This Privacy Policy explains how Call Loop ("we," "us," or "our") collects, uses, and shares your information when you interact with our Services, including our website or any other interactions related to sales, marketing, or events.
By using our Services and Platform, you agree to the terms outlined in this Privacy Policy and our Terms of Service, Terms of Use, Billing Policy, and Cookie Policy. It's important to familiarize yourself with these policies as they contain important information about your rights and obligations when using Call Loop, our website and our mobile application.
If you have any questions or concerns about our policies or do not agree with any of the terms outlined in these documents, please contact us at help@callloop.com before using our services.
Personal information you disclose to us
Summary: We collect personal information that you provide to us.
We collect personal information that you voluntarily provide to us when you register on the Services, express an interest in obtaining information about us or our Platform and Services, or otherwise when you contact us.
Personal Information Provided by You. The personal information that we collect depends on the context of your interactions with us and the Services, the choices you make, and the products and features you use. The personal information we collect may include the following:
Sensitive Information. When necessary, with your consent or as otherwise permitted by applicable law, we process the following categories of sensitive information:
Payment Data. We may collect data necessary to process your payment if you choose to make purchases, such as your payment instrument number, and the security code associated with your payment instrument. All payment data is handled and stored by Call Loop, Inc.
Social Media Login Data. We may provide you with the option to register with us using your existing Google account. If you choose to register in this way, we will collect certain profile information about you from the social media provider, as described in the section called "How do we handle your social logins?" below.
Application Data. If you use our application(s), we also may collect the following information if you choose to provide us with access or permission:
This information is primarily needed to maintain the security and operation of our application(s), for troubleshooting, and for our internal analytics and reporting purposes.
All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes to such personal information.
Summary: Some information — such as your Internet Protocol (IP) address and/or browser and device characteristics — is collected automatically when you visit our Services.
We automatically collect certain information when you visit, use, or navigate the Services. This information does not reveal your specific identity (like your name or contact information) but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our Services, and other technical information. This information is primarily needed to maintain the security and operation of our Services, and for our internal analytics and reporting purposes.
Like many businesses, we also collect information through cookies and similar technologies. You can find out more about this in our Cookie Notice.
The information we collect includes:
Summary: We may collect limited data from public databases, marketing partners, social media platforms, and other outside sources.
In order to enhance our ability to provide relevant marketing, offers, and services to you and update our records, we may obtain information about you from other sources, such as public databases, joint marketing partners, affiliate programs, data providers, social media platforms, and from other third parties. This information includes mailing addresses, job titles, email addresses, phone numbers, intent data (or user behavior data), Internet Protocol (IP) addresses, social media profiles, social media URLs, and custom profiles, for purposes of targeted advertising and event promotion.
If you interact with us on a social media platform using your social media account (e.g., Facebook or X), we receive personal information about you from such platforms such as your name, email address, and gender. Any personal information that we collect from your social media account depends on your social media account's privacy settings. Please note that their own use of your information is not governed by this Privacy Policy.
Summary: We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We may also process your information for other purposes with your consent.
We process your personal information for a variety of reasons, depending on how you interact with our Services, including:
Summary: We only process your personal information when we believe it is necessary and we have a valid legal reason (i.e., legal basis) to do so under applicable law, like with your consent, to comply with laws, to provide you with services to enter into or fulfill our contractual obligations, to protect your rights, or to fulfill our legitimate business interests.
If you are located in Canada, this section applies to you.
We may process your information if you have given us specific permission (i.e., express consent) to use your personal information for a specific purpose, or in situations where your permission can be inferred (i.e., implied consent). You can withdraw your consent at any time.
In some exceptional cases, we may be legally permitted under applicable law to process your information without your consent, including, for example:
Summary: We may share information in specific situations described in this section and/or with the following categories of third parties.
Vendors, Consultants, and Other Third-Party Service Providers. We may share your data with third-party vendors, service providers, contractors, or agents ("third parties") who perform services for us or on our behalf and require access to such information to do that work. We have contracts in place with our third parties, which are designed to help safeguard your personal information. This means that they cannot do anything with your personal information unless we have instructed them to do it. They will also not share your personal information with any organization apart from us. They also commit to protect the data they hold on our behalf and to retain it for the period we instruct.
