Privacy Policy

How we collect, use, protect, and handle your data.

๐Ÿ”’ Effective Date: February 25, 2025 ยท Last Updated: February 25, 2025

1. Introduction

callchloe.ai ("we", "our", "us") is committed to protecting the privacy and security of our users ("Agents", "Subscribers") and the individuals who interact with the Service ("Callers"). This Privacy Policy explains what data we collect, how we use it, who we share it with, how we protect it, and what rights you have.

By using callchloe.ai, you consent to the data practices described in this Privacy Policy. If you do not agree, please do not use the Service.

This policy applies to all data collected through the callchloe.ai website, dashboard, AI secretary service, and any related communications.

2. Who We Are

callchloe.ai is an AI-powered virtual secretary service designed for real estate professionals in Canada and the United States. The Service answers incoming calls on behalf of real estate agents, qualifies leads, books appointments, and delivers call summaries.

For the purposes of data protection legislation:

  • Data Controller: callchloe.ai is the data controller for Agent account data and platform usage data
  • Data Processor: callchloe.ai acts as a data processor for Caller data collected during calls on behalf of the Agent

3. Data We Collect

We collect data from two primary categories of individuals: Agents (our subscribers) and Callers (people who call in and are handled by the AI secretary).

3.1 Agent Data

Data TypeExamplesPurpose
IdentityFull name, email address, phone numberAccount creation, authentication, communication
ProfessionalBrokerage name, license info (if provided), locationService customization, eligibility verification
BillingCredit card details (processed via Stripe), billing address, transaction historyPayment processing, subscription management
PreferencesSecretary name, voice selection, language, script customizations, notification settingsService personalization
UsageMinutes consumed, call logs, dashboard activity, login history, feature usageService delivery, analytics, billing

3.2 Caller Data

Data TypeExamplesPurpose
IdentityName (when voluntarily provided during the call)Lead capture for the Agent
ContactPhone number (via Caller ID), email (if provided)Lead capture, confirmation messages
Call ContentFull audio recording, AI-generated transcript, call duration, call branch triggeredService delivery, call summary generation, quality assurance
IntentReason for calling, lead temperature classification, appointment detailsLead qualification, Agent reporting

3.3 Technical Data

  • IP address, browser type, device information, operating system
  • Pages visited, time spent on the platform, referral source
  • Cookies and similar tracking technologies (see Section 10)

4. How We Collect Data

  • Directly from Agents: When you sign up, configure your settings, update your profile, or contact support
  • Directly from Callers: When a Caller speaks to the AI secretary and provides information during the call
  • Automatically: Through phone call metadata (Caller ID, call duration, timestamps), cookies, and analytics tools on the website and dashboard
  • From third-party providers: Payment data processed through Stripe, telephony data from our telephony provider, and AI processing data from our voice AI provider

5. How We Use Your Data

5.1 Agent Data

  • To create and manage your account
  • To process payments and manage your subscription
  • To configure and operate your AI secretary
  • To deliver call summaries, alerts, and notifications (including 80% and 100% minute usage alerts)
  • To provide customer support
  • To analyze usage patterns and improve the Service
  • To send important service-related communications (billing, usage alerts, policy changes)
  • To detect and prevent fraud, abuse, or violations of our Terms of Service and Fair Use Policy

5.2 Caller Data

  • To handle the call and provide a natural, helpful conversation experience
  • To capture lead information and generate call summaries for the Agent
  • To send confirmation messages to the Caller (when configured by the Agent)
  • To book appointments on behalf of the Agent and Caller
  • To improve the quality and accuracy of the AI secretary

We never sell, rent, or trade your data or your callers' data to third parties for marketing, advertising, or any unrelated commercial purpose.

6. Data Sharing

We do not sell your data. We share data only in the following limited circumstances:

6.1 With Essential Service Providers

We share data with third-party providers that are strictly necessary to operate the Service (see Section 7). These providers are contractually bound to use your data only for the purpose of providing their service to us.

6.2 With the Agent (Caller Data)

When a Caller interacts with the AI secretary, the information provided during the call โ€” including name, phone number, reason for calling, and call recording โ€” is shared with the Agent whose secretary handled the call. This is the core function of the Service.

6.3 Legal Requirements

We may disclose data if required to do so by law, regulation, legal process, or enforceable governmental request, or if we believe disclosure is necessary to protect the rights, safety, or property of callchloe.ai, our users, or the public.

6.4 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your data may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on the platform before your data is transferred and becomes subject to a different privacy policy.

7. Third-Party Service Providers

We use the following categories of third-party providers to operate the Service. Each provider processes data only as necessary to perform its function:

Provider CategoryPurposeData Accessed
AI Voice PlatformPowers the AI secretary's voice, language understanding, and conversation logicCall audio, conversation content
Telephony ProviderRoutes phone calls, provides phone numbers, handles SMS deliveryPhone numbers, call metadata, SMS content
Payment Processor (Stripe)Processes credit card payments and manages subscriptionsBilling information (card details stored by Stripe, not by us)
Cloud HostingHosts the website, dashboard, and application backendAll platform data (encrypted)
Database ProviderStores agent accounts, call logs, settings, and lead dataAll platform data (encrypted)
Calendar IntegrationBooks appointments on Agent's calendarAppointment details, Caller name and contact
Email ProviderSends transactional emails (summaries, alerts, confirmations)Email addresses, message content
AnalyticsTracks website and dashboard usage to improve the ServiceTechnical data, anonymized usage data

A current list of specific sub-processors is available upon request by contacting [email protected].

