Privacy
Last updated 10 September 2026
callex answers business phone calls with an AI agent. Running that service means handling two quite different kinds of information: what our customers tell us in order to use the product, and what the people who call them say on the phone. This page describes both, in the terms the software actually works in rather than in general ones.
What we collect
| What | Why |
|---|---|
| Account details | Your name, email address, business name and website, so you can sign in and so the agent knows who it is answering for. Passwords are stored only as a hash and are never recoverable. |
| Call records | Phone numbers, the time and length of each call, and a written transcript of what was said. This is the product: it is what the dashboard shows you and what your agent learns from. |
| Business profile | Information read from your public website during onboarding, so the agent can answer questions about your business. |
| Billing | Your subscription status and a customer reference held by Stripe. Card numbers never reach our servers — Stripe collects them directly. |
| Advertising | If you arrived from an online advertisement, the identifier that advertisement carried, so we can tell which campaigns bring customers. You can switch this off below. |
We do not record calls
A finished call has no audio recording. We never ask our telephony provider for one, and none is stored. Florida — where this business is based — is one of around a dozen states that require every party to a conversation to consent before it can be recorded, and building the product so the recording never exists is a stronger guarantee than a policy saying we will not listen to it. Where the dashboard offers to "play" a call, it is reading the transcript aloud in a synthetic voice, not replaying anyone's actual speech.
Cookies and similar storage
| Name | Purpose |
|---|---|
| Session cookie | Strictly necessary. Keeps you signed in. It is HttpOnly, so no script can read it, and the server stores only a hash of it — a stolen database backup contains no usable sign-in tokens. Cannot be switched off without breaking sign-in. |
_gcl_* |
Set by Google Ads to connect a purchase back to the advertisement that brought the customer. Covered by the opt-out below. |
callex.click |
Browser storage holding the advertising identifier from your arrival, for up to 90 days. Covered by the opt-out below. |
callex.promo |
Browser storage holding a promotional code from an advertisement, so the discount survives the sign-up process. Cleared once used. |
Do Not Sell or Share My Personal Information
We do not sell personal information for money. Sharing an advertising identifier with Google so that a campaign can be credited with a sale is treated as "sharing for cross-context behavioural advertising" under California law, and this switch turns it off. Nothing else on this page changes, and the product works exactly as before.
If your browser sends a Global Privacy Control signal we honour it automatically and you do not need to do anything here.
Who we share it with
We use other companies to run the service. Each receives only what its job requires:
- Twilio — carries the phone calls.
- Google — the speech and language model the agent thinks and speaks with.
- Anthropic — an alternative language model, on accounts configured to use it.
- Deepgram and ElevenLabs — speech recognition and synthesis, on accounts using the composed voice pipeline.
- Stripe — payments. They collect card details directly; we never see them.
- Resend — notification email.
- Neon and Vercel — the database and the servers the application runs on.
- Google Ads — advertising measurement, unless you have opted out above.
- Product Hunt — the launch badge on the home page is an image served from their site, so loading that page tells them your IP address. No cookie is set and nothing else is sent.
If you connect callex to your own CRM, we send that system the call information you configure it to receive. Those credentials are encrypted before they are stored, so a database dump is not a working set of keys to someone else's system.
We do not sell personal information.
How long we keep it
Call records and transcripts are kept for as long as your account is open, because they are the history the dashboard exists to show. Close your account and we delete them. Advertising identifiers expire on their own after 90 days.
Your choices
- Opt out of advertising — the switch above, or a Global Privacy Control signal from your browser.
- See or delete what we hold — email us and we will do it.
- Close your account — from the dashboard, or by asking us.
Residents of California, Colorado, Connecticut, Virginia and other states with privacy statutes have specific rights to access, delete and correct their information, and to opt out of targeted advertising. We extend all of them to everyone rather than checking where you live first.
Children
callex is a business product and is not directed at anyone under 18.
Changes
If this page changes materially we will say so here and update the date at the top.
Contact
Questions, requests, or anything that reads wrong on this page: privacy@callexapp.com.