Privacy, in plain language.
What CallPal needs to work, and the choices you have.
Service privacy notice · Updated September 23, 2026
CallPal is operated by Edgewater Holdings LLC. Legal business address: 8 The Green STE A, Dover, DE 19901. Submit a privacy request for access, correction, deletion, opt-out or appeal; you do not need to sign in to submit it.
Information used to provide CallPal
Your account includes your name, verified email address or phone number, settings, and payment references. Your messages and call transcripts support conversation history. Saved memories can help personalize future conversations when memory is enabled. Usage records track your balance and help resolve billing problems.
AI and service providers
CallPal uses outside providers to handle sign-in and storage, telephone and text delivery, AI responses, speech processing, and payments. Relevant information is sent to those providers as part of delivering the service. Calls and messages are therefore not private from the systems that process them. Do not share information you do not want processed by AI.
Stripe handles card details in its secure web checkout. When phone payment is available, Twilio Pay handles card details entered through secure keypad prompts; those details are not sent to the AI companion. CallPal stores payment references and transaction history rather than full card numbers. This interface does not include advertising pixels or third-party marketing analytics.
Optional commercial data sharing
Commercial data sharing is disabled in this release. It cannot be activated by a customer choice or a single configuration switch. A future program would require a new reviewed release, recipient contracts, updated disclosures and separate meaningful choices. Conversations and pricing do not depend on agreeing to data sales.
Private conversations, audio, saved memories, and inferred health or bereavement profiles are excluded from partner exports. Existing sharing choices can be withdrawn. Revocation stops future access and requests deletion of previously supplied records; it cannot physically erase a recipient’s copy immediately.
Review or stop data sharing, including when your CallPal account is paused.
Use “Do not sell or share my details” to stop all partner sharing for your account. Global Privacy Control and your saved browser choice are recognized across website pages. When we can associate the request with a signed-in account, we also stop its existing partner grants. Without that association, use the signed-out privacy-request form to identify the records you want covered. No new commercial grants or exports are available.
Service reporting
CallPal keeps account, payment, delivery-cost, and operational records to run the service. Approved staff use a protected admin console. First-party funnel reporting, when enabled, counts fixed events such as viewing prices or starting checkout, with a broad referral source, starter amount variant, and whether you used the direct, quiz, or conversation-preview flow. It does not send conversation content to advertising systems. Optional quiz choices and your prepaid amount stay in a short-lived draft in this browser tab for up to two hours. You review companion settings before saving them to your account; quiz answers are not included in funnel reporting.
When you arrive through a tagged campaign link, CallPal can remember neutral campaign and ad codes during setup and save the first code with your account for internal measurement. These codes help compare advertising costs with verified signups, funding, and completed conversations. We do not collect advertising click IDs, search terms, raw page URLs, audience names, or sensitive profiles for this feature. Global Privacy Control, Do Not Track, and the saved browser opt-out stop this capture. Turning on “Do not sell or share my details” also clears this browser’s saved campaign preference. Campaign codes are not included in partner sharing.
When a funnel test is enabled, its entry page can use a signed cookie for up to two hours to remember the test, selected flow and assignment time. It contains no unique visitor identifier or quiz answers. After a new verified signup, that assignment can be saved with your account for internal purchase and usage comparisons. It appears in your account export. Global Privacy Control, Do Not Track and the saved browser opt-out stop new assignment and measurement. This does not send data to an advertising platform.
Website help and support requests
Messages you send to the website’s AI help assistant are sent to OpenAI together with the current page context so it can help you use CallPal. These help messages are not saved in your CallPal conversation history or memories. If you explicitly submit an account support request, the request and operator replies are saved with your account and may be reviewed by authorized support owners. Usage and cost records for AI help do not contain your message text.
The separate sign-in help page can accept a fixed problem category without an account session. It does not collect contact details, codes or a freeform message. You keep a private reference; our database stores only its hash. Anyone with the reference can see that report’s general reply, so keep it private. It cannot restore login or reveal account information. Reports expire after 14 days and are removed by the next successful cleanup. Limited operator audit records remain; provider backups follow their own retention schedules.
