Last updated 21 October 2026
Privacy policy
Callio gives you AI voice agents you can talk to. That means we handle personal things: what you say, what your agents remember about you and when they should call. This page explains what we collect, why, who else is involved and what you can do about it.
The short version
- Your Callio agents are AI. They are not people.
- In-app call audio goes straight from your browser to Google’s Gemini AI. We don’t record audio. We keep a text transcript and a one-sentence summary so your agent can remember the call.
- We don’t sell your data and we don’t show ads. We only use analytics (Google Analytics) if you allow it in the cookie banner.
- We don’t use your conversations to train AI models.
- You can export your data or delete your account at any time in the app. Deletion removes your memory, transcripts and schedules within 30 days.
Who is responsible
The controller responsible for your personal data under the EU General Data Protection Regulation (GDPR) is:
[YOUR FULL NAME]
[STREET AND NUMBER], [POSTCODE CITY], Germany
Email: [email protected]
For anything about your data, write to the email above. Full contact details are in our imprint.
How calls and AI processing work
Here is what happens, in plain language, when you talk to an agent.
In-app calls
- When you start a call, your browser asks for microphone access. Your voice is streamed directly from your browser to Google’s Gemini Live API. Our servers don’t receive the raw audio.
- Before the call, we give the AI the context it needs: your agent’s personality, things it remembers about you and anything scheduled. Google processes this to generate the agent’s replies.
- During and after the call, we store a text transcript of what was said and a one-sentence summary. We do not store audio recordings of your calls.
- Your agent may save short facts about you as “memory” (for example, your partner’s name or that you prefer morning calls). You can see and delete these.
Tools your agent can use
- Web search. When you ask something that needs current information, the agent sends a search query through Google Search grounding through the Gemini API.
- Weather. Only the place name is sent to Open-Meteo. Nothing that identifies you.
- Computer tasks (paid plans). An AI controls a cloud browser to fill in forms, book or compare things for you. The websites it visits receive whatever the task needs, such as your name for a booking. The agent never enters passwords or payment details, and it asks you to approve sensitive steps.
- Scheduled calls and reminders are delivered as Web Push notifications through your browser’s push service.
Phone calls (coming later)
When real phone calls launch, call audio will travel through our telephony provider, Telnyx. Agents that call a business or another person on your behalf will say at the start that they are an AI. The other person’s words become part of the transcript. We will update this policy before phone calling goes live.
Sensitive topics
You decide what to tell your agent. If you share sensitive information, such as details about your health, we only use it to give you the conversation and memory you asked for. By choosing to share it, you give us your explicit consent to process it for that purpose (Art. 9(2)(a) GDPR). You can delete it at any time.
What we collect
- Account data. When you sign in with Google, we receive your name, email address, profile picture and Google account ID. We don’t receive your Google password.
- Call content. Text transcripts of your calls, one-sentence summaries, call times and durations. Audio is processed by Google in real time but not stored by us.
- Memory. Facts your agents save about you, and any text you choose to import from another AI assistant (for example an export from ChatGPT, Claude or Gemini).
- Schedules. Calls and reminders you set up, with their times and topics.
- Push subscription. If you allow notifications, a push address for your browser and device.
- Computer tasks. Your instructions, the steps the agent took and the results.
- Usage and credits. Your plan, credit balance and how credits were used.
- Payment metadata. Stripe handles your payment. We receive limited information from Stripe, such as your customer ID, what you bought, the amount, the status and your country for tax. We never see your card details.
- Google Calendar (optional). If you connect it, access to the events on your primary calendar, so your agents can tell you what's on and, when you ask, add or move events. We store an encrypted access token, not a copy of your calendar.
- Technical logs. IP address, browser type, timestamps and error logs, which our hosting providers create when you use the site.
Why we use it and our legal bases
We only use your data where the law gives us a reason (a “legal basis”).
