Privacy Policy

This Privacy Policy explains how InteliCall, Inc. ("InteliCall", "we", "us") collects, uses, discloses, and safeguards personal information when you visit our website, create an account, or use the InteliCall AI receptionist and Live Answering service, including our desktop and mobile apps (the "Service").

We are committed to handling personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), Quebec's Law 25, and — where applicable — the EU/UK GDPR and the California Consumer Privacy Act (CCPA/CPRA).

As a controller we determine how we handle personal information about our customers (account holders), website visitors, prospects, and job applicants.

As a processor we handle personal information about your callers and end users on your behalf, strictly to provide the Service. You are the controller of that data. Where required, we will enter into a Data Processing Addendum (DPA).

Account information. Name, business name, email, phone, password hash, billing address, and payment-method tokens (we never store full card numbers — Stripe handles them). If you sign in with Google or Microsoft, we receive your name, email, and profile identifier from that provider; if you use a magic sign-in link, we log the email and time of sign-in.

Configuration data. Voice selections, scripts, knowledge-base content, business hours, transfer rules, live-answering training material (scripts, FAQs, guides), and integrations you connect — including API credentials you supply for third-party services such as Freshsales, which we store encrypted.

Call data. Inbound and outbound caller phone numbers, call timestamps, duration, audio recordings (where enabled), transcripts, AI-generated summaries and action items, agent notes, appointment details, spam-screening classifications, and any information the caller provides. Recordings are served through private, time-limited links rather than public URLs.

Messaging data. The content and delivery status of automated text messages sent on your behalf (appointment confirmations, 24-hour and 1-hour reminders, post-appointment review requests, and call follow-ups), including opt-out events.

Usage data. Pages viewed, features used, dashboard and softphone interactions, IP address, browser type, device identifiers, approximate location derived from IP, and diagnostic logs. Our installable desktop and mobile apps collect the same categories of usage data as the web app.

Communications. Messages you send to support, sales, or via in-app chat, plus any feedback or survey responses.

We use personal information to:

• Provide, operate, secure, and improve the Service;
• Authenticate users (including via Google, Microsoft, and magic links), prevent fraud, and detect abuse;
• Process payments, send invoices, and manage subscriptions and add-ons;
• Transcribe and summarize calls, route appointments to your calendar, screen suspected spam and robocalls, and deliver text-message reminders and follow-ups you have configured;
• Send weekly account summary emails and service announcements, security alerts, and — with your consent or where permitted — marketing communications you can unsubscribe from at any time;
• Provide customer support and respond to inquiries;
• Comply with legal obligations, enforce our Terms, and protect our rights and the rights of others.

AI training. We do not use Customer Data (your callers' recordings or transcripts) to train foundation models. We may use aggregated, de-identified usage statistics to improve product features.

If you enable the Live Answering add-on, calls may be answered by trained human agents employed or engaged by InteliCall. To handle those calls, agents access — through CallDesk, our agent operations platform — the caller's phone number, the call audio and transcript, your business details, and the scripts, FAQs, and training material you provide. Agents create tickets, notes, and follow-up records in CallDesk that are associated with your account.

Live agents are bound by confidentiality obligations and access only the accounts they are assigned to. They do not receive access to your customer portal or your login credentials. Call recordings and transcripts handled by agents are subject to the same retention and security controls described in this Policy.

Where the EU/UK GDPR applies, we rely on the following legal bases: performance of a contract (to provide the Service), legitimate interests (to secure, improve, and market the Service in a balanced way), legal obligation (tax, accounting, and lawful requests), and consent (optional marketing emails and certain cookies). You may withdraw consent at any time.

We do not sell personal information. We share it only with the categories of recipients below, under written agreements that restrict their use:

• Subprocessors that power the Service — currently including Twilio (telephony & SMS), ElevenLabs (AI voice synthesis), Stripe (payments), our cloud hosting & database provider, our transactional email provider, and AI model providers selected via our AI gateway. A current subprocessor list is available on request.
• Our live-answering agents, who access call data through CallDesk solely to answer your calls and manage the resulting tickets, as described in Section 5.
• Integrations you enable (e.g. Google Calendar, Microsoft 365, your CRM) receive only the data needed for that integration.
• Professional advisors (lawyers, accountants, auditors) bound by confidentiality.
• Successors in connection with a merger, acquisition, or asset sale, subject to equivalent privacy commitments.
• Authorities where required by valid legal process or to protect rights, safety, or security.

InteliCall is Canadian-built and we host customer data on Canadian infrastructure where feasible. Some subprocessors operate globally; when personal information is transferred outside Canada or the EEA, we rely on appropriate safeguards such as the EU Standard Contractual Clauses or equivalent contractual protections.

We retain personal information for as long as your account is active and as needed to provide the Service. After account closure we delete or anonymize Customer Data within 90 days, unless a longer retention period is required for legal, tax, or security reasons.

You can configure shorter retention windows for call recordings and transcripts in the dashboard. Aggregated, de-identified analytics may be retained indefinitely.

We use TLS 1.2+ in transit, AES-256 at rest, role-based access controls, audit logging, signed webhooks for cross-system data transfer, time-limited signed URLs for call recordings, and least-privilege secrets management. We are SOC 2 Type II in progress. Despite these measures, no system is perfectly secure; you are responsible for protecting your account credentials and notifying us at security@intelicall.ca of any suspected incident.

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you;
• Correct inaccurate or incomplete information;
• Delete personal information ("right to be forgotten");
• Restrict or object to certain processing;
• Receive your data in a portable, machine-readable format;
• Withdraw consent at any time without affecting prior lawful processing;
• Lodge a complaint with your data-protection authority (e.g. the Office of the Privacy Commissioner of Canada).

To exercise a right, email privacy@intelicall.ca. If you are an end user of one of our customers, please contact that customer first; we will assist them as their processor.

We use strictly necessary cookies to keep you signed in and the Service secure, plus a small number of first-party analytics cookies to understand product usage. We do not use third-party advertising cookies. You can clear or block cookies in your browser; some Service features will not work without strictly-necessary cookies.

The Service is intended for businesses and is not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

California, Colorado, Connecticut, Virginia, Utah, and other U.S. state residents may have additional rights, including the right to opt out of "sales" or "sharing" of personal information (we do not engage in either) and the right to limit use of sensitive personal information. To exercise these rights, contact privacy@intelicall.ca. We will not discriminate against you for exercising your rights.

We may update this Policy from time to time. The "Last updated" date at the top reflects the latest revision. Material changes will be communicated by email or via the dashboard before they take effect.

InteliCall, Inc. · Toronto, Ontario, Canada · Privacy inquiries: privacy@intelicall.ca. Security issues: security@intelicall.ca.