Privacy Policy

1. Scope and accountability

This Privacy Policy explains how GetCallAssistant ("GetCallAssistant," "we," "us," or "our"), operating from Ontario, Canada, handles personal information through getcallassistant.com, our live demonstration phone line, our one-time setup and handover services, and any later work a client separately requests. It is intended to reflect the principles of Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and other applicable Canadian privacy requirements.

Our Privacy Officer is responsible for our privacy practices. Questions, access requests, corrections, withdrawals of consent, or complaints may be sent to hello@getcallassistant.com or made by phone at +1 (346) 521-3995.

2. Personal information we collect

Website inquiries

When you submit our form or contact us, we may collect your name, telephone number, email address, business type, information about missed calls or workflows, and the content of your messages.

Live demonstration calls

A demonstration call may collect the calling number, date, time, duration, audio recording, transcript, call summary, responses you provide, inferred lead status, and technical call metadata. The demonstration is for testing only. Please use fictional or non-sensitive test details and do not provide health, financial, government identification, payment, password, or other confidential information.

Client setup, handover, and later change requests

If you become a client, we may collect business contact details, approved service information, hours, service areas, frequently asked questions, call-handling instructions, account and integration information, test-call information, invoices, handover records, and information needed for any later work you request. Credentials should be shared only through an agreed secure method.

Website and device information

Our hosting and security providers may process IP address, browser and device type, requested pages, timestamps, referring pages, and diagnostic or security logs. If you accept analytics, Microsoft Clarity may also collect interaction information such as page views, clicks, scrolling, and session diagnostics using cookies or similar technologies.

3. Why we use personal information

We use personal information only for reasonable and identified purposes, including to:

• respond to inquiries and assess whether a setup fits a business;
• provide, test, troubleshoot, secure, and improve the website and demonstration;
• design, configure, test, launch, and hand over an agreed call workflow;
• deliver call notifications, summaries, transcripts, and recording links;
• perform corrections required to match the agreed setup scope;
• assess and perform later changes only when separately requested by a client;
• manage accounts, proposals, contracts, billing, and business records;
• detect spam, abuse, fraud, security incidents, and service misuse;
• comply with law, enforce agreements, and establish or defend legal claims; and
• analyze website use only where analytics consent has been given.

We do not sell or rent personal information. We do not use inquiry or demonstration data for unrelated advertising. A response to your specific request is not enrolment in a marketing list. Any future marketing messages will follow applicable consent and unsubscribe requirements.

4. Consent and recording notice

We seek meaningful consent appropriate to the information and context. By submitting the inquiry form, you authorize us to use the submitted information to respond to and follow up on that request. By continuing a demonstration call after the recording notice, you consent to the call being processed, transcribed, analyzed, and recorded for the purposes described here. If you do not agree, do not continue the call; you may contact us by email instead.

Consent may be withdrawn subject to legal, contractual, and technical restrictions. A withdrawal does not invalidate processing already performed with valid consent and may prevent us from providing a requested feature.

5. Service providers and international processing

We use service providers to operate the website and demonstration, and we configure providers selected or approved for client phone workflows. Provider categories include website hosting and security, voice-AI and telephony platforms, model providers, notification and messaging services (including Telegram), analytics providers (Microsoft Clarity and Facebook Pixel, only after consent), and professional advisers where needed. Provider terms and privacy practices also apply.

Some providers and their systems are located outside Ontario or Canada, including in the United States. Information processed in another jurisdiction may be accessible to courts, law enforcement, or regulators under that jurisdiction's laws. Contact our Privacy Officer if you would like more information about relevant service-provider categories or processing locations.

6. Retention

We apply the following general retention approach, subject to legal holds and contractual needs:

• website inquiries that do not become clients: normally up to 24 months;
• our live-demo recordings, transcripts, and analyses: normally up to 90 days;
• client configuration, test, and handover records: for the project and a reasonable transition period, unless longer retention is required by contract or law;
• records of a later change request: for the requested work and a reasonable recordkeeping period;
• contracts, invoices, and records required for tax or legal purposes: for the legally required period; and
• security and technical logs: for as long as reasonably necessary for security and diagnostics.

Information is deleted, anonymized, or securely disposed of when no longer required. Residual copies may remain temporarily in protected backups or provider systems.

After handover, client-controlled production accounts and their call-data retention are managed by the client and the selected providers. We do not routinely access those accounts or call records after project completion. If a client later asks for assistance, we access only the information reasonably needed for the agreed task and only while the client authorizes that access.

7. Safeguards and incidents

We use administrative, technical, and organizational safeguards appropriate to the sensitivity of the information, including access restrictions, authenticated provider accounts, encrypted transmission where supported, webhook signature verification, and service-provider controls. No internet, telephone, or storage system is completely secure. If a breach creates a real risk of significant harm, we will take the notification, reporting, and record-keeping steps required by applicable law.

8. Your choices and rights

You may ask whether we hold personal information about you and request access, correction, or deletion, subject to lawful exceptions. We may need to verify your identity. If access is refused, we will explain the reason where permitted. You may change the analytics choice by clearing this site's local storage and revisiting the site.

Please raise privacy concerns with our Privacy Officer first so we can investigate. You may also contact the Office of the Privacy Commissioner of Canada regarding PIPEDA concerns.

9. Client-controlled systems, children, third-party sites, and changes

Once a production setup is handed over, the client is responsible for its ongoing use, caller notices and consent, access permissions, retention choices, and privacy compliance. A client's own privacy policy should accurately describe how its business uses the assistant and caller information.

The site and demonstration are intended for business users and are not directed to children under 18. Links to third-party sites are governed by those parties' privacy practices. We may update this policy to reflect operational or legal changes. The effective date above will identify the current version, and material changes will be highlighted where appropriate.