Legal

Privacy Policy

This policy explains what information Kall8 collects, how we use it, and the choices you have — including how we handle Google user data.

Last updated: July 7, 2026

1. Overview

Kall8 (“Kall8”, “we”, “us”) provides an AI voice-calling platform for businesses: outbound calling campaigns, appointment booking, reminders, follow-ups, and a 24/7 inbound receptionist. This Privacy Policy applies to our website, web application, and related services (the “Services”). By using the Services you agree to the practices described here.

2. Data we collect

We collect the following categories of information:

Account data — name, email, password hash, organization details, and role, provided when you register or are invited.
Billing data — wallet balance, transactions, and top-ups. Card and PayPal payments are processed by our payment providers; we do not store full card numbers.
Contact & campaign data — the contact lists, phone numbers, scripts, and call outcomes you upload or generate to run calls.
Call data — call metadata (times, duration, direction, cost), transcripts, and recordings where enabled.
Integration data — credentials and data from third-party services you connect, such as Google Calendar (see Section 4).
Technical data — IP address, device/browser information, and log data used to operate and secure the Services.

3. How we use data

We use the information we collect to:

Provide, operate, and maintain the Services and your account;
Place and receive calls, book appointments, and deliver reminders and follow-ups;
Process billing, prevent fraud, and enforce our terms;
Provide support and communicate service and security notices;
Improve reliability and quality of the Services.

We do not sell your personal information, and we do not use it for advertising.

4. Google user data

If you connect Google Calendar, you authorize Kall8 to access limited Google Calendar data so appointments booked in Kall8 (via the portal or the AI receptionist) can be created, updated, and deleted on your connected Google Calendar.

What we access and why

Calendar events — we request only the https://www.googleapis.com/auth/calendar.events scope to create, update, or delete appointment events that you or your callers confirm in Kall8.

Availability for phone and portal booking is computed from your Kall8 business hours and existing Kall8 appointments. We do not use Google Calendar free/busy or calendar list access for booking.

How we store and protect it

OAuth tokens are stored encrypted at rest and are used only to perform the calendar actions described above. We request the minimum scopes necessary and access calendar data only to provide user-facing features you have enabled.

Limited Use disclosure

Kall8’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, we do not use Google user data for serving advertisements, we do not sell it, we do not transfer it to third parties except as necessary to provide or improve the calendar feature, to comply with applicable law, or as part of a merger or acquisition, and we do not use it to develop, improve, or train generalized or non-personalized AI and/or machine-learning models. Human access to Google user data is prohibited except with your explicit consent, for security or to comply with law, or where the data has been aggregated and anonymized.

Google Calendar event data retrieved or written through Google APIs is not sent to third-party AI providers to train foundational or generalized machine-learning models. AI features in Kall8 (voice agents, call summaries, and copilots) process data that belongs to Kall8 accounts — such as call transcripts and local booking results — not Google Calendar event payloads for model training. Those features may use subprocessors including OpenAI, Google Gemini, Groq, Retell, and Vapi under their applicable service terms. Kall8 does not operate self-hosted AI models for Google user data.

Revoking access

You can disconnect Google Calendar at any time from your portal Calendar page, or revoke access directly in your Google Account permissions. Revoking access stops further calendar access and we delete stored tokens.

5. Calls and contact data

You are responsible for having a lawful basis (such as consent) to contact the people on your calling lists and to record calls where recording is enabled, in accordance with applicable laws. We process this data as your service provider to deliver the calling features you configure.

7. Data retention and deletion

We retain data for as long as your account is active or as needed to provide the Services, comply with legal obligations, resolve disputes, and enforce agreements. You may request deletion of your account and associated personal data by contacting us at privacy@kall8.app. We will delete or anonymize the data within a reasonable period, except where retention is required by law.

8. Security

We use industry-standard safeguards including encryption in transit, encryption at rest for sensitive credentials, access controls, and audit logging. No method of transmission or storage is completely secure, but we work to protect your information and continuously improve our controls.

9. Your rights and choices

Depending on your location, you may have rights to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise these rights, contact us at privacy@kall8.app. We will respond consistent with applicable law. This policy may be updated from time to time; material changes will be posted on this page with a new “Last updated” date.

10. Contact us

Questions about this Privacy Policy or your data? Email privacy@kall8.app or support@kall8.app.