Privacy Policy

CallCompanion (“we”, “us”) is a call-screening service operated by All Spark Enterprises Ltd., Devlin, Ontario, Canada. This policy explains what personal information we collect, how we use it, and your rights under Canada’s Personal Information Protection and Electronic Documents Act(PIPEDA) and Quebec’s Law 25.

Two kinds of people this covers

Business customers — the businesses that subscribe to CallCompanion. We collect your name, business name, email, phone number, and (when you subscribe) billing details processed by our payment provider.

Callers— people who phone a business that uses CallCompanion. On behalf of that business, we collect the caller’s phone number, any voice recording or voicemail, an automated transcript and summary of what they said, and any details they provide (such as their name and reason for calling). Callers are told at the start of every call that it may be recorded and handled by an automated assistant.

Everything we collect — including automatically

Beyond what you or a caller tells us directly, we (and the providers that run the service) also collect data automatically:

• Technical & device data: IP address, browser and device type, operating system, and general diagnostic/usage logs when you use the web app.
• Approximate location: inferred from your IP address and from the area code of a phone number — we do not use precise GPS.
• Login & session data: authentication cookies that keep you signed in.
• Call & message metadata: caller/recipient phone numbers, the number that was called, date, time, duration, delivery/answer status, and (where used) the carrier line type of a number.
• Content & derived data: call recordings and voicemails, automated transcripts, AI-generated summaries, and classifications such as urgency or topic.
• Billing data: your billing contact and card details, which are collected and stored by our payment processor (we never see or store full card numbers).

How we use it

Solely to provide the service: greeting callers, transcribing and classifying their message, routing urgent calls, sending callback texts, and showing the business owner their call queue and history. We do not sell personal information, and we do not use call content for advertising.

Who we share it with (sub-processors)

We use a small set of trusted third-party companies strictly to run the service — Supabase (database, Canada region), Vercel (hosting), Twilio (calls & texts), ElevenLabs and Google (the real-voice AI), Anthropic and OpenAI (transcription & classification), Stripe (payments), and Cloudflare (DNS). The full list — what each one does, the data it handles, where it operates, and links to its policies — is on our sub-processors page. We do not sell personal information.

AI & model training: Anthropic and OpenAI do not use data sent through their APIs to train their models. For the ElevenLabs real-voice add-on, we minimise how conversation data is stored: voice conversations are set to be deleted after 30 days and the call audio recording is removed, so your data is retained only as long as needed to run the service.

Where your data lives (cross-border)

Call records and account data are stored in Canada (Supabase, Canada Central region). Some processing — transcription and AI classification — is performed by providers that may operate servers in the United States, so limited call content may be processed outside Canada. By using the service you consent to this transfer, which we disclose in line with Quebec Law 25.

Retention & deletion

We keep call records while a business account is active so the owner can review their history. A business customer may request deletion of their account, and a caller may ask the business (or us) to delete a record concerning them.

Right to erasure: on a verified request, we run a deletion process that removes the personal information associated with an email address or phone number from our database and, where applicable, from the sub-processors that hold it (for example, call recordings and message logs at Twilio, voice-conversation records at ElevenLabs, and the billing profile at Stripe). We keep only a minimal audit record that the deletion was carried out, plus anything we are legally required to retain.

Your rights

Under PIPEDA and Law 25 you may request access to the personal information we hold about you, ask us to correct it, withdraw consent, or request deletion. Contact us using the details below and we will respond within the timelines the law requires.

Security

Data is transmitted over encrypted connections and stored with access controls (row-level security scoping each business to its own data). No system is perfectly secure, but we take reasonable measures to protect your information.

Age

Business accounts are for users 18 or older operating a business.

Contact & privacy officer

Questions or requests: stephenlavoie@allsparkenterprisesltd.com, All Spark Enterprises Ltd., Devlin, Ontario, Canada.