Callfy.ai Privacy Policy

1. Who We Are

Callfy.ai ("Callfy", "we", "us", or "our") provides an AI‑powered phone‑support solution that integrates with Shopify and other e‑commerce platforms. You can reach us at [email protected].

2. Scope

This Policy explains how we collect, use, disclose, and protect Personal Data when you:

• Visit our website callfy.ai (the "Site");
• Create an account or subscribe to our service as a merchant ("Merchant");
• Call or interact with a Merchant's Callfy.ai phone line as an end customer ("Caller"); or
• Otherwise communicate with us.

3. Personal Data We Collect

Context	Categories of Personal Data	Source
Merchants	Name, business name, email, phone, billing address, payment‑card last 4 digits, Shopify store data (store name, domain, order metadata), authentication tokens, usage logs, support tickets	Directly from Merchant; Shopify API
Callers	Phone number, audio recordings, AI‑generated call transcripts, order ID & status, product inquiries, IVR responses	Automatically via telephony integration and Merchant systems
Website Visitors	IP address, device & browser type, pages visited, referring pages, cookies & similar technologies	Automatically from browsers and analytics providers
Marketing Leads	Name, email, phone, company, interaction history	Directly from lead forms or third‑party prospecting tools

We do not intentionally collect sensitive Personal Data (e.g., government IDs, health data) and ask that you do not provide it.

4. How We Use Personal Data

• Provide & Operate the Service – route phone calls, generate AI responses, surface transcripts to Merchants, and fulfil contractual obligations.
• Process Payments & Billing – via our payment processor (Stripe).
• Train & Improve AI Models – we may use anonymised call data to enhance accuracy. Merchants can opt‑out via the dashboard.
• Customer Support & Troubleshooting.
• Security, Fraud Prevention, & Compliance.
• Marketing & Communications – send product updates or promotional messages (opt‑out available in every email).

5. Legal Bases (EEA/UK)

We rely on:

• Performance of a contract – to provide the Service to Merchants and Callers.
• Legitimate interests – to improve, secure and market the Service, provided those interests are not overridden by your rights.
• Consent – for optional cookies, marketing, and model‑training (where required).
• Legal obligations – to keep tax or financial records and respond to lawful requests.

6. Disclosures & International Transfers

We only share Personal Data as necessary:

• Service Providers – cloud hosting (e.g., AWS), telephony (e.g., Twilio), AI infrastructure (e.g., OpenAI), analytics, payment processors – bound by confidentiality and data‑processing terms.
• Business Transfers – in connection with a merger, acquisition, or sale of assets.
• Legal Requirements – to comply with subpoenas, court orders, or defend legal claims.

Where Personal Data is transferred outside the EEA/UK, we use Standard Contractual Clauses or rely on adequacy decisions.

7. Data Retention

• Call audio & transcripts – 30 days by default; Merchants may change retention settings.
• Merchant account data – as long as the account is active and for up to 6 years thereafter for legal/financial purposes.
• Website logs – up to 12 months.

We may delete or anonymise data sooner on request, unless we must keep it to meet legal obligations.

8. Security

We implement administrative, technical, and physical safeguards such as encryption in transit and at rest, role‑based access controls, and continuous monitoring. No method of transmission is 100% secure; therefore we cannot guarantee absolute security.

9. Your Rights

Depending on your location, you may have rights to:

• Access, correct, or delete Personal Data;
• Data portability;
• Restrict or object to processing;
• Withdraw consent at any time; and
• Lodge a complaint with a supervisory authority.

California residents have additional rights under the CCPA, including the right to opt‑out of "sales" or "sharing" of Personal Data. We do not sell Personal Data for monetary consideration.

To exercise rights, email [email protected].

10. Cookies & Tracking

We use first‑party and third‑party cookies for authentication, analytics (e.g., Google Analytics), and marketing. This Privacy Policy describes our use of cookies. You can manage or disable cookies through your browser settings, but essential cookies are required for the Site to function properly.

11. Children's Privacy

The Service is not directed to children under 13. If we learn that we have collected data from a child without parental consent, we will delete it.

12. AI‑Generated Responses & Merchant Responsibility

Callfy.ai uses large language models to generate conversational responses on behalf of Merchants. Although we employ evaluation and monitoring systems, AI‑generated content may occasionally be inaccurate, incomplete, misleading, or inappropriate. By enabling the Service, Merchants acknowledge and agree that:

• Review & Oversight – Merchants are solely responsible for reviewing and, where necessary, correcting AI responses made available to Callers and for ensuring those responses meet any legal or industry‑specific requirements.
• No Warranties on Content Accuracy – Callfy.ai provides AI‑generated content "as‑is" and makes no warranties, express or implied, regarding its accuracy, reliability, or fitness for a particular purpose.
• Compliance – Merchants will use the Service in compliance with all applicable laws and regulations, including consumer‑protection, privacy, and telecommunications rules, and will provide any legally required disclosures to Callers.
• Indemnification – To the fullest extent permitted by law, Merchants agree to indemnify and hold Callfy.ai, its officers, directors, employees, and agents harmless from and against any claims, damages, or liabilities arising from their use of the Service or reliance on AI‑generated content.
• Limitation of Liability – Callfy.ai's aggregate liability arising out of or related to the Service is limited as set forth in our Terms of Service.

13. Changes to This Policy

We may update this Policy periodically. We will post the updated version on this page and indicate the "Effective Date". Material changes will be notified via email or dashboard alert.

14. Contact Us

For questions or to exercise your privacy rights:

Email: [email protected]