Callshake Privacy Policy

Last updated: June 21, 2026

This Privacy Policy explains how Callshake collects, uses, stores, discloses, and protects personal data when you use our website, products, applications, features, and related services (collectively, the “Services”).

By using Callshake, you agree to the collection, use, and disclosure of personal data as described in this Privacy Policy.

This Privacy Policy should be read together with our Terms of Service and Acceptable Use Policy.

1. Who We Are

Callshake provides browser-based Voice over Internet Protocol (VoIP) calling services and related communication tools.

For privacy questions, you may contact us at:

Email: [email protected]

2. Personal Data We Collect

Personal data means data that can identify a person, either by itself or when combined with other data.

We may collect the following categories of personal data.

Account Data

When you create or manage an account, we may collect:

name;
email address;
password or authentication data;
account settings;
organization or team name;
role, permissions, and team membership details;
signup date;
account status;
support and communication preferences.

Contact and Address Book Data

If you add contacts, import contacts, or use team contact tools, we may process:

contact names;
phone numbers;
company names;
websites;
notes;
contact lists;
assigned users;
imported CSV data;
metadata related to contact creation, updates, and usage.

You are responsible for making sure you have the right to submit contact data to Callshake.

Call Data and Telecom Metadata

When you place, receive, forward, or manage calls through Callshake, we may process:

caller and recipient phone numbers;
caller ID used;
call direction;
call status;
call start time, connection time, and end time;
call duration;
destination country or region;
number type;
routing and provider identifiers;
call cost and billing data;
call outcomes, notes, and related activity;
logs needed to operate, bill, secure, troubleshoot, and audit the Services.

Call Recordings

If call recording is enabled, we may process:

call audio;
recording status;
recording duration;
recording storage details;
playback activity;
deletion or retention activity;
related call metadata.

Call recordings may contain personal data about you and other call participants.

You are responsible for providing any required notice and obtaining any required consent before recording a call. Recording laws may depend on the locations of you, the people you call, other call participants, and your business operations.

Call Transcriptions

If transcription is requested or enabled, we may process call recordings to create written transcripts.

Transcripts may contain personal data, sensitive data, confidential data, or regulated data depending on the content of the call.

Transcriptions may be inaccurate or incomplete. You are responsible for reviewing transcripts before relying on them.

Voicemail Data

If voicemail is used, we may process:

voicemail audio;
voicemail transcripts, if requested or enabled;
caller and recipient numbers;
voicemail time and duration;
read/unread status;
playback activity;
deletion or retention activity.

SMS and Messaging Data

If SMS inbox features are used, we may process:

sender and recipient numbers;
message body;
message time;
message status;
read/unread status;
related metadata;
media metadata, where applicable.

Payment and Transaction Data

When you purchase credit, subscribe, buy a number, use paid features, or make payments, we may process:

transaction records;
balance and credit usage;
subscription details;
purchased number details;
invoices or receipts;
payment status;
payment method metadata;
card funding type, where available;
chargeback, refund, dispute, and fraud review data.

We do not store full payment card numbers. Payments are processed by third-party payment processors.

Device, Browser, and Log Data

When you access the Services, we may automatically collect:

IP address;
browser type and version;
device type;
operating system;
time zone;
language settings;
pages viewed;
session activity;
login activity;
error logs;
diagnostic data;
microphone or browser permission status where needed to troubleshoot calling issues.

Location and Country Data

We may infer general location data from your IP address, phone number country code, billing details, or account usage.

We may use this data for pricing, fraud prevention, abuse prevention, compliance, language settings, currency display, rate display, tax handling, and service availability.

Risk, Fraud, and Abuse Data

To protect Callshake, users, telecom networks, payment systems, and the public, we may process:

signup IP address;
device data;
login activity;
payment risk signals;
chargeback and dispute history;
call volume patterns;
destination patterns;
caller ID usage;
account behavior;
risk scores;
fraud review notes;
enforcement history;
related account signals.

Support and Communication Data

When you contact us, we may collect:

your email address;
your name;
account details;
support messages;
attachments or screenshots you send;
details about the issue;
replies and internal notes needed to respond.