8. Data Retention

Data TypeRetention Period
Agent account dataDuration of subscription + 30 days after account closure
Call recordings90 days from the date of the call (downloadable during this period)
Call summaries & logsDuration of subscription + 30 days after account closure
Caller contact dataDuration of the Agent's subscription + 30 days
Billing & transaction records7 years (as required by tax and financial regulations)
Technical / analytics data12 months, then anonymized or deleted

After the retention period, data is permanently deleted from our systems and from the systems of our sub-processors where technically feasible.

9. Call Recordings

All calls handled by the AI secretary are recorded. Recordings are a core feature of the Service, enabling Agents to review calls, verify lead quality, and improve their response process.

9.1 Storage & Access

  • Recordings are stored securely using encryption at rest and in transit
  • Only the Agent whose secretary handled the call can access that recording via their dashboard
  • callchloe.ai support staff may access recordings only when necessary to investigate a support ticket or technical issue, with appropriate authorization

9.2 Caller Consent

Some jurisdictions require all parties to consent to being recorded ("two-party consent"). The Agent is solely responsible for compliance with applicable call recording laws. The AI secretary can be configured to include a recording disclosure statement at the beginning of each call. We strongly recommend enabling this feature.

callchloe.ai does not provide legal advice regarding recording consent requirements. Agents should consult a qualified attorney in their jurisdiction.

9.3 Deletion

Recordings are automatically deleted after 90 days. Agents may download recordings during this period. Upon account termination, all recordings are permanently deleted within 30 days.

10. Cookies & Analytics

10.1 What We Use

  • Essential cookies: Required for the website and dashboard to function (authentication, session management). Cannot be disabled
  • Analytics cookies: Help us understand how visitors use the website and dashboard to improve the experience. Can be disabled
  • Marketing cookies: Used only if we run advertising campaigns to track conversions. Can be disabled

10.2 Managing Cookies

You can manage or disable cookies through your browser settings. Disabling essential cookies may prevent the dashboard from functioning properly. We display a cookie consent banner on first visit to allow you to accept or reject non-essential cookies.

10.3 Do Not Track

We respect "Do Not Track" browser signals. When a DNT signal is detected, we disable non-essential tracking for that session.

11. Security

We take the security of your data seriously and implement industry-standard safeguards, including:

  • Encryption in transit: All data transmitted between your browser/phone and our servers is encrypted using TLS 1.2 or higher
  • Encryption at rest: All stored data, including call recordings, is encrypted at rest
  • Access controls: Access to data is restricted to authorized personnel on a need-to-know basis
  • Payment security: Credit card information is processed and stored by our PCI-DSS compliant payment processor (Stripe). We never store your full credit card number on our servers
  • Regular audits: We conduct periodic security reviews of our systems and third-party integrations
  • Incident response: We maintain procedures for responding to data breaches and will notify affected users as required by applicable law

No system is 100% secure. While we implement robust security measures, we cannot guarantee absolute security. You are responsible for maintaining the security of your account credentials.

12. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

12.1 All Users

  • Access: Request a copy of the personal data we hold about you
  • Correction: Request correction of inaccurate or incomplete data
  • Deletion: Request deletion of your personal data (subject to legal retention requirements)
  • Data portability: Request a copy of your data in a structured, machine-readable format
  • Objection: Object to certain types of data processing
  • Withdraw consent: Withdraw consent for non-essential data processing at any time

12.2 Canadian Residents

Canadian residents have rights under the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation (including Quebec's Law 25). You have the right to access, correct, and request deletion of your personal information.

12.3 California Residents

California residents have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including the right to know, delete, correct, and opt out of the sale of personal information. We do not sell personal information.

12.4 How to Exercise Your Rights

To exercise any of these rights, contact us at [email protected]. We will respond to verified requests within 30 days. We may ask for identification to verify your identity before processing the request.

12.5 Caller Rights

Callers who wish to exercise their data rights (access, deletion, correction) should contact the Agent whose secretary handled their call. If the Caller is unable to reach the Agent, they may contact us directly at [email protected] and we will make reasonable efforts to assist.

13. Children's Privacy

callchloe.ai is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have inadvertently collected data from a child under 18, we will promptly delete it. If you believe a child has provided us with personal data, please contact us at [email protected].

14. International Data Transfers

callchloe.ai operates in Canada and the United States. Data may be processed and stored in either country depending on the infrastructure of our service providers.

If you are located outside of Canada or the United States, your data may be transferred to and processed in these countries, which may have different data protection laws than your jurisdiction. By using the Service, you consent to this transfer.

We ensure that any international transfer of data is conducted in compliance with applicable data protection laws and that appropriate safeguards are in place, including contractual protections with our service providers.

15. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.

  • Material changes will be communicated via email and/or a prominent notice on the platform at least 30 days before taking effect
  • The "Last Updated" date at the top of this page will be revised
  • Your continued use of the Service after changes take effect constitutes acceptance of the revised policy
  • If you do not agree with the changes, you must stop using the Service and close your account

16. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, contact us:

callchloe.ai โ€” Privacy Team

Privacy inquiries: [email protected]

General support: [email protected]

Website: callchloe.ai