--- title: "Security and data at CallForMe" description: "What CallForMe stores, who processes it, how access works, what the assistant refuses to say on a call, how deletion works, and which audits we don't have." url: https://callforme.tel/docs/security published: 2026-11-05 updated: 2026-11-06 author: Jake Marsh --- # Security and data at CallForMe > CallForMe stores your instructions, transcripts and a recording link, available only to your account unless you share a call. The assistant never reads card numbers, SSNs, passwords or one-time codes aloud, and Stripe handles payment. Retell, Stripe, Resend and Google Places process data; we don't sell it or use it to train AI. We have no SOC 2 audit and don't sign BAAs. CallForMe places phone calls for you, so it handles what you ask for and what the business says. Here's what happens to that data. The full legal version is the [privacy policy](/privacy). ## What we store - **Your account:** created when you connect your agent. Your email and name only if you give them, your balance, and a Stripe customer reference. - **Your calls:** the number called, the instructions your agent sent, the transcript, a link to the recording, answers, outcome and cost. - **Usage logs:** IP address and agent name, for abuse prevention and debugging. We never see or store your full card number: Stripe handles payment. ## What the assistant won't say CallForMe never reads card numbers, Social Security numbers, passwords or one-time codes aloud. If a business needs one, the assistant connects you with `transfer_to` so you can give it yourself, or gets a reference for a callback. Leave those out of what you send your agent. See [safety and disclosure](/docs/safety-and-disclosure) and [verification codes](/guides/verification-codes-on-ai-calls). ## Who can see a call Only the account that placed it. A call becomes public only if your agent uses `share_call`, and you can unshare it. Shared pages hide phone numbers and email addresses, and never include audio. ## Access to your account - **Agents** connect with OAuth, or with an API key you create on your [account page](/account). Treat a key or personal URL like a password: anyone with it can place calls on your balance. - **Sign-in** is by a one-time email link. - **Spending** is prepaid. A call stops when the credit runs out unless auto-reload is on, and `max_cost_usd` caps a single call. ## Who processes your data - **Retell AI**, and its telephony, speech and language-model providers, place, record and transcribe calls and run the voice assistant. - **Stripe** handles payments. - **Resend** sends email. - **Google Places** answers business lookups. We don't sell your data, share it for advertising, or use it to train AI models. ## Deleting your data Email hello@greatwork.company from your account's email to delete your account and calls, including the recordings held by Retell. Deleted data also leaves our backups, which we keep for 14 days. Some payment records stay for tax and accounting. The [privacy policy](/privacy) has the details. ## What we don't have We're a small company. We have no SOC 2 or ISO 27001 report, we don't sign HIPAA business associate agreements, and we don't offer a data processing region choice. If your work requires any of those, CallForMe isn't the right fit today. ## Related - [Safety and disclosure](/docs/safety-and-disclosure) - [Privacy policy](/privacy) - [Is it legal for AI to call a business?](/guides/is-it-legal-for-ai-to-call-a-business) - [Status](/status) ## FAQ ### Are calls recorded? Yes. Every call is recorded and transcribed, and the assistant says the line is recorded in its first sentence. The recording and transcript are available only to the account that placed the call, unless you share it. Shared pages hide phone numbers and emails, and never include audio. ### Do you train AI on my calls? No. We don't sell your data, share it for advertising, or use it to train AI models. ### Can I use it for health or financial calls? People do, for things like pharmacy or lender calls. We don't sign BAAs or hold a SOC 2 report, so don't use CallForMe for work that requires them. Keep identifiers out of the request and use transfer_to, so you give them yourself. ### How do I report a security problem? Email hello@greatwork.company. Our contact details are also at /.well-known/security.txt. ## Related - [Is it safe to let an AI agent make phone calls for you?](https://callforme.tel/guides/is-it-safe-to-let-ai-make-phone-calls-for-you.md) - [How to reach a person at Social Security (800-772-1213)](https://callforme.tel/guides/reach-a-person-at-ssa.md) - [AI calls and recording consent by state (US)](https://callforme.tel/guides/ai-call-recording-consent-by-state.md) - [Do you get a transcript and recording of an AI phone call?](https://callforme.tel/guides/ai-call-transcript-and-recording.md) - [How to keep your AI agent's phone calls on a budget](https://callforme.tel/guides/ai-phone-calls-on-a-budget.md)