The signed-out billing and account remedy form collects a contact method or payment reference and optional payment date and amount. These claims do not verify ownership. Linked requests appear in your export; unlinked requests can be addressed through Privacy requests. Unresolved requests remain available. After the request is closed, its private status reference remains available for 90 days; cleanup then removes the request unless a documented hold applies. Active billing remedies may be retained during a conversation-erasure request so that refunds can still be handled.
Memories and history are different
Optional memory starts off for new accounts. You can turn it on in Preferences to save ordinary interests and conversation preferences and reuse conversation context from the last 180 days. Existing users keep their saved choice. Memory is account-specific context, not training a new model on your identity. A sensitive-content filter reduces what is proposed as memory but cannot guarantee that every sensitive statement is detected. Review and remove anything you do not want kept.
You can inspect, correct, and remove saved memories, clear all memories, or turn memory off in your account. Removing a memory does not delete the transcript it came from. Clearing all memories also resets the context used for future personalization, so past conversations are not used to recreate those cleared memories.
While finishing a conversation, CallPal may briefly keep proposed memories so an interrupted save can be retried. These proposals appear in your account export. They are removed after saving, ending the interrupted session, or changing your memory choices. Proposals expire after 24 hours and are removed by the next successful cleanup.
Review memories · Manage preferences
Audio and recordings
When you call CallPal, Twilio carries the call and our AI and speech service providers process live audio to understand what you say and generate a spoken response. Audio recording is disabled in this release. Call transcripts are retained for your conversation history, billing support, and personalization when memory is enabled. A transcript is a separate record from an audio recording.
Registration and agreement renewal include explicit consent for this processing during future calls you choose to make. We save the consent version and acceptance time with your account. Before each call, you prepare it in your signed-in account and dial from your verified phone. A connected conversation starts under that saved consent without a repeated spoken notice or keypad step. Call on your own; your consent does not cover someone else who uses your phone or joins the call.
You can stop live processing by hanging up. To withdraw consent for future calls, stop calling and use Privacy requests. Existing transcripts and consent records follow the retention and deletion policy below. Service providers may retain their own operational records under their processing arrangements; the absence of a CallPal audio recording is not a promise that every provider copy is immediately erased.
Your choices
You can stop a call by hanging up, stop conversational texts by replying STOP, disable memory, and turn automatic top-ups off. An account export is available in Preferences. For deletion, correction, an access request you cannot complete, or an appeal, use Privacy requests. Paused accounts can still use the direct export link there.
Retention and deletion
Memory proposals expire after 24 hours. Account and conversation records otherwise remain until a processed request or an enabled retention cleanup removes them. Documented, time-limited legal holds pause applicable cleanup. Optional maintenance removes conversation text and voice transcripts older than 180 days, resolved support content older than one year, and freeform processed-delivery content after 30 days. Automatic retention maintenance is not enabled in this release; those periods are the prepared policy, not a claim that older records have already been erased. Saved ordinary memories remain until you remove them or your account request is processed. Financial, consent, safety restriction and necessary contact-suppression records may remain for documented obligations. Local conversation erasure is separate from provider and Auth cleanup. An operator records the outcome and any retained-record exceptions before completing a request. Backups may retain earlier copies under provider schedules; restored copies must be reviewed for prior deletion requests.
Account security
Use your own email address or phone number, protect access to your inbox and device, and never share sign-in codes. Your transcript is not automatically shared with a family member simply because they help pay. CallPal is intended for adults 18 and older.
Privacy requests and material changes
Privacy requests receive a private reference for general progress. Contact details and descriptions are available to authorized operators; a reference or supplied email alone does not establish account ownership. We aim to respond within 30 days and honor any shorter applicable deadline. Authorized representatives may submit a request, and identity or authority may need verification. After a final decision you may submit an appeal through the same form. We keep restricted completion and exception evidence; when maintenance is enabled, contact details and freeform request descriptions are cleared 90 days after resolution.
For a material privacy-policy change, we will publish the revised notice and its effective date and present an in-account notice before applying a materially different use to existing account data. Where renewed consent is required, affected use remains unavailable until the new choice is obtained. We will not treat continued conversation as permission for a new commercial sale.
Questions about your data?
Visit Help & support for the currently available contact options.