Who we are: CallCalls Corp. (“we”, “us”, “our”), Republic of Panama, Ricardo Arias Street, Advanced Building of the City of Panama, Republic of Panama, 0801.
Contact for privacy: info@callcalls.com
1. About this policy
We run a cloud call-center platform for businesses. This policy explains what personal data we handle, why, for how long, and your rights. It covers two situations:
This policy is written mainly for business customers. If you use the Service as an individual and local mandatory law gives you data rights that cannot be waived, those rights still apply.
2. Data we handle
Account and identity data (we are controller) — names, business email, phone, company details, role, login credentials, API keys, and information we collect to verify your identity or business.
Billing data (we are controller) — balance, transactions, invoices, limited payment metadata. Full card numbers are handled by our payment processor; we do not store them.
Service / technical data (we are controller) — IP address, device and browser information, session and security logs, and a tamper-evident audit trail of sensitive actions.
Customer Data we process on your behalf (you are controller) — CDRs (numbers, time, duration, routing, outcome), call recordings and announcements where you enable them, SIP/call metadata, and contacts, messages, and configuration you load in.
We do not deliberately seek sensitive data, but recordings may incidentally contain it. Handling that lawfully is your responsibility as controller.
3. Why we use data and our legal bases
Where we are controller, we process personal data on the bases permitted by applicable Panamanian law (including Law 81 of 2019 on personal data protection) and, where relevant, other laws: to perform our contract with you; with your consent (for example optional cookies or marketing); to meet legal and accounting duties; and for our legitimate business interests such as security, fraud prevention, and improving the Service, balanced against your rights.
Where you are controller, we process Customer Data only to provide the Service on your instructions and as needed to comply with law.
4. Call recordings — special note
Recording laws differ by country. As the controller of your call data, you decide whether to record, enable the recording announcement where required, and obtain and keep any required notice or consent. We provide the tools and store recordings securely so you can access and manage them.
5. Automated and AI-assisted features
The Service may include automated features such as recording announcements, analytics, transcription, or fraud detection. These help run and protect the Service. We do not use them to make decisions producing legal or similarly significant effects on a person without appropriate safeguards. Where you enable a feature that analyses your call content, you remain its controller and are responsible for any notices or consents required.
6. Who we share data with
We share data only as needed to run the Service, and never sell it: telecom and carrier partners that carry your calls and messages; number (DID) providers; payment processors; hosting and infrastructure providers; notification providers for alerts you enable; and professional advisers, authorities, or an acquirer where the law requires or in a merger/sale, under confidentiality. A current sub-processor list is available on request; where we act as your processor we will tell you before adding a new sub-processor so you can object.
7. Lawful interception and authority requests
We may be legally required to assist with lawful interception or to disclose data to a court, regulator, or law-enforcement authority. We comply with valid requests to the extent the law requires and, where permitted, take reasonable steps to inform the affected controller.
8. International transfers
Where we transfer personal data across borders — for example to route a call to a carrier abroad or to a sub-processor — we do so under the conditions allowed by applicable Panamanian law and use appropriate safeguards and contractual protections.
9. How long we keep data
When data is no longer needed we delete it or irreversibly anonymise it.
10. How we protect data
We use technical and organisational measures appropriate to the risk: encryption in transit and at rest; role-based access and least privilege; multi-factor authentication for administrative access; tenant isolation; a tamper-evident audit trail; and logging and monitoring. No system is perfectly secure; if a breach affects personal data we will notify those required by law.
11. Your rights
Subject to applicable law, you may have the right to access your data, correct it, delete or cancel it, object to or restrict processing, receive it in a portable format, and withdraw consent.
The Service includes tools to help account controllers respond to data-subject requests, including export and erasure. You may also complain to the competent Panamanian data-protection authority.
12. Cookies
We use strictly necessary cookies to run the site and platform, and — only with your consent — optional cookies to improve the Service. You can manage optional cookies at any time.
13. Children
The Service is for businesses and is not directed at children; we do not knowingly collect children’s data.
14. Changes
We may update this policy and will give reasonable notice of material changes. The effective date above shows the latest version.
15. Contact
Company: CallCalls Corp.
Address: Ricardo Arias Street, Advanced Building of the City of Panama, Republic of Panama, 0801
Privacy: info@callcalls.com
General / Support: support@callcalls.com