| What we do | Legal basis |
|---|---|
| Create your account, run calls, keep transcripts, summaries and memory, run schedules and computer tasks | Performance of our contract with you (Art. 6(1)(b) GDPR) |
| Manage your plan, credits and purchases | Contract (Art. 6(1)(b)) and legal obligations such as tax records (Art. 6(1)(c)) |
| Import memory from another AI assistant | Your consent (Art. 6(1)(a)), given when you paste and confirm the import |
| Measure how the website is used (Google Analytics) | Your consent (Art. 6(1)(a) GDPR and §25(1) TDDDG), given in the cookie banner. Withdraw it any time with “Cookie settings” at the bottom of every page |
| Send push notifications | Your consent (Art. 6(1)(a)), given when you allow notifications |
| Read and, when you ask, update your Google Calendar | Your consent (Art. 6(1)(a)), given when you connect it |
| Sensitive information you choose to share | Your explicit consent (Art. 9(2)(a)) |
| Keep the service secure, prevent abuse and fraud, fix bugs using technical logs | Our legitimate interest in a safe, working service (Art. 6(1)(f)) |
| Answer your messages and support requests | Contract (Art. 6(1)(b)) or our legitimate interest in responding (Art. 6(1)(f)) |
| Defend or enforce legal claims | Legitimate interest (Art. 6(1)(f)) |
You can withdraw consent at any time, for example by turning off notifications, disconnecting your calendar or deleting imported memory. This doesn’t affect processing that happened before.
Google user data
Callio's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
- What we access. With Google sign-in: your name, email address and profile picture. If you connect Google Calendar: the events on your primary calendar (title, time, location, description, guests and video link), and permission to create events and change their times.
- How we use it. Only to provide features you use: signing you in, and letting your agents tell you about your schedule, prepare briefings you've set up, and add or move events when you ask. Calendar details are passed to Google's Gemini API during your call so the agent can answer you.
- What we never do. We don't sell Google user data, use it for advertising, or use it to train or improve general AI or machine-learning models. People at Callio don't read it, unless you ask us to for support, it's needed for security or to investigate abuse, or the law requires it.
- Your control. Disconnect Google Calendar any time in the app under You, then Connections, or from your Google Account's third-party access page. We delete our access token straight away.
How long we keep data
- Account, memory, transcripts, summaries and schedules: for as long as you have an account, or until you delete them. You can delete individual items at any time.
- When you delete your account: we delete your memory, transcripts, schedules and account data within 30 days. Records we must keep by law, such as tax and accounting records, are kept for the legally required period (in Germany usually up to 10 years). Most purchase records are kept by Stripe as merchant of record.
- Push subscriptions: until you turn off notifications or the browser invalidates them.
- Technical logs: 30 days, unless we need them longer to investigate a specific security incident.
- Audio: we don’t store call audio. Google processes audio to run the conversation under its API terms.
Who receives your data
We use a small number of service providers. Processors may only use your data on our instructions and under a data processing agreement. Independent controllers use data under their own privacy policies.
| Provider | Purpose | Data | Location | Role |
|---|---|---|---|---|
| Google (Gemini API) | Runs the AI: live voice conversation, transcripts, summaries, memory and computer tasks | Call audio (streamed from your browser), conversation text, memory and context we send with a request | USA and other Google locations | Processor |
| Google (Sign-In) | Lets you sign in with your Google account | Your name, email address, profile picture and Google account ID | USA and other Google locations | Independent controller |
| Vercel Inc. | Hosts the Callio website and web app | IP address, browser details and request logs | USA and global edge network | Processor |
| [HOSTING PROVIDER of the Dokploy server, e.g. Hetzner Online GmbH, Germany] | Runs our backend and PostgreSQL database | Everything stored in your account | [SERVER LOCATION — e.g. Germany (EU)] | Processor |
| Stripe (via Link), merchant of record | Sells you plans and top-ups, takes payment, handles tax, invoices and refunds | Name, email, billing address, payment details, purchase history | Ireland, USA | Independent controller |
| Your browser's push service (e.g. Google, Mozilla, Apple, Microsoft) | Delivers scheduled call and reminder notifications | A push address for your device and the encrypted notification | Depends on your browser | Independent controller |
| Google Ireland Limited (Google Analytics 4) | Counting visits and seeing how people use the website, only if you allow it | Pages viewed, device and browser type, approximate location, and a random ID stored in a cookie | EU and USA | Processor |
| Open-Meteo | Weather lookups when you ask an agent about the weather | Only the place name. No account details are sent | [OPEN-METEO LOCATION — confirm] | Processor |
| Cloudflare, Inc.May be used | AI and cloud browser services for computer tasks | Task instructions and the web pages the agent works on | USA and global network | Processor |
| Telnyx LLCWhen phone calling launches | Real phone calls to and from phone numbers | Phone numbers, call audio in transit, call metadata | USA and other Telnyx locations | Processor |
We may also disclose data where the law requires it, for example to authorities with a valid legal order. We never sell your personal data.
