Privacy Policy

Effective 4 October 2026 · Version 2026-10-04

1. Who we are

Calryvo ("Calryvo", "we", "us") runs a pay-per-call platform for businesses: call tracking, call routing, reporting, buyer and vendor portals and call groups (the "Service"). This policy explains what personal data we handle, why, and what choices you have.

For account and billing data about the people who use the Service, Calryvo decides how the data is used. For call data about callers, our customers (the account holders who run campaigns) decide how it is used and Calryvo handles it on their behalf (see section 4).

2. What we collect

• Account data: email address, name or company, role and permissions, your password (stored only as a salted hash, never in plain text), an optional contact handle (Telegram, Skype or WhatsApp) if you give one, and a record of your agreement to our Terms (time, version and IP address).
• Call and campaign data: for each call routed through the Service, the calling number (caller ID), the tracking and destination numbers, campaign, buyer, vendor and sub-ID, time and duration, how the call was routed, keypad (DTMF) answers if a qualification step is used, the outcome, and the revenue, payout and cost recorded for it. If recording is enabled, the audio recording.
• Billing data: your balance, funds added, rates and number rentals. We do not collect card numbers through the Service.
• Technical and security data: IP addresses, server logs, and audit records of account and security events such as your acceptance of these terms and password-reset requests.
• Messages: emails you send us and the service emails we send you (for example account approval and password reset).

3. How we use it

• To provide, operate and bill the Service: route and record calls, show reports, run your portals and charge usage to your balance.
• To keep the Service secure: authenticate users, limit repeated login attempts, detect fraud and abuse, and investigate incidents.
• To communicate with you about your account, support requests, security and changes to the Service.
• To meet legal obligations and to establish, exercise or defend legal claims.
• To maintain and improve the Service.

Where the GDPR or similar laws apply, our legal bases are performance of our contract with you, our legitimate interests in running and securing the Service, compliance with legal obligations and, where required, your consent.

We do not sell personal data, we do not share it for advertising, and we do not use call recordings or call data to train machine-learning models.

4. Callers

If you are a caller whose call was routed through Calryvo, the business running the campaign you called decides why and how your call data is used, and Calryvo processes it for that business as a service provider. To exercise your rights over a call, contact that business. You can also write to support@calryvo.com and we will pass your request to the right customer or handle it as the law requires.

Our customers are responsible for the notices and consents their campaigns require, including for call recording.

5. Who we share it with

• DigitalOcean hosts our servers, our managed database and the storage that holds call recordings.
• Telephony carriers and network providers that connect, route and terminate calls. They necessarily see phone numbers and call signalling.
• An email delivery (SMTP) provider that sends our service emails.
• Telegram, which our operations team uses for alerts. New-signup alerts contain the email address and company name you gave us.
• ElevenLabs, a text-to-speech provider, if a qualification (screening) step is set up: the question text written by the account holder is sent to it to make the spoken prompt. It does not receive caller audio, caller phone numbers or answers.
• Other parties you choose: the buyers, vendors and team members in your account see the data you configure them to see (for example a buyer sees calls routed to it, and a vendor sees its own traffic).
• Authorities, carriers and advisers where needed to comply with the law, answer a lawful request, trace or stop fraud and abuse, or obtain legal and professional advice, and a successor if the business is sold or reorganised.

6. Where it is processed

Our servers, database and recording storage are hosted by DigitalOcean in New York, United States. Our carriers and other providers may process data in other countries. Where the law requires it, we rely on appropriate safeguards for international transfers.

7. How long we keep it

• Account data: while your account is open and for a reasonable period afterwards, for example to resolve disputes and meet legal and accounting duties.
• Call records: for as long as needed for reporting, billing, disputes, fraud prevention and legal obligations.
• Call recordings: kept for 90 days, then deleted automatically.
• Security logs: for as long as needed to protect and investigate the Service.

8. Security

The website, console and APIs are served over HTTPS; we store passwords only as salted hashes, separate each account's data at the database level, limit repeated sign-in and password-reset attempts, and keep audit records of sensitive actions. No system is perfectly secure; if you find a security problem, please tell us at support@calryvo.com.

9. Cookies

We use only the cookies the Service needs to keep you signed in (named relay_sess_ followed by the area you signed in to, such as console or buyer). They are HttpOnly and Secure, and expire after eight hours or when you sign out. We do not use advertising or analytics cookies or trackers on calryvo.com.

10. Your rights

Depending on where you live, you may have the right to access, correct or delete your personal data, to restrict or object to its use, to receive a copy of it in a portable format, and to withdraw consent where we rely on it. Email support@calryvo.com to make a request; we may need to verify your identity first. You may also complain to your local data-protection authority.

We do not sell or share personal information as those terms are defined by California law.

11. Children

The Service is for businesses and is not directed at anyone under 18. We do not knowingly collect personal data from children.

12. Changes to this policy

We may update this policy. We will post the new version with a new effective date and, for material changes, tell you by email or in the Service.

13. Contact

Questions or requests about privacy: support@calryvo.com.