The categories of third parties we may share personal information with are as follows:
We also may need to share your personal information in the following situations:
Summary: We may use cookies and other tracking technologies to collect and store your information.
We may use cookies and similar tracking technologies (like web beacons and pixels) to gather information when you interact with our Services. Some online tracking technologies help us maintain the security of our Services and your account, prevent crashes, fix bugs, save your preferences, and assist with basic site functions.
We also permit third parties and service providers to use online tracking technologies on our Services for analytics and advertising, including to help manage and display advertisements, to tailor advertisements to your interests, or to send abandoned shopping cart reminders (depending on your communication preferences). The third parties and service providers use their technology to provide advertising about products and services tailored to your interests which may appear either on our Services or on other websites.
To the extent these online tracking technologies are deemed to be a "sale"/"sharing" (which includes targeted advertising, as defined under the applicable laws) under applicable US state laws, you can opt out of these online tracking technologies by submitting a request as described below under section "Do United States residents have specific privacy rights?"
Specific information about how we use such technologies and how you can refuse certain cookies is set out in our Cookie Notice.
We may share your information with Google Analytics to track and analyze the use of the Services. The Google Analytics Advertising Features that we may use include: Google Analytics Demographics and Interests Reporting. To opt out of being tracked by Google Analytics across the Services, visit https://tools.google.com/dlpage/gaoptout. You can opt out of Google Analytics Advertising Features through Ads Settings and Ad Settings for mobile apps. Other opt out means include http://optout.networkadvertising.org/ and http://www.networkadvertising.org/mobile-choice. For more information on the privacy practices of Google, please visit the Google Privacy & Terms page.
Summary: If you choose to register or log in to our Services using a social media account, we may have access to certain information about you.
Our Services offer you the ability to register and log in using your third-party social media account details (like your Google login). Where you choose to do this, we will receive certain profile information about you from your social media provider. The profile information we receive may vary depending on the social media provider concerned, but will often include your name, email address, friends list, and profile picture, as well as other information you choose to make public on such a social media platform.
We will use the information we receive only for the purposes that are described in this Privacy Policy or that are otherwise made clear to you on the relevant Services. Please note that we do not control, and are not responsible for, other uses of your personal information by your third-party social media provider. We recommend that you review their Privacy Policy to understand how they collect, use, and share your personal information, and how you can set your privacy preferences on their sites and apps.
Summary: We keep your information for as long as necessary to fulfill the purposes outlined in this Privacy Policy unless otherwise required by law.
We will only keep your personal information for as long as it is necessary for the purposes set out in this Privacy Policy, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements). No purpose in this notice will require us keeping your personal information for longer than the period of time in which users have an account with us.
When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize such information, or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.
Summary: We aim to protect your personal information through a system of organizational and technical security measures.
We have implemented appropriate and reasonable technical and organizational security measures designed to protect the security of any personal information we process. However, despite our safeguards and efforts to secure your information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information. Although we will do our best to protect your personal information, transmission of personal information to and from our Services is at your own risk. You should only access the Services within a secure environment.
Summary: We do not knowingly collect data from or market to children under 18 years of age.
We do not knowingly collect, solicit data from, or market to children under 18 years of age, nor do we knowingly sell such personal information. By using the Services, you represent that you are at least 18 or that you are the parent or guardian of such a minor and consent to such minor dependent’s use of the Services. If we learn that personal information from users less than 18 years of age has been collected, we will deactivate the account and take reasonable measures to promptly delete such data from our records. If you become aware of any data we may have collected from children under age 18, please contact us at help@callloop.com.
Summary: Depending on your state of residence in the US or in some regions, such as Canada, you have rights that allow you greater access to and control over your personal information. You may review, change, or terminate your account at any time, depending on your country, province, or state of residence.
In some regions (like Canada), you have certain rights under applicable data protection laws. These may include the right (i) to request access and obtain a copy of your personal information, (ii) to request rectification or erasure; (iii) to restrict the processing of your personal information; (iv) if applicable, to data portability; and (v) not to be subject to automated decision-making. In certain circumstances, you may also have the right to object to the processing of your personal information. You can make such a request by contacting us by using the contact details provided in the section "How can you contact us about this notice?" below.
We will consider and act upon any request in accordance with applicable data protection laws.