International transfers
Some providers above process data in the United States or other countries outside the EU/EEA. For transfers to the US, we rely on the EU-US Data Privacy Framework where the provider is certified under it (Art. 45 GDPR). Otherwise, we use the European Commission’s Standard Contractual Clauses (Art. 46(2)(c) GDPR), plus extra safeguards where needed. You can ask us for a copy of the relevant safeguards.
| Provider | Safeguard |
|---|---|
| Google (Gemini API) | EU-US Data Privacy Framework where the provider is certified, otherwise EU Standard Contractual Clauses |
| Google (Sign-In) | EU-US Data Privacy Framework where the provider is certified, otherwise EU Standard Contractual Clauses |
| Vercel Inc. | EU-US Data Privacy Framework where the provider is certified, otherwise EU Standard Contractual Clauses |
| [HOSTING PROVIDER of the Dokploy server, e.g. Hetzner Online GmbH, Germany] | [e.g. Not needed — data stays in the EU] |
| Stripe (via Link), merchant of record | EU-US Data Privacy Framework where the provider is certified, otherwise EU Standard Contractual Clauses |
| Your browser's push service (e.g. Google, Mozilla, Apple, Microsoft) | Chosen by your browser vendor |
| Google Ireland Limited (Google Analytics 4) | EU-US Data Privacy Framework where the provider is certified, otherwise EU Standard Contractual Clauses |
| Open-Meteo | No personal data is sent |
| Cloudflare, Inc. | EU-US Data Privacy Framework where the provider is certified, otherwise EU Standard Contractual Clauses |
| Telnyx LLC | EU-US Data Privacy Framework where the provider is certified, otherwise EU Standard Contractual Clauses |
Your rights
Under the GDPR you have the right to:
- Access your data and get a copy (Art. 15).
- Rectify data that is wrong (Art. 16).
- Erase your data (Art. 17).
- Restrict how we process it (Art. 18).
- Portability: receive your data in a common, machine-readable format (Art. 20).
- Withdraw consent at any time, with effect for the future (Art. 7(3)).
- Complain to a data protection authority (Art. 77). You can contact the authority where you live or work, or ours: [DATA PROTECTION AUTHORITY of your Land — e.g. Berliner Beauftragte für Datenschutz und Informationsfreiheit] ([AUTHORITY WEBSITE URL]).
Your right to object (Art. 21 GDPR). Where we process your data based on our legitimate interests (Art. 6(1)(f)), you can object at any time for reasons related to your particular situation. We will then stop unless we have compelling legitimate grounds or need the data for legal claims.
Many of these you can do yourself: export your data at You → Download my data and delete your account at You → Delete account. For anything else, email [email protected]. We’ll reply within one month.
Automated decisions
Your agents are run by AI, and the AI decides what to say in a conversation. But we don’t make decisions about you based solely on automated processing that have legal effects on you or similarly significantly affect you (Art. 22 GDPR). We don’t profile you for advertising.
Children
Callio is not for children. You must be at least 16 years old to use it. If you are under 18, you need permission from a parent or guardian to buy a plan or top-up. If you believe a child under 16 has given us personal data, contact us and we will delete it.
Security
We protect your data with technical and organisational measures that fit the risk, including encrypted connections (HTTPS), access controls, and keeping our software up to date. Sign-in happens through Google, so we never store a password for you. No system is perfectly secure. If a breach puts your rights at high risk, we will tell you without undue delay.
If you live in the United States
If you live in California or another US state with a consumer privacy law, here is what you should know:
- We don’t sell or share your personal information, including for cross-context behavioural advertising, and we haven’t done so in the past 12 months.
- The categories of personal information we collect and why are described above under What we collect and Why we use it.
- We only use sensitive personal information to provide the service you requested, not to infer characteristics about you.
- You can ask to know, access, correct or delete your personal information, and we won’t treat you differently for using these rights. Email [email protected]. You may use an authorised agent; we may need to verify your request.
If you live in Nigeria
If you live in Nigeria, the Nigeria Data Protection Act 2023 (NDPA) gives you rights similar to those above. You can ask to be informed about, access, correct or delete your data, receive it in a portable format, object to processing, withdraw consent, and not be subject to decisions based solely on automated processing. Contact us at [email protected]. You can also complain to the Nigeria Data Protection Commission (NDPC). Transfers of your data outside Nigeria use the safeguards described under International transfers.
Changes to this policy
We will update this policy when the product or the law changes, for example before phone calls launch. The date at the top shows the latest version. If a change matters to you, we will tell you by email or in the app before it takes effect.