Privacy Policy

Last updated: March 28, 2026

1. Data We Collect

We collect the following categories of data:

• Account information: Name, email address, company name, billing information.
• Call data: Call recordings, transcripts, call metadata (duration, timestamps, phone numbers).
• Usage data: Feature usage, log data, IP addresses, browser/device information.
• Contact data: Information about your customers that you upload or create within the Service.

2. How We Use Data

We use your data to:

• Provide, operate, and improve the Service
• Process billing and prevent fraud
• Send transactional and service-related communications
• Analyse usage patterns to improve platform performance
• Comply with legal obligations

We do not sell your personal data to third parties.

3. Data Storage & Security

Your data is stored on servers located in the European Union and/or the United States (depending on your plan). We implement industry-standard security measures including AES-256 encryption at rest, TLS 1.2+ in transit, and strict tenant-level data isolation. Access to production data is logged and audited.

4. Third-Party Services

The Service integrates with the following third-party processors:

• Stripe — payment processing (PCI DSS compliant)
• OpenAI — AI voice agent processing
• Twilio / telephony providers — call routing and delivery
• Sentry — error tracking (anonymised stack traces only)

Each sub-processor is bound by data processing agreements. A full sub-processor list is available upon request at privacy@agentcause.com.

5. Data Retention

We retain your Tenant Data for the duration of your subscription plus 30 days after termination. Call recordings are retained per your configured retention policy (default: 90 days). You may adjust retention settings from your account settings or request immediate deletion.

6. Your Rights (GDPR)

If you are in the European Economic Area, you have the following rights:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate data
• Erasure: Request deletion of your data ("right to be forgotten")
• Portability: Export your data in machine-readable format via Settings → Data Export
• Restriction: Request that we limit processing of your data
• Objection: Object to processing based on legitimate interests

To exercise these rights, contact our DPO at privacy@agentcause.com.

7. Cookies & Tracking

We use essential session cookies for authentication and CSRF protection. We do not use third-party advertising trackers. See our Cookie Policy for the full list of cookies we use.

8. Children's Privacy

The Service is not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such data, contact us immediately at privacy@agentcause.com.

9. International Data Transfers

Where personal data is transferred outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission or equivalent mechanisms.

10. Policy Updates

We may update this Privacy Policy from time to time. We will notify registered users by email at least 30 days before material changes take effect. The "Last updated" date at the top of this page reflects the most recent revision.

11. Contact

For privacy-related inquiries, contact our Data Protection Officer at:
privacy@agentcause.com