Withdrawing your consent: If we are relying on your consent to process your personal information, which may be express and/or implied consent depending on the applicable law, you have the right to withdraw your consent at any time. You can withdraw your consent at any time by contacting us by using the contact details provided in the section "How can you contact us about this notice?" below.
However, please note that this will not affect the lawfulness of the processing before its withdrawal nor, when applicable law allows, will it affect the processing of your personal information conducted in reliance on lawful processing grounds other than consent.
Opting out of marketing and promotional communications: You can unsubscribe from our marketing and promotional communications at any time by clicking on the unsubscribe link in the emails that we send, replying "STOP" or "UNSUBSCRIBE" to the SMS messages that we send, or by contacting us using the details provided in the section "How can you contact us about this notice?" below. You will then be removed from the marketing lists. However, we may still communicate with you — for example, to send you service-related messages that are necessary for the administration and use of your account, to respond to service requests, or for other non-marketing purposes.
If you would at any time like to review or change the information in your account or terminate your account, you can contact us using the contact information provided.
Upon your request to terminate your account, we will deactivate or delete your account and information from our active databases. However, we may retain some information in our files to prevent fraud, troubleshoot problems, assist with any investigations, enforce our legal terms and/or comply with applicable legal requirements.
Cookies and similar technologies: Most Web browsers are set to accept cookies by default. If you prefer, you can usually choose to set your browser to remove cookies and to reject cookies. If you choose to remove cookies or reject cookies, this could affect certain features or services of our Services. For further information, please see our Cookie Notice.
If you have questions or comments about your privacy rights, you may email us at help@callloop.com.
Most web browsers and some mobile operating systems and mobile applications include a Do-Not-Track ("DNT") feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this stage, no uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online. If a standard for online tracking is adopted that we must follow in the future, we will inform you about that practice in a revised version of this Privacy Policy.
California law requires us to let you know how we respond to web browser DNT signals. Because there currently is not an industry or legal standard for recognizing or honoring DNT signals, we do not respond to them at this time.
Summary: If you are a resident of California, Colorado, Connecticut, Delaware, Florida, Illinois, Indiana, Iowa, Kentucky, Maine, Montana, New Hampshire, New Jersey, Nevada, Oregon, Tennessee, Texas, Utah, Virginia or Washington, you may have the right to request access to and receive details about the personal information we maintain about you and how we have processed it, correct inaccuracies, get a copy of, or delete your personal information. You may also have the right to withdraw your consent to our processing of your personal information. These rights may be limited in some circumstances by applicable law. More information is provided below.
1. Categories of Personal Data Collected
In accordance with the applicable state laws, we collect the following categories of personal data:
For more details, refer to the "What Information Do We Collect?" section of our Privacy Policy.
2. Your Rights Under State Privacy Laws
Residents of certain U.S. states, including California (CCPA/CPRA), Texas (TDPSA), Virginia (VCDPA), Colorado (CPA), and others, are entitled to specific rights regarding their personal data. These rights may include:
These rights can be exercised by submitting a request through our data subject request by contacting us at help@callloop.com.
3. Data Minimization and Transparency
We adhere to the principle of data minimization, collecting only the personal data necessary to fulfill the specific purposes for which it was collected. We are transparent about our data practices, including the types of personal data we collect, the purposes for processing, the legal bases for processing, and any third parties with whom we share the data.
4. Data Security and Retention
We are committed to protecting your personal data through the implementation of reasonable and appropriate technical and organizational security measures, as outlined in our "How Do We Keep Your Information Safe?" section. Personal data is retained only for as long as necessary to fulfill the purposes for which it was collected or as required by law.
5. Third-Party Disclosures
We may share your personal data with third-party service providers to facilitate our services, as described in our "When and With Whom Do We Share Your Personal Information?" section. These service providers are contractually obligated to protect your data and may not use it for any purpose other than providing services on our behalf.
6. Non-Discrimination
We will not discriminate against you for exercising any of your rights under the relevant state privacy laws. This means that you will not be denied goods or services, charged different prices or rates, or provided a different level or quality of services based on your decision to exercise your privacy rights.
7. Appeals Process
If we decline to take action on your request, you have the right to appeal our decision. Appeals can be submitted by contacting us at help@callloop.com. We will review your appeal and respond within a reasonable timeframe as required by applicable state laws.
