Security and data at CallForMe
Short answer: CallForMe stores your instructions, transcripts and a recording link, available only to your account unless you share a call. The assistant never reads card numbers, SSNs, passwords or one-time codes aloud, and Stripe handles payment. Retell, Stripe, Resend and Google Places process data; we don't sell it or use it to train AI. We have no SOC 2 audit and don't sign BAAs.
CallForMe places phone calls for you, so it handles what you ask for and what the business says. Here's what happens to that data. The full legal version is the privacy policy.
What we store
- Your account: created when you connect your agent. Your email and name only if you give them, your balance, and a Stripe customer reference.
- Your calls: the number called, the instructions your agent sent, the transcript, a link to the recording, answers, outcome and cost.
- Usage logs: IP address and agent name, for abuse prevention and debugging.
We never see or store your full card number: Stripe handles payment.
What the assistant won't say
CallForMe never reads card numbers, Social Security numbers, passwords or one-time codes aloud. If a business needs one, the assistant connects you with transfer_to so you can give it yourself, or gets a reference for a callback. Leave those out of what you send your agent. See safety and disclosure and verification codes.
Who can see a call
Only the account that placed it. A call becomes public only if your agent uses share_call, and you can unshare it. Shared pages hide phone numbers and email addresses, and never include audio.
Access to your account
- Agents connect with OAuth, or with an API key you create on your account page. Treat a key or personal URL like a password: anyone with it can place calls on your balance.
- Sign-in is by a one-time email link.
- Spending is prepaid. A call stops when the credit runs out unless auto-reload is on, and
max_cost_usdcaps a single call.
Who processes your data
- Retell AI, and its telephony, speech and language-model providers, place, record and transcribe calls and run the voice assistant.
- Stripe handles payments.
- Resend sends email.
- Google Places answers business lookups.
We don't sell your data, share it for advertising, or use it to train AI models.
Deleting your data
Email hello@greatwork.company from your account's email to delete your account and calls, including the recordings held by Retell. Deleted data also leaves our backups, which we keep for 14 days. Some payment records stay for tax and accounting. The privacy policy has the details.
What we don't have
We're a small company. We have no SOC 2 or ISO 27001 report, we don't sign HIPAA business associate agreements, and we don't offer a data processing region choice. If your work requires any of those, CallForMe isn't the right fit today.
Related
Questions
Are calls recorded?
Yes. Every call is recorded and transcribed, and the assistant says the line is recorded in its first sentence. The recording and transcript are available only to the account that placed the call, unless you share it. Shared pages hide phone numbers and emails, and never include audio.
Do you train AI on my calls?
No. We don't sell your data, share it for advertising, or use it to train AI models.
Can I use it for health or financial calls?
People do, for things like pharmacy or lender calls. We don't sign BAAs or hold a SOC 2 report, so don't use CallForMe for work that requires them. Keep identifiers out of the request and use transfer_to, so you give them yourself.
How do I report a security problem?
Email hello@greatwork.company. Our contact details are also at /.well-known/security.txt.
Add CallForMe to your agent
One URL for any MCP agent. Connecting asks for nothing.
Install steps for your agentTry a free demo callPricing
On your phone? Email yourself the setup steps
One email with the link, for when you're at your computer. Nothing else.