Privacy Policy

This Privacy Policy describes how Callkeep collects, uses, and protects your information when you use our service. It applies to anyone who creates an account or interacts with the service. If you have any questions, contact us at privacy@callkeep.ca.

Callkeep provides a cloud voicemail and call-answering service for small businesses across Canada. The service is operated in Canada and offered under Canadian law.

Account information. Your email address, business name, and — if you sign in with Google — your basic Google profile (name, email).

Call data.When someone calls a Callkeep number you’ve set up, we record:

• The caller’s phone number (E.164 format)
• The date, time, and duration of the call
• The voicemail audio they leave (if any)
• An automatic text transcript of the voicemail
• Which press-N digit they pressed, if you have call routing configured

Phone forwarding configuration.Numbers you’ve configured to forward to (e.g., “press 1 → your cell phone”) and the personal phone you optionally use for “ring my phone first.”

Payment information. We use Stripe to process subscriptions. Stripe collects your credit-card details directly — we never see or store your full card number. Stripe sends us a customer ID, last 4 digits, card brand, and expiration for display.

Usage logs. Server logs and basic analytics (page views, errors) to keep the service running.

We do not collect:

• The contents of your live phone calls — only the voicemails callers leave when you don’t pick up
• Precise location data
• Tracking pixels for advertising

We use the information above to provide the service: play your greeting, record voicemails, transcribe them, and email you. We use it to send transactional emails (billing receipts, voicemail notifications), to improve reliability and security, and to comply with Canadian law.

We do not sell or share your data for marketing.

We use carefully selected third-party providers to deliver and operate the service. These providers fall into the following categories:

• Telephony and call infrastructure — for routing inbound calls, provisioning phone numbers, and handling voice traffic.
• Payment processing — for billing, subscriptions, refunds, and invoicing.
• AI services — for greeting generation, voice synthesis, and automated voicemail transcription.
• Hosting and data storage — for running the application and securely storing your data.
• Transactional email delivery — for voicemail notifications, billing receipts, and account emails.
• Optional authentication — for single sign-on if you choose to use it.

All providers are bound by contractual agreements that limit their use of your information to the purpose of delivering services to Callkeep. We can share the current list of providers on request — email privacy@callkeep.ca.

Some of our service providers operate outside Canada, including in the United States. When voicemail audio or other personal information is processed outside Canada, it remains subject to the laws of those jurisdictions. By using the service you consent to this transfer. Where applicable, we rely on standard contractual safeguards to protect your information.

• Voicemails and transcripts: kept while your subscription is active. Deleted within 30 days of account cancellation.
• Call logs (metadata): kept for 24 months for analytics and dispute resolution.
• Payment records: kept for 7 years to comply with Canadian tax law.
• Backups: rolling 30-day window.

You can delete individual voicemails from your dashboard at any time, and request bulk deletion by emailing privacy@callkeep.ca.

Under the Personal Information Protection and Electronic Documents Act (PIPEDA), you have the right to:

• Access the personal information we hold about you
• Correct information that is inaccurate
• Withdraw consent to processing — note that this will end your subscription
• File a complaint with the Office of the Privacy Commissioner of Canada

Email us at privacy@callkeep.ca to exercise any of these rights.

We use industry-standard practices: TLS for data in transit, encryption at rest for voicemail audio in Supabase Storage, scoped database access (row-level security), and webhook signature verification. No system is perfect — we’ll notify affected users within 72 hours of discovering a breach involving their data.

Callkeep uses a first-party session cookie to keep you logged in. We do not use third-party advertising or tracking cookies.

Callkeep is for businesses. It is not directed at anyone under 18.

We may update this policy. We’ll notify you of material changes by email at least 14 days before they take effect.

privacy@callkeep.ca

See also our Terms of Service.