Privacy Policy

This Privacy Policy explains how InteliCall, Inc. ("InteliCall", "we", "us") collects, uses, discloses, and safeguards personal information when you visit our website, create an account, or use the InteliCall AI call-answering service (the "Service").

We are committed to handling personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), Quebec's Law 25, and — where applicable — the EU/UK GDPR and the California Consumer Privacy Act (CCPA/CPRA).

As a controller we determine how we handle personal information about our customers (account holders), website visitors, prospects, and job applicants.

As a processor we handle personal information about your callers and end users on your behalf, strictly to provide the Service. You are the controller of that data. Where required, we will enter into a Data Processing Addendum (DPA).

Account information. Name, business name, email, phone, password hash, billing address, and payment-method tokens (we never store full card numbers — Stripe handles them).

Configuration data. Voice selections, scripts, knowledge-base content, business hours, transfer rules, integrations you connect.

Call data. Inbound and outbound caller phone numbers, call timestamps, duration, audio recordings (where enabled), transcripts, AI-generated summaries, appointment details, and any information the caller provides.

Usage data. Pages viewed, features used, dashboard interactions, IP address, browser type, device identifiers, approximate location derived from IP, and diagnostic logs.

Communications. Messages you send to support, sales, or via in-app chat, plus any feedback or survey responses.

We use personal information to:

• Provide, operate, secure, and improve the Service;
• Authenticate users, prevent fraud, and detect abuse;
• Process payments, send invoices, and manage subscriptions;
• Transcribe and summarize calls, route appointments to your calendar, and deliver text-message follow-ups you have configured;
• Provide customer support and respond to inquiries;
• Send service announcements, security alerts, and — with your consent or where permitted — marketing communications you can unsubscribe from at any time;
• Comply with legal obligations, enforce our Terms, and protect our rights and the rights of others.

AI training. We do not use Customer Data (your callers' recordings or transcripts) to train foundation models. We may use aggregated, de-identified usage statistics to improve product features.

Where the EU/UK GDPR applies, we rely on the following legal bases: performance of a contract (to provide the Service), legitimate interests (to secure, improve, and market the Service in a balanced way), legal obligation (tax, accounting, and lawful requests), and consent (optional marketing emails and certain cookies). You may withdraw consent at any time.

We do not sell personal information. We share it only with the categories of recipients below, under written agreements that restrict their use:

• Subprocessors that power the Service — currently including Twilio (telephony & SMS), Stripe (payments), our cloud hosting & database provider, our transactional email provider, and AI model providers selected via our AI gateway. A current subprocessor list is available on request.
• Integrations you enable (e.g. Google Calendar, Microsoft 365, your CRM) receive only the data needed for that integration.
• Professional advisors (lawyers, accountants, auditors) bound by confidentiality.
• Successors in connection with a merger, acquisition, or asset sale, subject to equivalent privacy commitments.
• Authorities where required by valid legal process or to protect rights, safety, or security.

InteliCall is Canadian-built and we host customer data on Canadian infrastructure where feasible. Some subprocessors operate globally; when personal information is transferred outside Canada or the EEA, we rely on appropriate safeguards such as the EU Standard Contractual Clauses or equivalent contractual protections.

We retain personal information for as long as your account is active and as needed to provide the Service. After account closure we delete or anonymize Customer Data within 90 days, unless a longer retention period is required for legal, tax, or security reasons.

You can configure shorter retention windows for call recordings and transcripts in the dashboard. Aggregated, de-identified analytics may be retained indefinitely.

We use TLS 1.2+ in transit, AES-256 at rest, role-based access controls, audit logging, and least-privilege secrets management. We are SOC 2 Type II in progress. Despite these measures, no system is perfectly secure; you are responsible for protecting your account credentials and notifying us at security@intelicall.ca of any suspected incident.

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you;
• Correct inaccurate or incomplete information;
• Delete personal information ("right to be forgotten");
• Restrict or object to certain processing;
• Receive your data in a portable, machine-readable format;
• Withdraw consent at any time without affecting prior lawful processing;
• Lodge a complaint with your data-protection authority (e.g. the Office of the Privacy Commissioner of Canada).

To exercise a right, email privacy@intelicall.ca. If you are an end user of one of our customers, please contact that customer first; we will assist them as their processor.

We use strictly necessary cookies to keep you signed in and the Service secure, plus a small number of first-party analytics cookies to understand product usage. We do not use third-party advertising cookies. You can clear or block cookies in your browser; some Service features will not work without strictly-necessary cookies.

The Service is intended for businesses and is not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

California, Colorado, Connecticut, Virginia, Utah, and other U.S. state residents may have additional rights, including the right to opt out of "sales" or "sharing" of personal information (we do not engage in either) and the right to limit use of sensitive personal information. To exercise these rights, contact privacy@intelicall.ca. We will not discriminate against you for exercising your rights.

We may update this Policy from time to time. The "Last updated" date at the top reflects the latest revision. Material changes will be communicated by email or via the dashboard before they take effect.

InteliCall, Inc. · Toronto, Ontario, Canada · Privacy inquiries: privacy@intelicall.ca. Security issues: security@intelicall.ca.