Skip to content
CallMeCallMe
Menu

Pre-launch: Olorin.ai is in a private pilot. What you see here is built and in daily use by the pilot; public sign-up opens when the launch checklist completes.

Privacy policy

Draft — pending legal review. CallMe is in a private pilot; this policy is published as a draft for review and is not yet in force. It describes what the service actually stores today, which the trust page summarises.

What we collect

  • Account. Your Google sign-in identity (email, name, account identifier), the phone number you verify as yours, and your account settings: plan, recording mode and retention period, wallet and billing state, the agents you configure (including their prompts and tool settings), your provisioned numbers and the carrier subaccount created for you.
  • Calls. An audit record is written before every dial: the numbers involved, times, duration and outcome. That is call metadata. When recording is off for your account, we store no transcript of its calls: the conversation's turns are held in memory while the call is live and are not saved. Two records that an agent itself produces are separate and do not depend on the recording setting: the short note a hosted agent gives the person it transfers a call to is kept with the call record, and the webhook actions your agent posts are kept in your webhook delivery log until it is purged. When recording is on for your account, the call's transcript (both sides of the call) is stored (in announced mode as well). When recording is on or announced, the call's audio is stored with it. New accounts start in announced mode (a recording notice is spoken at the start of the call), and you can change the setting at any time. Transcripts and audio are kept for your retention setting (30 days by default, settable between 7 and 30). Audio is reachable only through signed links minted at read time, valid for at most 15 minutes; transcripts are returned only to your own authenticated requests.
  • People who call your numbers. Callers to your numbers are third parties, not account holders, and have not agreed to anything with us. When an inbound call goes to voicemail, the service records the caller's message and its transcription whatever your recording setting is. Voicemail is the default routing of a number, and the fallback when a hosted agent or a webhook cannot answer; a number you route to reject records nothing. Twilio, the carrier, handles that audio under its own terms and retention as well.
  • Messages. Records of the texts you send and receive, including content and delivery status. Inbound texts are checked for verification codes: the verification inbox shows only the latest code per sender, and only within 10 minutes of its arrival.
  • Usage and billing. Usage counters, your wallet ledger, and your Stripe customer and subscription references. Card details are entered with Stripe; we never receive or store them.
  • Keys and secrets. API keys are stored as keyed digests (the key itself is shown once and never stored); carrier credentials and webhook signing secrets are stored sealed, encrypted, and opened only inside the service at the moment of use.
  • Operations. Service logs, including usage alerts, kept to run and protect the service.

How we use it

To place and receive the calls and texts you direct, to bill you, to prevent fraud and abuse, and to meet carrier requirements. We do not sell personal data, and we do not use your content for advertising.

Who processes it

  • Twilio — the carrier: calls, texts, phone verification and recording capture run on your account's Twilio subaccount.
  • Google — sign-in, and the cloud the service runs on (Cloud Run, Firestore, Cloud Storage), including the voices that speak on calls.
  • Anthropic — only when you use hosted agents: the conversation turns of those calls and texts go to the model that answers them, and its token usage is metered to your account.
  • Stripe — payments, subscriptions and wallet top-ups.

Retention and your choices

  • Recordings and transcripts are purged on a best effort basis once your retention setting has passed: the purge runs when a call on your account closes, so an expired artifact can remain until then. You can delete any single call's artifacts at any time. Call and message records are kept while your account is open. [Post-closure retention periods: to be settled at legal review.]
  • Recording is your setting — off, on or announced — and so is its retention period, between 7 and 30 days.
  • For access, correction or deletion requests, or to close your account, contact support@callme.olorin.ai.

Security and limits

Every account is a separate tenant: another account's calls, messages and artifacts are invisible to you — the API answers 404, never 403. CallMe is not HIPAA-covered; do not use it for health information or similarly regulated data. [Data-processing addendum and breach-notification terms: to be settled at legal review.]