CallMyAI — Privacy Policy

Effective Date: July 16, 2026 Operator: CallMyAI LLC, a Wyoming limited liability company Address: 30 N Gould St, Ste R, Sheridan, WY 82801 Privacy contact: privacy@callmyai.ai

This Privacy Policy explains what personal data CallMyAI collects, how we use and protect it, who we share it with, and the rights you have. It applies to both Fans and Creators. It works alongside our Terms of Service and our Records-Keeping Compliance Statement.

1. Who We Are

CallMyAI LLC operates a voice-AI platform for creators. A Creator builds an AI persona modeled on her own voice, and Fans pay per minute to call and talk with that persona. We are the controller of the personal data described here.

2. The Data We Collect

From Fans:

• Your phone number, which is converted into a one-way anonymized code (a "hash") — Creators never see your real number.
• Payment information, handled by our payment processor; we store a payment token, not your full card number.
• Call audio and the text transcripts and summaries generated from it.
• Basic technical data such as your IP address, which we use to determine your country for legal and tax purposes, plus device and log information.

From Creators:

• Legal name, date of birth, and government-issued identification, collected for age and identity verification.
• Voice recordings and persona materials you submit.
• Payout details (such as your payout-provider email) and tax information required for reporting.

3. Caller Anonymization

Fan identity is protected by design. A Fan's phone number is turned into a one-way hash that is unique to each Creator, so the same Fan appears under a different anonymized alias to each Creator, and no Creator can see a Fan's real phone number, email, or legal identity. These hashes are still treated as personal data and are included when you exercise your privacy rights.

4. How We Use Your Data

We use personal data to: create and operate AI personas; connect and bill calls; enable a persona's conversational memory; enforce our safety rules; verify age and identity; process payouts and taxes; prevent fraud and abuse; provide support; and meet our legal and payment-network obligations.

5. Who We Share Data With

We do not sell your personal data. We share it only with service providers that help us run the platform, each of which handles data on our instructions. Our main providers are:

• Hosting and infrastructure: Vercel (hosting), Vultr (GPU compute), Supabase (database, authentication, storage), Upstash (caching), Sentry (error monitoring, with personal data redacted).
• Voice and conversation: Deepgram (speech-to-text) and, for occasional overflow, OpenRouter (language model). Text-to-speech, voice modeling, embeddings, and voice-match checks run on our own self-hosted infrastructure.
• Knowledge search: Pinecone (stores Creator knowledge, not Fan contact details).
• Identity, verification, and safety: Persona (identity and age verification), Reality Defender (deepfake detection), Hive AI (image moderation of Creator profile images).
• Payments and payouts: Mike's Processing and CCBill (Fan payments), Paxum (Creator payouts).
• Tax: our tax-filing and sales-tax providers, for legally required reporting.
• Telephony: BulkVS and VoIP.ms (phone numbers and call routing) and LiveKit (call connection); phone numbers are hashed at the boundary.
• Email: Resend (receipts and follow-ups).

We may also disclose data when required by law or to protect the platform, our users, or the public.

6. International Users and Your Privacy Rights

If you are in the European Union or European Economic Area (GDPR): you have the right to access, correct, delete, restrict, object to, and receive a portable copy of your personal data. We respond to verified requests within 30 days. Where we rely on consent, you may withdraw it at any time.

If you are in California (CCPA/CPRA): you have the right to know what we collect, to delete it, to correct it, and to opt out of the sale or sharing of personal data. We do not sell your personal data. We respond to verified requests within 45 days.

Everywhere else we operate: you may request access to or deletion of your personal data, and we respond within 45 days.

To exercise any of these rights, email privacy@callmyai.ai. To protect your data, we may need to verify your identity before acting on a request.

7. Data Retention

• Call transcripts: kept for up to 30 days, then deleted.
• Call summaries: kept for up to 30 days.
• Persona memory: kept until you delete your account or ask us to erase it.
• Age and identity verification records and financial records: kept as long as required by law and by card-network rules, even after account closure.

When you close a Fan account or ask us to erase your data, we delete the personal data we are not legally required to keep, and we retain the rest only under a legal or financial-record basis.

8. Cookies

We use cookies and similar technologies to keep you signed in, secure the service, and understand basic usage. If you visit from the EU/EEA, we ask for your consent to non-essential cookies before setting them.

9. Security

We protect personal data with encryption in transit and at rest, strict database access controls, and internal safeguards. We limit staff access to personal data and log administrative actions. No system is perfectly secure, but we work to protect your information and to notify you and regulators of a breach where the law requires.

10. Age

The platform is strictly for adults 18 and older. We do not knowingly collect data from anyone under 18. If we learn that an underage person has used the platform, we remove their data and access.

11. Changes to This Policy

We may update this Policy from time to time. Material changes will be posted here with a new effective date.

12. Contact

Privacy questions or requests: privacy@callmyai.ai CallMyAI LLC, 30 N Gould St, Ste R, Sheridan, WY 82801