Privacy Policy

Who we are

CallPilots provides missed-call lead capture for service businesses. This policy explains what data we collect and how we use it.

What we collect

We collect only what we need to run the service:

• Account details — business name, email address, mobile number, trade type, timezone.
• Lead data — phone numbers of people who call your business number, and the SMS messages exchanged with them.
• Billing data — handled by Stripe; we store a customer reference and subscription status, never your full card number.
• Usage & technical data — basic logs needed to operate and secure the service (e.g. timestamps, error logs).

We do not collect location, photos, contacts, or run third-party advertising or analytics trackers.

How we use it

We use this data solely to deliver the service: capturing missed calls, sending automated SMS replies, displaying leads on your dashboard, alerting you to new leads, and processing your subscription. We never sell your data.

Your leads — who controls this data

The phone numbers, names, and messages of the people who call your business are your customer data. For that data, you act as the controller and CallPilots acts as a processor — we handle it on your behalf and only to provide the service. You are responsible for having a lawful basis to contact those callers (see our Terms of Service). For your own account information, CallPilots is the controller.

How long we keep it

We keep your data for as long as your account is active. If you close your account, we delete your business and lead data from active systems within 30 days, except where we must retain limited records (e.g. billing) to meet legal obligations.

Third parties

We rely on trusted providers to operate, each processing data only as needed: Twilio (telephony and SMS), Supabase (database and authentication), Stripe (payments), OpenAI (understanding caller messages), and Vercel (hosting). We do not share your data with anyone else.

Overseas transfer. Some of these providers process data on servers outside Australia (for example, in the United States and Europe). By using the service you consent to this transfer. We only use reputable providers that offer appropriate data protection safeguards.

AI processing. When we use OpenAI to interpret a caller's SMS, the message content is sent to OpenAI's API. OpenAI does not use data submitted via its API to train its models. We send only what is needed to extract the job details.

Your rights

We handle personal information in line with the Australian Privacy Principles (Privacy Act 1988). You can request access to, correction of, or deletion of your data at any time by emailing us.

If you are in the EU/UK (GDPR) or California (CCPA), you also have the right to know what we hold, request a copy, ask us to delete it, and object to certain processing. We do not sell personal information, and we will not discriminate against you for exercising these rights. To make any request, contact us below.

Contact

Questions about this policy? Email hello@callpilots.app.