Privacy Policy

The controller of users' personal data is Webgravity Marcin Jamrogowicz, Bratkowice 94G, 36-055 Bratkowice, Polska, registration number: NIP 8191666842, REGON 365527115. You can contact us about data protection at [email protected] or via the Service contact page.

For recordings and call data processed within organization accounts, the organization may act as a separate controller, with the Operator acting as a processor.

Account data: e-mail address, name, account settings (including language), social login identifiers.

Call data: phone numbers (own and dialed), duration, direction, status and cost of calls, destination country.

Business plan data: call recordings, transcriptions and AI summaries — only where the organization has enabled recording.

Payment data: top-up and subscription history and customer identifiers at the payment provider. The Operator does not store full payment card data.

Technical data: system logs, IP address, data necessary for security and accountability.

Providing the services, including calls and billing — Art. 6(1)(b) GDPR (performance of a contract).

Payment processing, fraud and abuse prevention — Art. 6(1)(b) and (f) GDPR (legitimate interest).

Recording, transcription and summaries of calls — on behalf of and based on the decision of the organization using the Business plan; the other party is informed about the recording by a voice announcement.

Compliance with legal obligations, including tax and accounting — Art. 6(1)(c) GDPR.

Measuring the effectiveness of our advertising and tailoring it to audiences — Art. 6(1)(a) GDPR (consent). Processing for this purpose takes place only after consent is given and only until it is withdrawn.

Data is shared with processors only to the extent necessary to provide the services: the telecommunications infrastructure provider (Twilio), the payment provider (Stripe), the file storage provider (cloud services), AI providers for transcription (OpenAI) and summaries (Anthropic), and hosting and e-mail providers.

Once consent to marketing purposes is given, data about visits, registrations and payments is also shared with Meta Platforms Ireland Ltd. Your e-mail address is turned into a cryptographic hash before it is sent — we never transmit it in plain form.

Transfers of data outside the EEA (in particular to the USA) are based on standard contractual clauses or other mechanisms provided for in Chapter V of the GDPR.

Account data — for as long as the account exists, and after its deletion for the period necessary to defend against claims.

Call metadata and billing data — for the periods required by tax and accounting regulations.

Call recordings (audio) — for the retention period set by the organization, after which they are permanently deleted. Transcriptions and summaries — until they are deleted by the user or the organization, or until account deletion.

You have the right to access your data, rectify it, erase it, restrict processing, data portability and to object to processing based on legitimate interest.

You have the right to lodge a complaint with a supervisory authority — in Poland this is the President of the Personal Data Protection Office (UODO).

The Service uses cookies necessary for its operation: session, CSRF protection, language preference and interface preferences. These do not require consent.

With your consent, the Service also uses Meta marketing cookies. They are not loaded until you accept them. Consent can be withdrawn at any time using the link in the site footer, with effect for the future.

Visit statistics are collected without cookies and do not require consent.

We apply technical and organizational measures appropriate to the risk: transmission encryption, access control, environment separation and limiting access to recordings to authorized roles within the organization.

We will announce material changes to this policy in the Service or by electronic means. The date of the last update is shown at the top of the page.