3. How We Collect Personal Data

We collect personal data when:

you create an account;
you purchase credit, subscriptions, numbers, or paid features;
you place, receive, forward, record, transcribe, or manage calls;
you use voicemail, SMS, contacts, teams, analytics, or related features;
you import contacts or upload data;
you contact support;
you visit our website;
you subscribe to updates;
you use the Services from a browser, device, or network;
third-party providers send us data needed to operate, bill, secure, or troubleshoot the Services.

4. Why We Use Personal Data

We may use personal data for the following purposes:

to provide, operate, maintain, and improve the Services;
to create and manage accounts;
to place, receive, route, forward, record, transcribe, and bill calls;
to provide voicemail, SMS inbox, contacts, team features, analytics, and related tools;
to process payments, credit purchases, subscriptions, invoices, refunds, and disputes;
to calculate rates, balances, usage, and transaction history;
to provide customer support;
to troubleshoot call quality, browser, microphone, routing, payment, and account issues;
to detect, prevent, and investigate fraud, abuse, scams, payment misuse, telecom misuse, spam, security issues, and policy violations;
to enforce our Terms of Service and Acceptable Use Policy;
to comply with legal, regulatory, tax, accounting, telecom, sanctions, payment, and reporting obligations;
to protect the rights, safety, and security of Callshake, users, third parties, telecom networks, payment systems, and the public;
to send service notices, account notices, billing notices, security notices, and policy updates;
to send marketing communications where permitted by law and your preferences;
to analyze usage and product performance.

5. Legal Bases for Processing

Depending on where you are located, we may rely on one or more legal bases to process personal data, including:

your consent;
performance of a contract with you;
compliance with legal obligations;
our legitimate interests, such as operating, securing, improving, billing, and protecting the Services;
protection of rights, safety, and legal claims;
other lawful bases permitted by applicable law.

Where consent is required, you may withdraw consent where applicable. Withdrawal may affect your ability to use certain Services.

6. Call Recordings and Transcripts

Callshake may process call recordings and transcripts only when recording or transcription features are enabled, requested, or otherwise used through your account.

Recordings and transcripts may contain personal data about call participants. They may also contain sensitive, confidential, or regulated data depending on what is said during a call.

You are responsible for:

determining whether a call may be recorded;
providing any required notice;
obtaining any required consent;
handling recordings and transcripts lawfully;
controlling who can access recordings and transcripts in your account or organization;
deleting recordings and transcripts when no longer needed, where required;
responding to requests from call participants where applicable.

Callshake does not provide legal advice and does not determine whether recording is lawful for any specific call.

We may process recordings and transcripts to:

provide playback;
store and manage recordings;
create transcripts where requested or enabled;
troubleshoot technical issues;
secure the Services;
investigate abuse or policy violations;
comply with legal obligations or legal process.

7. Team and Organization Data

If you use Callshake as part of a team or organization, account owners and admins may be able to access, manage, export, delete, or control data associated with the organization, including:

members;
calls;
recordings;
transcripts;
voicemail;
SMS inbox data;
contacts;
contact lists;
call notes;
call outcomes;
analytics;
numbers;
billing and usage data.

Your organization may control data created or processed under the organization account. If you are invited to or use Callshake through an organization, contact your organization owner or admin for questions about internal access, retention, deletion, or account control.

8. Data You Provide About Other People

You may submit personal data about other people when you add contacts, import contacts, call someone, receive calls, record calls, transcribe calls, receive voicemail, receive SMS, invite team members, or use related Services.

You represent that you have the right to provide that data to Callshake and to allow Callshake to process it under this Privacy Policy, the Terms of Service, and your account settings.

You are responsible for giving any required notices and obtaining any required consents from those people.

9. Cookies and Analytics

We may use cookies and similar technologies to operate the website, remember preferences, secure sessions, analyze usage, and improve the Services.

We use privacy-focused analytics to understand website usage. Third-party analytics providers we currently use include:

Fathom Analytics

You can control cookies through your browser settings. Blocking cookies may affect parts of the website or Services.

Please refer to our Cookie Policy for more details, if available.

