Privacy Policy

1. Who we are

PayCall, Inc. (“PayCall”, “we”, “us”) operates PayCall.ai and related services (together, the “Service”). This Privacy Policy explains how we process personal data when you visit our websites, create an account, or use product features.

Controller for the purposes of the EU/UK General Data Protection Regulation (“GDPR”) and similar laws is PayCall, Inc., with the postal address shown in the “Contact” section below.

2. Scope

This policy applies to personal data we process in connection with the Service. It does not apply to third-party websites, applications, or services that we do not control, even if they are linked from the Service.

3. Data we collect

Depending on how you use the Service, we may process the following categories of personal data:

• Account and profile data: for example email address, name (if provided), authentication identifiers, subscription or plan information, and communication preferences.
• Content and usage data: messages, prompts, files, or other materials you submit to the Service, as well as technical logs associated with requests (such as timestamps, approximate device or browser information, and error diagnostics).
• Billing data: where you purchase a paid plan, payment-related information is handled by our payment processor; we typically receive limited billing metadata (for example subscription status and transaction references), not your full card number.
• Cookies and similar technologies: as described in our Cookie Policy, including essential cookies for security and sign-in, locale preferences, and—only if you consent—analytics cookies.

4. Purposes and legal bases (EEA/UK/Switzerland)

Where GDPR applies, we rely on the following legal bases, depending on the activity:

• Performance of a contract (Art. 6(1)(b) GDPR): providing and operating the Service, authenticating users, and fulfilling requests you make.
• Legitimate interests (Art. 6(1)(f) GDPR): securing the Service, preventing abuse and fraud, improving reliability and performance, and understanding aggregate usage—where we have balanced these interests against your rights.
• Consent (Art. 6(1)(a) GDPR): optional analytics cookies, and other processing where we expressly ask for your consent.
• Legal obligation (Art. 6(1)(c) GDPR): retaining or disclosing information where required by applicable law, court order, or regulatory request.

5. AI features and third-party providers

Certain features send prompts or files to third-party model and infrastructure providers so they can generate responses or host data. Those providers act as processors or sub-processors on our instructions, subject to contractual safeguards. They process only what is needed to deliver the feature you use.

Model output is generated automatically and may be inaccurate or incomplete. You should not rely on it as professional, legal, medical, or financial advice.

6. Recipients and international transfers

PayCall, Inc. is based in the United States. Personal data may be processed in the U.S. and in other countries where we or our service providers operate. Where GDPR requires safeguards for transfers from the EEA, UK, or Switzerland to countries without an adequacy decision, we use appropriate mechanisms such as the EU Commission Standard Contractual Clauses (and UK/CH addenda where applicable), supplemented by technical and organizational measures as appropriate.

7. Retention

We retain personal data only as long as necessary for the purposes described in this policy, including to provide the Service, comply with legal obligations (for example tax or accounting rules), resolve disputes, and enforce our agreements. Retention periods may vary depending on the type of data and legal requirements.

8. Your rights

Depending on your location, you may have the right to access, rectify, or erase your personal data; to restrict or object to certain processing; to data portability; and to withdraw consent where processing is based on consent. You may also have the right to lodge a complaint with a supervisory authority.

To exercise these rights, contact us using the details below. We may need to verify your identity before responding. You will not usually have to pay a fee, but we may charge a reasonable fee or refuse manifestly unfounded or excessive requests as permitted by law.

9. Security

We implement appropriate technical and organizational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, or unauthorized access. No method of transmission over the Internet or electronic storage is completely secure.

10. Children

The Service is not directed at children under the age at which parental consent is required in your jurisdiction. We do not knowingly collect personal data from such children. If you believe we have collected data from a child inappropriately, please contact us.

11. Changes and contact

We may update this Privacy Policy from time to time. We will post the revised version on this page and update the “Last updated” date. Where changes are material, we will provide additional notice as required by law.

For privacy requests or questions, you can reach us at the postal address below. If we publish a dedicated privacy contact email for the Service, it will be shown on this page or in the Impressum / contact section.