Privacy Policy

Version 1 — effective 21 October 2026

This policy explains how PCGLOBALCO ("we"), which provides Calloop, handles personal data. Calloop handles two kinds:

1. Data our customers put through Calloop: the callers who call them, their agents, their call records and recordings. Here our customer (the "Consumer") decides what happens to the data, and we process it on their behalf under the Data Processing Agreement. If you called a business that uses Calloop, that business is responsible for your data. Ask them first, and we'll help them answer.
2. Data about the people who use a Calloop account: dashboard users, operators and billing contacts. For this data we are the controller, and this policy describes what we do.

Our servers are in Europe, and we follow the EU General Data Protection Regulation (GDPR).

What we collect about account users

Data	Why	Legal basis
Name, work email, role, and the account you belong to	To give you access and contact you about the service	Contract
Password (stored only as a salted hash) and two-factor authentication secret	To secure your sign-in	Contract, legitimate interest in security
Sign-in sessions, IP address, browser, and an audit log of the changes you make	Security, fraud prevention and accountability	Legitimate interest
Billing contact, invoices and payment status. Card details are handled by Stripe; we never see or store them	To bill for the service	Contract, legal obligation
Your messages to support	To answer you	Contract, legitimate interest

We don't sell personal data, use it for advertising, or put trackers or analytics cookies on the dashboard. The dashboard uses one session cookie, which it needs to keep you signed in.

How long we keep it

Data	Kept for
Sign-in sessions	30 days after they expire
Audit logs	365 days
Server logs (may include IP addresses)	14 days
Your user account	Until it's removed by you, your account's owner, or when the account closes
Invoices and billing records	As long as tax and accounting law requires

Who we share it with

Only with service providers that help us run Calloop, under contracts that protect it:

• Infrastructure: servers and storage in data centres in Europe.
• Stripe: payments and invoices, including invoice emails.

We also disclose data when the law requires it. The full list of providers that can process our customers' data is in the Data Processing Agreement.

If a provider processes data outside the European Economic Area, the transfer is protected by the European Commission's Standard Contractual Clauses or another safeguard the GDPR recognises.

Your rights

You can ask to access, correct or delete your data, to restrict or object to how we use it, or to receive it in a portable format. You can also complain to a data protection authority. In Cyprus, that's the Commissioner for Personal Data Protection. Email support@calloop.net, and we'll answer within one month.

Security

Connections to Calloop are encrypted (HTTPS and secure WebSockets; agents' call audio uses DTLS-SRTP). Secrets we store, such as webhook secrets and channel and push credentials, are encrypted. Staff access requires two-factor authentication and is logged. More detail is in the Data Processing Agreement.

Changes

We'll publish any update here with a new version and date, and email account owners about significant changes.

Contact

PCGLOBALCO — support@calloop.net