Privacy policy

Who is responsible

The controller for the processing of personal data on this website and in the Call Helper app is Aleksandr Zalesov, Ritterlandweg 3, 13409 Berlin, Deutschland.

Email: info@call-helper.eu

What data we process

• Account: an anonymous user ID created when you first open the app. When you sign in with Google or an email link, your email address and, with Google, the name and profile picture of your Google account.
• Tasks and chat: what you write to the assistant, its replies, the details of your tasks, and the searches it runs for you with their results.
• Places to call: the names, addresses, websites and phone numbers of the businesses or people to call, and what the assistant should ask or say.
• Calls: the number dialled, time, duration, outcome and cost, the transcript and the audio recording. They contain the voice and the words of the person who answers.
• Payments: your balance, top-ups and the charge of each call. You pay by card on Stripe's page; we do not receive your card number.
• Notifications: if you allow them, the push subscription of your browser, so we can tell you when a task is finished or needs you. With a permanent account and a confirmed email address, we also send these notices by email.
• Saved contact details: only if you agree in the chat, the assistant remembers your name, phone number, email and address for your next tasks, to ask you less. You can see and delete them in the side panel of the app; deleting your account data at our contact address deletes them too.
• Technical data: records of requests and errors kept by our servers and hosting, which can include your IP address, and the time zone and language of your browser. A request you type on the start page reaches the app in the page address, so it can appear in these records.

You give us the data a task needs; without them the assistant cannot prepare the task or make the call. No law obliges you to provide them.

Why we process it

• To provide the service you ask for: to run the assistant, make the calls, show the results and keep your balance (Art. 6 (1) (b) GDPR).
• To keep payment records required by tax and commercial law (Art. 6 (1) (c) GDPR).
• To keep the service secure, prevent abuse and fix errors, which is our legitimate interest (Art. 6 (1) (f) GDPR).

The people we call on your behalf: we process their voice and words to carry out your task, in your and our legitimate interest (Art. 6 (1) (f) GDPR). The assistant tells them at the start of the call that it is an AI assistant calling on behalf of a client.

We make no automated decisions with legal or similarly significant effects on you (Art. 22 GDPR).

Sensitive data

A task may include data about your health, for example to book a doctor's appointment. We process such data only for the task you give it for. Legal basis: your explicit consent (Art. 9 (2) (a) GDPR), which you give with the checkbox before the task starts. You can withdraw it at any time: stop the task and ask us to delete its data at info@call-helper.eu. The withdrawal does not affect the processing before it. Please do not enter sensitive data about other people.

If we called you

If Call Helper called you, it did so on behalf of one of our users. Your number came from Google Places, a web search or the user. We keep the number, the audio recording and the transcript of the call; the recording is deleted 30 days after the call. For calls to numbers in Germany we store no audio recording in Call Helper, only the transcript; our call provider ElevenLabs deletes its copy 30 days after the call. You can object and ask us to delete these data by writing to info@call-helper.eu.

How the assistant introduces itself on a call is described in the AI disclosure.

Who processes data for us

These providers process data on our behalf. Which language model handles the chat with the assistant and its decisions on the task depends on the current settings; their content is sent to it. The business or person we call on your behalf hears what the task needs.

• Google Cloud and Firebase (Google): hosting, database, file storage, sign-in and scheduling. Database, files and scheduling in Frankfurt (Germany), app servers in the Netherlands; sign-in: global, including the USA.
• Google Cloud Vertex AI: the language model (Claude) for the assistant and its decisions on the task, when selected. Netherlands.
• OpenRouter: a router to the language model for the assistant and the call reports, and the web search through Exa; it forwards each request to the model provider it selects. USA.
• Exa: the web search for the assistant; OpenRouter forwards the search queries to it. USA.
• Anthropic: the language model (Claude) for the assistant and its decisions on the task, when selected. USA.
• Google Gemini API: the language model for the assistant and its decisions on the task, when selected. Global, including the USA.
• ElevenLabs: conducts the calls with its AI voice agent and its own language model, and makes the transcripts and recordings. USA.
• Zadarma: the telephone line. EU.
• Google Maps Platform: the search for places and the map. Global, including the USA.
• Stripe: card payments; Stripe also processes payment data as a controller under its own privacy policy. USA and other countries.
• Resend: sends the email notifications. EU.
• The push service of your browser (for example Google for Chrome, Mozilla for Firefox, Apple for Safari): delivers the notifications you allowed. The content is encrypted so that only your browser can read it. Depends on your browser, mostly the USA.

Transfers outside the EU

Some of these providers process data outside the EU and the EEA, mainly in the USA. These transfers are protected as follows:

• Google (hosting, sign-in, Gemini API, Maps): Google LLC is certified under the EU-U.S. Data Privacy Framework, for which the European Commission has adopted an adequacy decision; Google's data processing terms also contain the EU standard contractual clauses.
• OpenRouter: the EU standard contractual clauses in its data processing agreement. Exa receives search queries from OpenRouter under OpenRouter's terms.
• Anthropic: the EU standard contractual clauses in its data processing addendum.
• ElevenLabs: certified under the EU-U.S. Data Privacy Framework; its data processing agreement also contains the EU standard contractual clauses.
• Stripe: Stripe, Inc. is certified under the EU-U.S. Data Privacy Framework and also uses the EU standard contractual clauses.
• Push services: run by the vendor of your browser under its own terms; they receive only the encrypted notification and the address of your browser's subscription.

You can ask us for a copy of these safeguards at info@call-helper.eu.

How long we keep data

• Call recordings: deleted 30 days after the call. For calls to Germany none is stored in our app.
• Your tasks, chats, transcripts and saved contact details: kept with no fixed end date; we delete them when you ask us at info@call-helper.eu. An anonymous account is deleted by our sign-in provider 30 days after it is created; the tasks made with it stay until you ask us to delete them.
• Payment records: at least as long as German tax and commercial law requires, up to 10 years (§ 147 AO, § 257 HGB).
• Technical records of our servers: deleted by Google Cloud Logging after 30 days.
• Push subscriptions: deleted when your browser's push service reports them expired; a notification not yet delivered is dropped after 24 hours.
• Copies of calls kept by ElevenLabs: deleted 30 days after the call.

Security

Data travels encrypted (HTTPS) between your browser, our servers and our providers' interfaces; the phone call itself runs over the telephone network, which is not encrypted. Google encrypts the database and the stored files. In the app, only you can see your tasks; the operator's administrators can see them to help you and to fix errors. We never receive your card number.

Your rights

You have the right to access your data, to have it corrected or deleted, to restrict its processing, to receive it in a portable format, and to object to processing based on our legitimate interest (Art. 15–18, 20, 21 GDPR). Where we process data with your consent, you can withdraw it at any time; this does not affect the processing before. To use these rights, write to info@call-helper.eu.

You can also complain to a data protection supervisory authority, in particular in the EU country where you live or work. The authority responsible for us is the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit).

Children

Call Helper is for adults. Do not use it if you are under 18. If we learn that a child has given us personal data, we delete them.

Cookies and browser storage

We use only what the site needs to work. There are no analytics, advertising or tracking cookies.

• The cookie "locale" remembers the language you chose, for one year. It is set only when you pick a language.
• Firebase keeps your sign-in session in your browser's storage so you stay signed in.
• When you ask for a sign-in link, your email address is kept in your browser's local storage so the link can sign you in.

When the app shows search results on a map, the map is loaded from Google, which receives your IP address. Payments happen on Stripe's page under Stripe's own privacy policy.

Changes to this policy

We update this policy when the service or our providers change. The current version is always on this page.