Privacy Policy

2. What we collect

If you would like a call recording or transcript deleted sooner than the automatic 30-day removal, contact us at [PRIVACY CONTACT EMAIL]. What we deliberately don't collect: we do not use analytics, advertising, or tracking technologies of any kind. We do not track which device or browser you use, your location, or your behaviour on our site beyond what's strictly needed to keep you signed in. See our Cookie Policy for details.

3. Why we process your data

We rely on the following legal bases under UK GDPR: performance of our contract with you (providing the translation service, billing you for usage), our legitimate interests (keeping the platform secure, preventing misuse, improving reliability), and legal obligation (e.g. retaining financial records for tax purposes). Where we ask for explicit consent, such as for optional communications, you can withdraw it at any time.

4. Who we share it with

We share personal data only with the service providers ("sub-processors") we rely on to run the platform, and only to the extent needed:

• Supabase — our database, authentication, and file storage provider.
• OpenAI — processes your live call audio in real time to generate the translation.
• Stripe — processes payments once billing is enabled.

Where a sub-processor is located, or processes data, outside the UK or EEA, we rely on their published data protection safeguards (such as Standard Contractual Clauses). We do not sell your data, and we do not share it with anyone for marketing or advertising purposes. Your conversations are not used to train AI models — we use OpenAI's API, which does not train on API customer data by default.

5. How long we keep it

We retain account and business data for as long as your account is active, and for a reasonable period afterwards in case you wish to reactivate it. Financial and billing records — including the duration, cost, timestamps, and languages used for each session — are retained for six years, in line with UK statutory record-keeping requirements. Where audio recording or transcripts are switched on, we automatically and permanently delete that audio and transcript content 30 days after the call, regardless of whether you ask us to. You can ask us to delete it sooner at any time.

6. How we protect it

Data is encrypted in transit and at rest by our infrastructure providers. Access to your business's call recordings, transcripts, and account data is restricted by role — only members of your own business can access your business's data through the platform, and where a business is organised into departments, a department owner can only see their own department's calls, not the whole business. If a personal data breach affecting you occurs, we will notify the ICO within 72 hours where UK GDPR Article 33 requires it, and notify affected customers without undue delay. We are actively evaluating additional encryption controls for stored call recordings and transcripts that would remove even our own operational ability to read them; this document will be updated if and when that changes.

7. Your rights

Under UK GDPR, you have the right to access, correct, delete, or export your personal data, to restrict or object to certain processing, and to withdraw consent where we rely on it. You can delete a specific call's stored recording or transcript yourself at any time from your call logs, without needing to contact us. For any other request, contact us at [PRIVACY CONTACT EMAIL] — we will respond within one month of receiving it, or let you know if a complex request needs up to two further months. You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk if you believe we have not handled your data properly.

8. Children's privacy

Kall It is a business tool intended for use by professional organisations and their staff. It is not directed at, and we do not knowingly collect data from, children.

9. Changes to this policy

We may update this policy from time to time. We'll update the "Last updated" date above, and for material changes we'll make reasonable efforts to notify account owners directly.