Privacy policy
Last updated
This policy explains what personal data CallCeptor (ProxyCeptor) collects, why, where it is kept, and the choices you have. It is written to meet India's Digital Personal Data Protection Act, 2023 (the DPDP Act).
Two different roles
- Our customers' callers. When you call a business through a CallCeptor Call button on its website, that business decides what to collect and why. It is the data fiduciary; we process the data on its behalf and only on its instructions. Questions about those calls are best sent to that business first.
- Our own visitors and customers. For this website and for accounts on CallCeptor, we are the data fiduciary.
What we collect
On this website
This website does not use advertising or analytics cookies and does not load third-party trackers. Our hosting provider keeps standard server logs (IP address, browser, pages requested, time) for security and troubleshooting. If you email us, we keep the email and your address so we can reply.
When you call a business through CallCeptor
- What you enter in the pre-call form: usually name, mobile number, whether you are an existing client, and the topic.
- The page you called from, the referring site, and campaign (UTM) tags in the page address.
- Call details: time, duration, which agent answered, the outcome the agent records, and any notes.
- A recording of the call, only if the business has turned recording on for that department. You are told before the call starts.
- Technical data needed to connect the call, such as IP address and browser type.
When you have a CallCeptor account
- Your name, work email, and sign-in details.
- Your firm's details and billing information. Card payments are handled by our payment provider; we don't store card numbers.
- For agents, a verified mobile number if you use mobile fallback.
- Activity in the dashboard, which is written to an audit log your firm can see.
How we use it
- To connect, route, record (where enabled) and log calls for the business you are calling.
- To run accounts, bill customers and provide support.
- To keep the service secure, prevent abuse and fix problems.
- To meet legal obligations.
We do not sell personal data, and we do not use callers' data to advertise to them.
Where it is stored
Customer data, call records, recordings and backups are stored in data centres in India and encrypted at rest. Data in transit is encrypted with TLS, and call audio with DTLS-SRTP. Details are on the security page.
Who we share it with
Only with service providers we need to run CallCeptor, such as cloud hosting, email and SMS delivery, telephony for mobile fallback and callbacks, and payments. Each is bound by a contract to use the data only to provide that service. Customers can request the current list of sub-processors. We disclose data to authorities only when the law requires it.
How long we keep it
Call records and recordings are kept for the retention period each business sets, then deleted, unless a legal hold applies. Account data is kept while the account is active and for as long as needed afterwards for legal, tax and accounting purposes. Server logs are kept for a limited period for security.
Your rights
Under the DPDP Act you can ask to:
- get a summary of the personal data held about you and how it is processed;
- correct, complete or update it;
- have it erased when it is no longer needed, or withdraw consent you gave;
- have your grievance addressed; and
- nominate someone to exercise these rights if you cannot.
For a call you made to a business, we will pass your request to that business and help it respond. For everything else, email privacy@callceptor.com. If you are not satisfied with our response, you can complain to the Data Protection Board of India.
Children
CallCeptor is a business service and is not meant for children. We do not knowingly collect children's data.
Changes to this policy
When we change this policy we update the date at the top, and for significant changes we tell customers by email before they take effect.
Contact
Privacy questions, requests and grievances: privacy@callceptor.com. Other ways to reach us are on the contact page.