Privacy Policy

1. Who We Are

CallROAS is a product of RevX Global LLC, a limited liability company registered in the United States. Our services are designed for business customers ("Customers") — specifically, performance marketers, agencies, and advertisers running call-based advertising campaigns.

If you have questions about this policy, contact us at [email protected].

2. Scope of This Policy

This Privacy Policy applies to:

• The CallROAS web application and dashboard at callroas.com
• The CallROAS API and webhook services
• Any call data processed through our platform on behalf of Customers
• Marketing and informational content on our website

This policy does not apply to third-party services integrated with CallROAS (such as Google Ads, Meta, or call tracking platforms). Those services are governed by their own privacy policies.

3. Information We Collect

3.1 Account Information

When you create a CallROAS account, we collect:

• Name and email address
• Company name and billing information
• Account credentials (password stored as a salted hash)
• Communications you send to our support team

3.2 Call Data (Processed on Behalf of Customers)

To deliver our core service, we process call recordings submitted by Customers through our webhook or API. This includes:

• Audio recordings of telephone calls
• AI-generated transcriptions of those recordings
• Call metadata (duration, timestamp, call tracking IDs, campaign parameters)
• AI classification results (e.g., sale, no-sale, callback, disqualified)
• Click IDs (GCLID, FBCLID) associated with the call for conversion attribution

Customers are responsible for ensuring they have the legal right to record and process the calls they submit to CallROAS, including compliance with applicable state wiretapping and recording consent laws (e.g., California's two-party consent requirement) and the TCPA.

3.3 Technical and Usage Data

We automatically collect certain technical data when you use our service:

• IP address, browser type, and device information
• Pages visited and features used within the dashboard
• API request logs (endpoint, timestamp, response code)
• Error logs and performance metrics

3.4 Cookies

We use essential cookies to maintain your session and authentication state. We may use analytics cookies (e.g., privacy-preserving analytics) to understand how users interact with our dashboard. We do not use advertising cookies or tracking pixels on our own website.

4. How We Use Your Information

We use the information we collect to:

• Deliver the service: Transcribe and classify call recordings; generate ROAS analytics; send conversion events to Google Ads and Meta on your behalf.
• Improve the AI: Aggregated and anonymized transcription data may be used to improve our AI classification models. We do not use individually identifiable call content for model training without your explicit consent.
• Billing and account management: Process payments, send invoices, manage your subscription.
• Customer support: Respond to inquiries, troubleshoot issues, and provide onboarding assistance.
• Security and compliance: Detect and prevent fraud, unauthorized access, and abuse of our platform.
• Communications: Send transactional emails (receipts, alerts) and, with your consent, product updates and newsletters.

5. How We Share Your Information

We do not sell your personal information. We share data only in the following circumstances:

5.1 With Your Consent

We send conversion data (call outcome + click ID) to Google Ads and Meta Conversions API on your behalf, as directed by your account configuration. You control which platforms receive data.

5.2 Service Providers

We use trusted third-party providers to help operate our service, including cloud infrastructure, payment processing, and customer support tools. These providers are contractually bound to process data only on our behalf and may not use it for their own purposes.

5.3 Legal Requirements

We may disclose information if required by law, court order, or government request, or to protect the rights, property, or safety of CallROAS, our Customers, or the public.

5.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change via email or a prominent notice on our website.

6. Data Retention

• Call recordings: Deleted from our servers within 24 hours of processing, unless you have enabled the optional transcript archive feature.
• Transcripts and classifications: Retained for the duration of your subscription plus 90 days, unless you request earlier deletion.
• Account data: Retained for the duration of your account. Upon account deletion, personal data is purged within 30 days.
• Billing records: Retained for 7 years as required by tax and accounting regulations.

7. Security

We take security seriously. Our measures include:

• TLS 1.3 encryption for all data in transit
• AES-256 encryption for data at rest
• Access controls and role-based permissions within our infrastructure
• Regular security audits and vulnerability assessments
• SOC 2 Type II compliance (Enterprise plan)

No method of transmission or storage is 100% secure. If you discover a potential security issue, please report it to [email protected].

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data (subject to our legal retention obligations).
• Portability: Request your data in a structured, machine-readable format.
• Objection: Object to certain uses of your data, including for marketing communications.
• Restriction: Request that we restrict processing of your data in certain circumstances.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

9. California Privacy Rights (CCPA/CPRA)

California residents have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including the right to know what personal information is collected, the right to delete personal information, and the right to opt out of the sale of personal information.

We do not sell personal information. To exercise your California privacy rights, contact us at [email protected].

10. Children's Privacy

CallROAS is a business-to-business service not intended for individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, please contact us and we will delete it promptly.

11. International Data Transfers

Our infrastructure is hosted in the United States. If you are accessing CallROAS from outside the United States, your data may be transferred to and processed in the US. We apply appropriate safeguards consistent with applicable data protection laws when transferring data internationally.

12. Third-Party Links

Our website and dashboard may contain links to third-party services (e.g., Google Ads, Meta Business Suite). We are not responsible for the privacy practices of those services. We encourage you to review their privacy policies before connecting them to your CallROAS account.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or by displaying a prominent notice in the dashboard at least 14 days before the change takes effect. Your continued use of CallROAS after the effective date constitutes your acceptance of the updated policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact: