU General Data Protection Regulation)
- • CCPA (California Consumer Privacy Act)
- • CAN-SPAM Act
- • Telephone Consumer Protection Act (TCPA)