Privacy Policy

1. Who We Are

• Data Controller: MissedCalls Help, a legal entity organized under the laws of the State of Delaware, USA.
• Privacy Contact: privacy@missedcalls.help
• Postal Address for Notices and Data Subject Requests: (to be provided by MissedCalls Help).

2. Scope

This Policy covers: (a) website visitors; (b) customers (account owners) and their authorized users; (c) end callers and message senders processed on behalf of our customers; and (d) partners and applicants who interact with us. This Policy is US-focused (including CPRA/CCPA). For EEA/UK users, see the GDPR Annex below.

3. Information We Collect

4. How We Use Information

• Provide, operate, and support the Service.
• Improve and develop features, including aggregate/de-identified analysis for quality and accuracy.
• Security and abuse prevention (authentication, incident response, fraud/spam prevention).
• Billing and payments.
• Service communications and customer support.
• B2B marketing with your consent or as permitted by law (you can opt out).
• Legal compliance and enforcement of agreements.

5. De-Identified and Derived Data

We may create and use de-identified, anonymized, and/or aggregated data derived from Personal Information and Service usage (“De-Identified Data”) for analytics, benchmarking, and to improve the Service and our models. We own De-Identified Data and do not attempt to re-identify it.

6. Quality Review and Model Improvement

For quality assurance and feature improvement, we may review call logs, transcripts, and summaries. Where required by law or contract, we do so only in de-identified/aggregated form. Enterprise customers may request an opt-out via privacy@missedcalls.help (which may affect feature quality).

7. Legal Bases (EEA/UK)

• Contract performance (Art. 6(1)(b) GDPR).
• Legitimate interests (Art. 6(1)(f)): security, improvement, antifraud (balanced against your rights).
• Consent (Art. 6(1)(a)) where required (e.g., certain cookies/marketing).
• Legal obligations (Art. 6(1)(c)).

8. “Sale” and “Sharing” (CPRA/CCPA)

We do not sell personal information and do not “share” it for cross-context behavioral advertising. If this changes, we will update this Policy and provide opt-out mechanisms.

9. How We Disclose Information

• Service Providers/Processors: cloud hosting, telephony/VoIP, logging, analytics, payments, email/support— processing under our instructions and contracts.
• Integrations You Enable: calendars, CRMs, ticketing, etc.; scope defined by your settings.
• Legal, Government, and Safety: to comply with law, lawful process, or government requests; and to prevent death or serious physical harm, consistent with applicable law.
• Corporate Transactions: in mergers, acquisitions, or asset sales, subject to confidentiality obligations.

We do not grant unrestricted access to third-party ad networks.

10. Cookies and Similar Technologies

We use necessary cookies for authentication, session, and security and, where applicable, analytics cookies with your consent. Manage preferences via our cookie banner/settings (where provided).

11. Recording, Transcription, and Customer Responsibilities

If recording or transcription is enabled, callers are notified that calls may be recorded and transcribed for quality and service purposes. Customers are responsible for configuring call flows that provide any legally required notice and obtaining any required consents from their end users and callers, including TCPA/telemarketing consents where applicable.

12. Retention

• Accounts and logs: for the contract term and a reasonable period thereafter.
• Call recordings/transcriptions: per your admin settings or, if not configured, according to our standard retention periods (available in the dashboard/contract).
• Billing records: as required by accounting/tax laws.

We may retain data in backups and logs for a reasonable period after deletion to comply with legal, tax, audit, security, and fraud-prevention obligations and to enforce our agreements. Where a legal hold applies, deletion may be delayed until the hold is lifted. After retention periods, data is deleted or de-identified.

13. Security

We employ technical and organizational measures (encryption in transit/at rest, access controls, logging/audit, backups, environment segregation). No system is perfectly secure; we follow incident response and notification procedures if required.

14. Children

The Service is not directed to children under 13. We do not knowingly collect information from children. Contact privacy@missedcalls.help if you believe a child has provided data.

15. Your Rights (US, including California)

Depending on your state, you may have rights to access, correct, delete personal information, restrict certain processing, and not be discriminated against for exercising rights. California residents may request disclosures for the preceding 12 months. Submit requests to privacy@missedcalls.help. We may require identity verification. If two submission methods are required by law, a web form URL will be provided once available.

16. EEA/UK Data Subject Rights

You may request access, rectification, erasure, restriction, data portability, and object to processing based on legitimate interests, and you may withdraw consent where processing relies on consent. You may lodge a complaint with your local supervisory authority.

17. International Transfers

We may process data in the United States and other jurisdictions. For transfers from the EEA/UK, we use appropriate safeguards (e.g., EU Standard Contractual Clauses and supplementary measures, as applicable).

18. Communications (SMS/Voice/Email)

• By providing a phone number, you consent to receive SMS or voice messages related to account security, service updates, and customer support. Message and data rates may apply.
• You may opt out of non-essential SMS by replying STOP. Transactional messages essential to the Service cannot always be opted out of.

19. Subprocessors

We use vetted subprocessors (hosting, telephony, analytics, support, payments) under written data protection terms. We may update subprocessors; material changes will be posted on our website or notified via the Service. Continued use after notice constitutes acceptance.

20. Do Not Track and Global Privacy Control

We do not currently respond to browser DNT signals. Where supported, we will make reasonable efforts to honor Global Privacy Control (GPC) signals for cookie/marketing choices.

21. Conflicts with Data Processing Agreements

If this Privacy Policy conflicts with a data processing agreement with a customer, the data processing agreement controls for Customer Data processed on that customer’s behalf.

22. Changes to This Policy

We may update this Policy. The “Effective Date” above reflects the latest version. Material changes will be posted here and, where appropriate, notified via the Service or email.

23. Contact

Email: privacy@missedcalls.help
Postal Address: (to be provided)

CPRA/CCPA Notice at Collection (Summary)

• Categories Collected: identifiers (name, email, phone), commercial information (plan, payment status via processor), internet activity (logs/cookies), audio/transcriptions (if enabled), professional information (company/role), inferences and summaries, coarse location (city/region from IP), integration data (e.g., calendar/CRM IDs).
• Sources: you and your users; callers; connected integrations; automatic collection.
• Purposes: see Section 4.
• Disclosures: service providers; integrations you enable; legal; corporate transactions.
• Sale/Sharing: none.
• Retention: see Section 12.
• Rights/Requests: see Sections 15–16.

GDPR Annex (Summary)

• Controller: MissedCalls Help (State of Delaware, USA)
• Contact: privacy@missedcalls.help
• Purposes/Bases: Sections 4–7.
• Recipients: Section 9.
• International Transfers: Section 17.
• Retention: Section 12.
• Data Subject Rights: Section 16.
• DPO/EEA or UK Representative (if applicable):