Privacy Policy

Account information: name, email address, username, phone (optional), and password (stored as a salted hash, never in plain text) for each person who signs up or is invited to an organization.

Organization information: business name, business type, timezone, and billing/subscription status.

Lead and activity data: whatever your organization enters about its own inquiries and customers — contact name, phone, email, notes, quoted prices, custom fields your organization configures, and a log of calls/texts/notes your team records. This data is entered by your organization, not collected by us directly from those third parties.

Usage and device data: standard web server logs (IP address, browser type, pages visited, timestamps), and, if you enable them, push-notification subscription details (a device/browser endpoint and encryption keys used only to deliver follow-up-reminder notifications you've opted into).

Cookies: we use a single essential session cookie to keep you signed in. We don't use advertising or cross-site tracking cookies, and as of this writing we don't run any third-party analytics on Callgenee.

We use the information above to:

• Provide, maintain, and secure the Service (authentication, multi-tenant data isolation, backups);
• Send account-related email — password resets, email verification, teammate invites, and trial/billing notices;
• Send follow-up-reminder push notifications you've opted into;
• Respond to support requests; and
• Improve the Service and diagnose problems.

We do not sell personal information, and we do not use your organization's data to train AI/ML models.

We share information with the service providers ("sub-processors") that Callgenee is built on, strictly so they can perform the function we use them for:

• Vercel — application hosting and delivery;
• Supabase — our Postgres database (where all account and lead data is stored);
• Resend — sending transactional email (invites, password resets, email verification, trial notices);
• Web push infrastructure (e.g. your browser vendor's push service) — to deliver notifications you've opted into.

We don't share your organization's data with other Callgenee organizations, and we don't share it with advertisers. We may disclose information if required by law, to protect the rights or safety of Callgenee or others, or in connection with a merger, acquisition, or sale of assets (with notice to affected Admins where required).

We retain account and lead data for as long as your organization is active. If an Admin removes a user, that user's record is hidden and their login disabled, but their historical leads and activity are kept so your organization's records stay intact — their email/username is freed up for reuse rather than being permanently reserved. If you close your organization or ask us to delete your data, we'll do so within a reasonable period, except where we're required to retain it (for example, financial records once online billing exists).

You can review and update your account information from My Account at any time, and Admins can review and manage their organization's users from Settings. You can disable push notifications from your browser or from Settings → Notifications at any time.

Depending on where you're located, you may have additional rights over your personal information — such as the right to access, correct, or delete it, or to object to certain processing (for example, under the GDPR if you're in the EU/UK, or the CCPA if you're a California resident). To exercise any of these rights, contact us at the address below; we'll respond within the time required by applicable law.

We use industry-standard measures to protect your information, including encrypted connections (HTTPS), salted password hashing, and per-organization data isolation enforced at the database-query level. No system is perfectly secure, and we can't guarantee absolute security, but we work to protect your data and will notify affected organizations of any breach as required by law.

Callgenee is a business tool and isn't directed at, or intended for use by, children. We don't knowingly collect personal information from anyone under 18.

Our infrastructure providers may process and store data in the United States and other countries. By using Callgenee, you understand that your information may be transferred to, and processed in, locations that may have different data-protection laws than your own.

We may update this Privacy Policy from time to time. If we make material changes, we'll update the "Last updated" date above and, where appropriate, notify Admins by email.

Questions about this Privacy Policy, or want to exercise a data-access/deletion request? Contact us at privacy@callgenee.app. See also our Terms of Service.