8. Do Not Track Signals
Our website does not respond to "Do Not Track" signals from web browsers. However, you can manage your cookie preferences and opt-out of certain tracking technologies as detailed in our "Cookie Policy" section.
9. Breach Notification
In the event of a data breach involving personal data of residents in any of the states mentioned, we will comply with the notification requirements set forth by the applicable state laws. This includes notifying affected individuals promptly and providing information on the nature of the breach, the data involved, and the steps being taken to address it.
We have collected the following categories of personal information in the past twelve (12) months:
We only collect sensitive personal information, as defined by applicable privacy laws or the purposes allowed by law or with your consent. Sensitive personal information may be used, or disclosed to a service provider or contractor, for additional, specified purposes. You may have the right to limit the use or disclosure of your sensitive personal information. We do not collect or process sensitive personal information for the purpose of inferring characteristics about you.
We may also collect other personal information outside of these categories through instances where you interact with us in person, online, or by phone or mail in the context of:
Learn more about the sources of personal information we collect in "What information do we collect?"
Learn about how we use your personal information in the section, "How do we process your information?"
We collect and share your personal information through:
Will your information be shared with anyone else?
We may disclose your personal information with our service providers pursuant to a written contract between us and each service provider. Learn more about how we disclose personal information to in the section, "When and with whom do we share your personal information?"
We may use your personal information for our own business purposes, such as for undertaking internal research for technological development and demonstration. This is not considered to be "selling" of your personal information.
We have not sold or shared any personal information to third parties for a business or commercial purpose in the preceding twelve (12) months. We have disclosed the following categories of personal information to third parties for a business or commercial purpose in the preceding twelve (12) months:
The categories of third parties to whom we disclosed personal information for a business or commercial purpose can be found under "When and with whom do we share your personal information?"
Based on the applicable laws of your country or state of residence in the US, you may have the right to request access to the personal information we collect from you, details about how we have processed it, correct inaccuracies, or delete your personal information. You may also have the right to withdraw your consent to our processing of your personal information. These rights may be limited in some circumstances by applicable law. To request to review, update, or delete your personal information, please send an email to help@callloop.com
You have rights under certain US state data protection laws. However, these rights are not absolute, and in certain cases, we may decline your request as permitted by law. These rights include:
Depending upon the state where you live, you may also have the following rights:
To exercise these rights, you can contact us by emailing us at help@callloop.com, or by referring to the contact details at the bottom of this document.
We will honor your opt-out preferences if you enact the Global Privacy Control (GPC) opt-out signal on your browser.
Under certain US state data protection laws, you can designate an authorized agent to make a request on your behalf. We may deny a request from an authorized agent that does not submit proof that they have been validly authorized to act on your behalf in accordance with applicable laws.
Upon receiving your request, we will need to verify your identity to determine you are the same person about whom we have the information in our system. We will only use personal information provided in your request to verify your identity or authority to make the request. However, if we cannot verify your identity from the information already maintained by us, we may request that you provide additional information for the purposes of verifying your identity and for security or fraud-prevention purposes.
If you submit the request through an authorized agent, we may need to collect additional information to verify your identity before processing your request and the agent will need to provide a written and signed permission from you to submit such request on your behalf.
Under certain US state data protection laws, if we decline to take action regarding your request, you may appeal our decision by emailing us at help@callloop.com. We will inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decisions. If your appeal is denied, you may submit a complaint to your state attorney general.
California Civil Code Section 1798.83, also known as the "Shine The Light" law, permits our users who are California residents to request and obtain from us, once a year and free of charge, information about categories of personal information (if any) we disclosed to third parties for direct marketing purposes and the names and addresses of all third parties with which we shared personal information in the immediately preceding calendar year. If you are a California resident and would like to make such a request, please submit your request in writing to us by using the contact details provided in the section "How can you contact us about this notice?"
We prioritize the security of your data both while it's in transit and at rest. To achieve this, we employ robust encryption methods: In Transit: When data travels between your device and our servers, it is secured with SSL (Secure Sockets Layer) encryption using a 2048-bit key. This level of encryption scrambles your data, making it unreadable to anyone who might intercept it during transmission. At Rest: Once your data reaches our servers, it is stored in encrypted form using the industry-standard AES-256bit key. This ensures that even if someone gains unauthorized access to our servers, they cannot decipher your data without the encryption key. We continuously evaluate and update our encryption protocols to stay ahead of emerging threats and ensure that your data remains secure.
