Privacy Policy

This Privacy Policy explains how HeyCall collects, uses, shares, and protects information when you visit the website, create an account, verify a phone number, complete verification, add wallet credit, place calls, save contacts, use call logs, or contact support.

This Policy applies to HeyCall's web app and related services. Third-party providers, payment processors, telecom providers, and external websites may have their own privacy practices.

Account information may include your phone number, verification status, name, email if collected or generated by the authentication provider, workspace membership, role, settings, session details, and authentication events.

Verification information may include whether you are using HeyCall as an individual or business, your legal or business name, address, website, contact details, intended use case, documents, review status, admin notes, and audit history.

Calling information may include caller ID, destination number, country or route information, timestamps, duration, call state, failure reason, provider identifiers, call control identifiers, token creation records, webhook payload references, and cost or rating information.

Billing information may include wallet balance, wallet transactions, Stripe Checkout session IDs, payment intent IDs, currency, amount, credits, debits, refunds, adjustments, chargeback or payment risk signals, and related metadata.

Contacts information may include names, phone numbers, optional email addresses, notes, favorite status, and last-called timestamps that you choose to save in your workspace.

Technical information may include IP address, device and browser information, logs, cookies, session identifiers, rate-limit keys, error diagnostics, and security events.

We use information to create and secure accounts, verify phone numbers, create workspaces, provide browser calling, select compliant caller IDs, route calls, maintain call logs, manage contacts, process wallet credit, debit call costs, prevent abuse, enforce limits, troubleshoot issues, and provide support.

We also use information to meet legal, telecom, billing, security, fraud-prevention, sanctions, provider, tax, accounting, and compliance obligations.

We share information with service providers that help operate HeyCall, including hosting, database, authentication, SMS or OTP delivery, telecom, payment processing, storage, logging, analytics, fraud prevention, support, and professional services providers.

We may share information with Telnyx and other telecom providers to create calling credentials, place calls, receive webhook events, manage caller IDs, troubleshoot routing, investigate abuse, or satisfy provider requirements.

We may share information with Stripe and payment providers to process wallet top-ups, reconcile transactions, handle disputes, prevent fraud, and maintain billing records.

We may disclose information if required by law, legal process, provider compliance request, emergency safety concern, fraud investigation, rights enforcement, corporate transaction, or to protect users, HeyCall, providers, or the public.

HeyCall's standard outbound calling product is designed around call metadata and provider events. Call recording is not enabled by default.

If recording, transcription, AI summaries, or call-content features are added later, HeyCall will add product controls, notices, consent flows, retention settings, and additional policy language before enabling those features.

We keep information for as long as needed to provide the service, maintain accounts and wallet records, support call logs, comply with legal and telecom obligations, resolve disputes, enforce policies, prevent fraud, and keep business records.

We may retain certain billing, fraud, webhook, call, verification, and audit records after an account closes where retention is necessary for compliance, security, accounting, dispute resolution, provider requirements, or legal defense.

We use administrative, technical, and organizational safeguards designed to protect information, including server-side secret handling, webhook signature verification, protected routes, permission checks, private storage for sensitive files, rate limits, and audit records.

No internet or telecom service can be guaranteed to be completely secure. You are responsible for protecting your device, browser session, OTP codes, and account access.

You can update certain account, contact, and workspace information in the app. You can delete saved contacts where the product supports deletion.

You can contact support@heycall.app to request access, correction, deletion, export, or restriction of your personal information. We may need to verify your identity and may retain information where required for legal, billing, security, provider, or compliance reasons.

HeyCall is built for international calling, and information may be processed in countries other than where you live. Providers involved in telecom, hosting, payments, authentication, and support may process information in different jurisdictions.

By using HeyCall, you understand that information may be transferred, stored, and processed where HeyCall and its providers operate.

HeyCall is not intended for children. You must be old enough to form a binding agreement and to use calling services lawfully in your location.

We may update this Privacy Policy as HeyCall, provider requirements, or legal obligations change. If changes are material, we will take reasonable steps to notify users through the product, website, or account contact channels.

Questions about privacy can be sent to support@heycall.app.