Privacy Policy

Last updated: April 20, 2026

Your trust matters. This policy explains what we collect, why we collect it, and what we do with it.

What we collect

When you use 1 Call Away, we collect:

Account information

• Email address
• Phone number (used to match incoming calls to your account)
• Name (optional)

Payment information

Payment is processed by Stripe, our payment provider. We never see or store your full card number. Stripe handles that and is PCI-DSS compliant. We receive only a token reference to your card and the last four digits for your records.

Call metadata

• Date and time of each call
• Duration of each call
• The phone number you called from
• The amount charged

What we do NOT collect

• Call audio. We do not record your voice.
• Call transcripts. The conversation is processed in real time and not saved to our systems.
• Location data beyond what your phone carrier reports in the call signal.

How we use it

• To bill you for calls
• To verify you are the account holder when you call in
• To detect and prevent fraud or abuse
• To email you receipts and important account notifications
• To improve the Service over time (based on aggregate, non-identifying usage stats)

Who we share it with

We share data with a small set of service providers who power parts of the Service:

• Stripe — payment processing
• Vapi — the AI voice infrastructure that handles calls in real time
• Our email provider — to send transactional emails like receipts

These providers may only use your data to deliver their part of the Service. They cannot use it for their own marketing or sell it.

We do not sell your personal information to anyone. Full stop.

How long we keep it

• Account info and call metadata: as long as your account is active, plus 1 year after closure (to comply with financial record-keeping laws).
• Payment tokens: deleted as soon as you remove your card or close your account.

Your rights

You have the right to:

• See what personal data we have about you
• Correct data that's wrong or outdated
• Delete your account and associated data (subject to legal retention requirements)
• Export your data in a portable format
• Opt out of non-essential emails (you cannot opt out of receipts and critical account notices)

To exercise any of these rights, email us at privacy@1callaway.com. We'll respond within 30 days.

If you're in California (CCPA)

California residents have additional rights under the California Consumer Privacy Act, including the right to know, the right to delete, the right to correct, and the right to non-discrimination for exercising these rights. The above process applies to California residents and we honor "Do Not Sell" signals, though there is nothing to "not sell" because we don't sell data.

If you're in the EU/UK (GDPR)

If you're in the EU or UK, we process your data on one of these legal bases: (a) to perform our contract with you, (b) our legitimate interest in running a sustainable service, or (c) your consent where required. You have the rights listed above, plus the right to lodge a complaint with your local data protection authority.

Security

We use industry-standard safeguards — encrypted connections, secure cloud hosting, and limited employee access — to protect your data. No system is perfectly secure, but we take reasonable measures to protect your information and we'll notify you promptly in the unlikely event of a breach that affects you.

Children

The Service is intended for adults. We do not knowingly collect data from anyone under 18. If we learn we've collected data from a minor, we'll delete it.

Changes to this policy

If we materially change how we handle your data, we'll email registered users and update the "Last updated" date at the top of this page.

Contact

Questions about privacy? Email privacy@1callaway.com.