10. How We Share Personal Data

We may disclose personal data to the following categories of recipients:

employees, contractors, and support personnel who need access to operate or support the Services;
telecommunications providers, routing providers, and communication infrastructure providers;
hosting, storage, database, security, monitoring, and infrastructure providers;
payment processors, billing providers, fraud prevention providers, and financial institutions;
analytics and error logging providers;
transcription, processing, or communication service providers where related features are used;
professional advisors, including lawyers, accountants, auditors, and insurers;
regulators, courts, law enforcement, government authorities, carriers, payment processors, or other parties where required by law, legal process, risk controls, abuse investigations, fraud prevention, telecom compliance, or to protect rights and safety;
buyers, investors, successors, or other parties involved in a merger, acquisition, financing, restructuring, sale of assets, bankruptcy, or similar transaction;
other parties with your consent or at your direction.

We do not sell personal data.

11. International Transfers

The personal data we collect may be stored, processed, or transferred in countries where Callshake, our affiliates, or our service providers operate.

This may include Singapore, Finland, the United States, the European Economic Area, and other countries.

These countries may have data protection laws that differ from the laws in your country.

Where required by applicable law, we use appropriate safeguards for international transfers, such as contractual protections, data processing agreements, transfer impact reviews, or other lawful transfer mechanisms.

12. Security

We use commercially reasonable technical and organizational measures to protect personal data against unauthorized access, disclosure, loss, misuse, alteration, or destruction.

However, no internet, telecom, browser, payment, or storage system is completely secure.

You are responsible for:

keeping your login credentials secure;
using strong passwords;
controlling access to your account;
managing team member access;
limiting access to recordings, transcripts, contacts, voicemail, SMS, and other sensitive data;
notifying us promptly if you suspect unauthorized access.

13. Retention

We retain personal data for as long as needed for the purposes described in this Privacy Policy, including to provide the Services, maintain records, comply with legal obligations, resolve disputes, enforce agreements, prevent fraud, protect the Services, and support legitimate business needs.

Retention periods may vary based on:

account status;
type of data;
product feature used;
legal, tax, accounting, telecom, payment, or regulatory duties;
dispute, chargeback, fraud, abuse, or security review needs;
user deletion requests;
backup and disaster recovery schedules.

Some data may remain in backups, logs, audit records, fraud records, billing records, or legal records for a limited period after deletion from active systems.

Where we no longer need personal data, we will delete it, anonymize it, or retain it only as permitted or required by law.

14. Your Rights and Choices

Depending on your location and applicable law, you may have rights to:

access personal data we hold about you;
correct inaccurate or incomplete personal data;
request deletion of personal data;
request restriction of processing;
object to certain processing;
request a copy of your personal data;
withdraw consent where processing is based on consent;
opt out of marketing communications;
complain to a data protection authority.

To make a privacy request, contact us at:

Email: [email protected]

We may ask you to verify your identity before responding. Some requests may be limited by legal, security, fraud prevention, telecom, billing, dispute, tax, accounting, or operational requirements.

If your data is controlled by an organization using Callshake, we may direct your request to that organization.

15. Marketing Communications

We may send you product updates, service notices, onboarding messages, billing notices, security notices, policy updates, and marketing communications.

You may opt out of marketing emails by using the unsubscribe link in the email or contacting us.

You may still receive non-marketing communications related to your account, billing, security, legal notices, policy updates, or active Services.

16. Children’s Privacy

The Services are not intended for children under 13.

We do not knowingly collect personal data from children under 13.

If you believe a child has provided personal data to Callshake, contact us at [email protected] and we will take appropriate steps.

17. Data Breaches

If a data breach occurs, we will assess the incident and take steps required by applicable law.

Where required, we will notify affected users, regulators, or other parties.

18. Links to Third-Party Sites

The Services may link to third-party websites, products, or services that Callshake does not operate or control.

This Privacy Policy does not apply to third-party websites, products, or services. You should review their privacy policies before providing personal data to them.

19. Business Transfers

If Callshake is involved in a merger, acquisition, financing, restructuring, bankruptcy, sale of assets, or similar transaction, personal data may be disclosed, transferred, or reviewed as part of that transaction.

Any successor or acquiring party may continue to process personal data as described in this Privacy Policy unless you are notified otherwise.

20. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

When we update it, we will update the “Last updated” date above. If changes are material or if required by law, we may provide additional notice by email, account notice, website notice, or another reasonable method.

Continued use of the Services after the updated Privacy Policy is posted means you acknowledge the updated Privacy Policy.

21. Contact Us

For privacy questions, requests, or complaints, contact us at:

Email: [email protected]