We maintain strict control over who can access your data. Access is granted only to authorized personnel who require it to perform their job duties. We use a combination of security measures to enforce access controls: Cloud IAM: We use AWS Identity and Access Management (IAM) to manage user identities and permissions. This allows us to define fine-grained access controls for different roles within our organization, ensuring that users only have access to the data they need. VPC Firewall Rules: Our infrastructure is protected by Virtual Private Cloud (VPC) firewalls that restrict access to our internal network. Only authorized IP addresses are allowed to communicate with our servers, adding an extra layer of protection against unauthorized access attempts. Database Firewalls: Our databases have additional firewalls that further restrict access. We only allow connections from specific IP addresses and use strong authentication mechanisms to verify user identities. We regularly review and update our access controls to ensure they remain effective in protecting your data.
Your data is stored in secure data centers located in the US. These data centers are operated by Amazon Web Services (AWS), a leading provider of cloud infrastructure. AWS data centers adhere to strict security standards and have received multiple certifications for their security and compliance practices, including ISO 27001, PCI DSS, and SOC reports. These certifications demonstrate our commitment to maintaining a secure environment for your data and ensuring that it is protected from unauthorized access, theft, or loss.
We utilize a select number of trusted third-party service providers to enhance our services and deliver a better user experience. These providers are carefully vetted and are contractually obligated to adhere to strict data protection standards. We only share the minimum necessary data with these providers to enable them to perform their services, and we require them to implement appropriate security measures to protect your information. We regularly review our relationships with third-party providers and ensure that they continue to meet our high standards for security and privacy.
We comply with industry standards and regulations to protect your data. This includes regular security audits and assessments to identify and address potential vulnerabilities. We also utilize AWS CloudTrail, a service that provides a record of actions taken by users, roles, and AWS services. This allows us to monitor activity in our environment and detect any unauthorized access attempts. Our commitment to compliance ensures that your data is handled responsibly and in accordance with best practices.
We understand the importance of keeping your data available even in the event of an unexpected incident. We have a comprehensive disaster recovery plan in place that includes regular backups of your data. Our recovery time objective (RTO) is 24 hours, meaning we aim to restore your data and resume normal operations within 24 hours of a disruption. Our recovery point objective (RPO) is also 24 hours, which means that we aim to lose no more than 24 hours' worth of data in the event of a major incident. We regularly test our disaster recovery plan to ensure its effectiveness and maintain your data's availability.
We understand that your data is valuable, and we strive to keep it only as long as necessary to provide you with our services and comply with legal obligations. We regularly review our data retention practices and delete data that is no longer needed. You can also request that we delete your data at any time by contacting our support team.
We implement strong authentication measures to protect your account from unauthorized access. This includes requiring strong passwords and offering two-factor authentication (2FA) for an additional layer of security. We encourage all users to enable 2FA to enhance their account security.
We take a proactive approach to security by regularly conducting vulnerability scans and assessments of our systems. This helps us identify and address any potential weaknesses before they can be exploited. We also work with security experts to ensure that our security practices are up-to-date and effective.
In the unlikely event of a security incident, we have a comprehensive incident response plan in place. This plan outlines the steps we will take to contain the incident, investigate the cause, and restore normal operations as quickly as possible. We are committed to being transparent with our users and will notify you promptly of any incidents that may affect your data. We continuously strive to improve our security practices and protect your data. If you have any questions or concerns about our security measures, please don't hesitate to contact our support team.
Summary: Yes, we will update this notice as necessary to stay compliant with relevant laws.
We may update this Privacy Policy from time to time. The updated version will be indicated by an updated "Revised" date at the top of this Privacy Policy. If we make material changes to this Privacy Policy, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification. We encourage you to review this Privacy Policy frequently to be informed of how we are protecting your information.
If you have questions or comments about this notice, you may email us at help@callloop.com or contact us by post at:
Call Loop, Inc
1045 E Atlantic Ave Suite 202
Delray Beach, FL 33483
United States
Last updated September 9, 2024