Legal

Privacy Policy

Last updated: 9 September 2026 · Version 2026-09-09

This policy explains how Call & Translate (“we”, “us”) handles personal data when you use callandtranslate.com. It covers UK GDPR, the EU GDPR, and the UK Data Protection Act 2018.

1. Who we are

The data controller is the operator of Call & Translate, provided at https://callandtranslate.com. For privacy requests write to info@callandtranslate.com.

If we appoint a data protection officer or a UK/EU representative, we will publish those details here.

2. What we collect

Account

Name, email address, password hash (we do not store your password in plain text), passkeys if you add them, role, email verification status, and account timestamps.

Billing

Plan, subscription status, credit balance and credit lots, and Stripe identifiers (customer, subscription, and price IDs). Card numbers are collected by Stripe, not by us. See Stripe’s privacy policy.

Call content you create

Briefs (goal, rules, information, languages, voice choice), templates, live transcripts, translations, summaries, action items, session duration, and credits used. During a live call, microphone audio is streamed to our AI provider so the agent can hear, speak, transcribe, and translate. We store the text transcript and report in your account. We do not keep a permanent copy of the raw audio file on our servers.

Other people on a call

If you put someone else on speakerphone, their voice may be transcribed and their words may appear in the transcript and summary. You are responsible for telling them an AI assistant is on the call where that is required, and for having a lawful reason to record or transcribe them. Do not use the service to capture special-category data (health, religion, political opinions, and similar) unless you have a lawful basis and they expect it.

Technical and security data

IP address, browser type, device data, timestamps, and similar log data needed to operate, secure, and debug the service. Session cookies and tokens are described in the Cookie Policy.

Support

If you email us, we process the content of that correspondence.

Cookie choices

We store your cookie preferences (categories chosen, time, and policy version) in a first-party cookie and in local storage. If you are signed in, we may also keep a copy on your account as a record of consent.

3. How we use personal data

  • Create and run your account, including email verification, sign-in, passkeys, and password reset.
  • Provide live calling, transcription, translation, summaries, and saved sessions.
  • Take payment, grant credits, send billing email, and handle cancellations and refunds required by law.
  • Secure the service, prevent abuse, debug faults, and keep audit logs.
  • Meet legal obligations (tax, accounting, responding to lawful requests).
  • Remember cookie and display preferences you have allowed.
  • Send service messages (verification, password reset, purchase receipts). We do not send marketing email unless you separately agree.

We do not sell personal data. We do not use call audio or transcripts to train public models for unrelated advertising.

  • Contract (UK/EU GDPR Art. 6(1)(b)): creating an account, providing the service you asked for, billing, and support.
  • Legitimate interests (Art. 6(1)(f)): securing the service, preventing fraud and abuse, understanding aggregate usage so we can keep the product working, and defending legal claims. You may object — see Your rights.
  • Consent (Art. 6(1)(a)): optional cookies (functional, analytics, marketing) and any optional processing we clearly ask for. You can withdraw consent at any time from Cookie settings without affecting processing that already happened.
  • Legal obligation (Art. 6(1)(c)): tax, accounting, and other duties we cannot avoid.

Microphone access is requested by your browser because you start a call. That processing is needed to perform the contract. Optional cookies are not needed for the contract and stay off until you opt in.

5. Who we share data with

We share data only as needed to run the service:

  • xAI — speech-to-text, text-to-speech, translation, and summaries during calls. Audio and relevant text leave our servers for that processing.
  • Stripe — payments, subscriptions, invoices, and the customer billing portal.
  • Email delivery (MXRoute) — transactional email such as verification, password reset, and receipts.
  • Hosting in the EEA — the servers that store accounts, sessions, and logs.
  • Google Fonts — the site loads fonts from Google. Google may see your IP address. See our Cookie Policy.

We may also disclose data if the law requires it, or to professional advisers under confidentiality, or to a buyer if the service is sold (the new operator would still have to honour this policy or give you notice).

6. International transfers

Some processors (including Stripe and xAI) are in the United States or other countries outside the UK and EEA. Where we transfer personal data internationally we rely on an adequacy decision where one exists, or on appropriate safeguards such as the EU/UK Standard Contractual Clauses used by that processor, plus any extra measures they document. You can ask us for more detail at info@callandtranslate.com.

7. How long we keep data

  • Account, templates, transcripts, and summaries — until you delete the account (a 24-hour cooling-off applies after you schedule deletion) or we close the account for a legitimate reason.
  • Billing records — typically up to six years after the relevant transaction, as required for UK tax and accounting.
  • Security and server logs — for a limited period needed to investigate abuse and faults, then deleted or anonymised.
  • Cookie consent records — for the life of the consent (up to 12 months on this device) and a reasonable period afterwards so we can show we asked you.
  • Support email — for as long as the query is active and a short period afterwards.

8. Your rights

Depending on where you live, you can:

  • Access a copy of your personal data
  • Correct inaccurate data
  • Erase data (including by deleting your account in Settings)
  • Restrict or object to certain processing
  • Receive data you provided in a portable format
  • Withdraw consent for optional cookies
  • Complain to a supervisory authority

In the UK the supervisory authority is the Information Commissioner’s Office (ICO). In the EEA you can complain to your local data protection authority. We would rather fix a problem first — email info@callandtranslate.com.

We do not use automated decision-making that produces legal or similarly significant effects about you.

You can schedule account deletion from Settings in the app. After 24 hours we delete account data we do not have to keep (billing records required by law may remain). You can cancel deletion during that window.

9. Cookies and similar storage

We use cookies and local/session storage as described in the Cookie Policy. Strictly necessary cookies do not need consent. Optional cookies are off until you accept them. You can change or withdraw that choice at any time via .

10. Security

We use HTTPS, hashed passwords, short-lived access tokens, HttpOnly refresh cookies, and access controls. No method of transmission or storage is perfectly secure. Tell us at once if you think your account has been misused.

11. Children

The service is for people aged 18 or over. We do not knowingly collect data from children. If you believe we have, contact us and we will delete it.

12. Changes

We may update this policy. The “Last updated” date will change. If a change is material we will give additional notice (for example on the site or by email). Continued use after the effective date means you have seen the updated policy. Cookie categories that need a new choice will prompt the banner again.

13. Contact

Privacy requests: info@callandtranslate.com
Related documents: Cookie Policy, Terms of Service, Acceptable Use Policy.