Privacy Policy

1. Who we are

callopero.com and the Callopero dashboard are operated by Individual Entrepreneur Ivane Paposhvili (identification number 13001060906), registered in the Public Registry of Georgia ("Callopero"). Callopero is the controller for the processing of account, billing and website data described here. Contact for privacy questions: support@callopero.com.

For the data of your website visitors and callers, the business using Callopero is the controller and decides why and how it is processed; Callopero processes it on its behalf as processor (see section 11 of the Terms of Service).

2. What we process

Account data: your name, email, company details, password (stored only as a secure hash), settings, and the record of your acceptance of the Terms (version, date and time, IP address).

Conversation data: the audio of website conversations and phone calls is streamed to the AI in real time; we store text transcripts, AI summaries, detected language, duration, the page or phone number involved and technical metadata. The audio itself is not recorded — conversations are kept only as text.

Lead data that the AI collects for the business (for example name, phone, email, request) and the telephony credentials a business connects (stored encrypted).

Billing data: plan, usage, invoices and payments.

Technical data: IP address, browser, and logs needed for security, abuse prevention and billing.

Website analytics: only if you accept analytics cookies, callopero.com uses Google Analytics to count visits and see which pages are useful (pages visited, device, approximate country). No advertising cookies are used, and dashboard contents are never sent. You can change your choice by clearing the site data in your browser.

3. Why and on what legal basis

To provide the service and bill it (performance of a contract); to keep it secure, prevent abuse and improve its operation (legitimate interest); to meet legal obligations such as accounting and requests of authorities (legal obligation); and for website analytics (your consent, which you can withdraw at any time). We do not sell personal data and do not use conversations to train our own AI models.

4. Service providers (sub-processors)

We use carefully chosen providers to run the service: Google (Gemini AI models for speech and text; Google Analytics for website statistics if you accepted it), LiveKit (real-time audio/video), Simli (video avatar), Bank of Georgia (card payments), Telnyx (phone numbers provided by Callopero, including the business details and verification documents a country requires for them), Spaceship (email), our hosting provider in the EU (servers and backups), and — for phone calls — the SIP telephony provider the business connects. Notifications go to the tools a business connects (for example Telegram, email or a webhook), and appointments the AI books go to the calendar the business connects (Cal.com) with the customer's name, contact and the booked time. These providers process data only to deliver their part of the service and are bound by confidentiality and security obligations.

Some of these providers are located outside Georgia and the European Economic Area (for example in the United States). Such transfers are protected by the providers' standard contractual clauses or equivalent safeguards.

We may disclose data where required by law, a court order or a competent authority, or to protect our rights, users or the public against fraud or abuse.

5. How long we keep data

Full transcripts are kept 30 days by default (a business can choose 90 or 365 days or until deleted). AI summaries and leads are kept until the business deletes them or its account. Account data is deleted when the account is deleted; billing records and the record of acceptance of the Terms are kept for as long as the law requires or as needed to establish or defend legal claims.

6. Your rights

You can request access to, correction, export or deletion of your personal data, restrict or object to its processing, and withdraw consent at any time, by writing to support@callopero.com. Businesses can erase a customer's leads and transcripts in the dashboard (Telephony → Customer data deletion). Website visitors and callers should contact the business they talked to, which is the controller of their data; we will help that business answer.

You can also lodge a complaint with the Personal Data Protection Service of Georgia.

7. Security

Connections are encrypted (HTTPS/TLS), SIP credentials are encrypted at rest, each company's data is isolated, access is limited to what each role needs, and actions are logged. No system is completely secure; if a personal-data breach occurs, we will inform affected businesses and, where required, the authorities without undue delay.

8. Children

Callopero is a service for businesses and is not directed at children under 16. We do not knowingly collect their data.

9. Changes

We will update this policy when our processing changes; the date at the top shows the current version. Account owners are informed of important changes.