Legal
Privacy Policy
Last updated: June 26, 2025
1. Introduction and Scope
This Privacy Policy ("Policy") describes how KALLABOT LTD, a company registered in the United Kingdom (Company Number: 15889537), with its registered office at Bradford, United Kingdom ("Company," "we," "us," "our," "KALLABOT") collects, uses, processes, stores, shares, and protects information about you ("User," "you," "your").
This Policy applies to all interactions with our Services, including but not limited to:
- Our website at kallabot.com and all subdomains
- Our mobile and desktop applications
- Our AI voice agent services
- Our APIs and developer tools
- Communications between you and KALLABOT
- Marketing and advertising campaigns
BY USING OUR SERVICES, YOU ACKNOWLEDGE THAT YOU HAVE READ AND UNDERSTOOD THIS PRIVACY POLICY AND AGREE TO THE COLLECTION, USE, AND DISCLOSURE OF YOUR INFORMATION AS DESCRIBED HEREIN.
2. Information We Collect
We collect extensive information about you through various means and for various purposes. This includes:
2.1. Information You Provide Directly
- Account Information: Full name, email address, phone number, company name, job title, username, password
- Profile Information: Profile picture, biography, preferences, settings
- Payment Information: Credit/debit card details, billing address, transaction history, payment method preferences
- Communication Data: Messages, emails, support tickets, feedback, survey responses
- Voice Data: Voice recordings, voice samples for AI training, synthesized voice models
- Business Information: Company details, tax identification numbers, business documents
- Verification Data: Government-issued ID, proof of address, verification selfies
2.2. Information We Collect Automatically
- Device Information: Device ID, hardware model, operating system, browser type and version, screen resolution, language settings
- Location Data: IP address, GPS coordinates, time zone, country, state, city, postal code
- Usage Data: Pages visited, features used, click paths, time spent, frequency of use, search queries, error logs
- Performance Data: Application crashes, system performance, network latency, API response times
- Cookie Data: Session cookies, persistent cookies, tracking pixels, web beacons, local storage data
- Call Data: Call duration, call recordings, transcripts, metadata, participant information
- Network Information: Internet service provider, connection type, bandwidth
2.3. Information from Third Parties
- Authentication Providers: Google, Microsoft, and other OAuth providers share profile information
- Payment Processors: Stripe and other payment providers share transaction status and risk assessments
- Analytics Services: Google Analytics, Microsoft Clarity, and similar services provide behavioral insights
- Advertising Partners: Google Ads, Facebook, and other platforms provide campaign performance data
- Business Partners: Referral sources, integration partners, resellers
- Public Sources: Publicly available information from social media, websites, databases
2.4. Sensitive Information
While we do not intentionally collect sensitive personal information, you may provide such information through our Services. This may include voice biometric data, health information mentioned in calls, or other sensitive data in communications.
3. How We Use Your Information
We use the collected information for numerous purposes, including but not limited to:
3.1. Service Provision and Improvement
- Providing, maintaining, and improving our Services
- Processing transactions and managing subscriptions
- Creating and training AI models, including voice synthesis
- Personalizing user experience and recommendations
- Developing new features and services
- Conducting research and analysis
3.2. Communication and Marketing
- Sending service-related notifications and updates
- Marketing communications about new features, offers, and promotions
- Conducting surveys and collecting feedback
- Responding to inquiries and providing customer support
- Sending billing and account information
3.3. Analytics and Business Intelligence
- Analyzing usage patterns and user behavior
- Measuring service performance and effectiveness
- Conducting A/B testing and experiments
- Creating aggregated and anonymized datasets
- Generating business insights and reports
- Training machine learning models
3.4. Security and Legal Compliance
- Detecting, preventing, and addressing fraud and abuse
- Monitoring for security threats and vulnerabilities
- Complying with legal obligations and regulations
- Enforcing our Terms of Service and policies
- Protecting our rights and property
- Responding to legal requests and court orders
3.5. Advertising and Retargeting
- Displaying targeted advertisements across platforms
- Retargeting users who have visited our website
- Creating lookalike audiences for marketing
- Measuring advertising effectiveness
- Optimizing marketing campaigns
4. Information Sharing and Disclosure
We share your information with various third parties for business purposes:
4.1. Service Providers
- Cloud Infrastructure: Amazon Web Services, Google Cloud Platform, Microsoft Azure
- Payment Processing: Stripe, PayPal, and other payment providers
- Communication Services: Twilio, SendGrid, Intercom
- Analytics Providers: Google Analytics, Microsoft Clarity, Mixpanel
- Customer Support: Zendesk, Freshdesk, support contractors
- AI Services: Microsoft Azure AI, Google AI, OpenAI
4.2. Advertising and Marketing Partners
- Google Ads and Google Marketing Platform
- Facebook/Meta advertising services
- LinkedIn advertising
- Email marketing platforms
- Affiliate marketing networks
- Marketing analytics services
4.3. Legal and Compliance
We may disclose your information:
- To comply with legal obligations, subpoenas, or court orders
- To respond to lawful requests by public authorities
- To protect our rights, property, or safety
- To investigate potential violations of our Terms
- In connection with legal proceedings or claims
- To law enforcement agencies or regulatory bodies
4.4. Business Transfers
In the event of a merger, acquisition, bankruptcy, dissolution, reorganization, or similar transaction, your information may be transferred as part of the business assets.
4.5. Consent-Based Sharing
We may share your information with third parties when you explicitly consent or direct us to do so.
5. Data Storage and Retention
5.1. Retention Policy: WE RETAIN YOUR INFORMATION INDEFINITELY. We do not automatically delete user data, even after account termination. Your information remains in our systems for the following purposes:
- Historical record keeping and analytics
- Legal compliance and dispute resolution
- Fraud prevention and security
- Product improvement and research
- Machine learning model training
- Business intelligence and reporting
5.2. Data Storage Locations: Your data may be stored and processed in multiple locations worldwide, including:
- United States
- European Union
- United Kingdom
- Other countries where our service providers operate
5.3. Data Backups: We maintain multiple backups of all data across different geographic locations. These backups are retained indefinitely and may contain historical versions of your information.
6. Data Security
6.1. Current Security Measures: We implement basic security measures to protect your information. However, please note:
- We use standard HTTPS encryption for data in transit
- We do NOT encrypt all data at rest
- We implement basic access controls and authentication
- We do NOT have advanced intrusion detection systems
- We do NOT hold security certifications (ISO 27001, SOC 2, etc.)
- We perform minimal security audits and penetration testing
- We rely primarily on our third-party providers' security measures
6.2. Security Limitations: YOU ACKNOWLEDGE AND ACCEPT THAT:
- No method of transmission over the Internet is 100% secure
- We cannot guarantee the absolute security of your information
- You transmit information to us at your own risk
- We are not responsible for circumvention of security measures
- Data breaches may occur despite our efforts
6.3. Breach Notification: In the event of a data breach, we may attempt to notify affected users, but we do not guarantee timely notification and may not notify you at all if not legally required.
7. Cookies and Tracking Technologies
We use extensive tracking technologies to monitor your activities:
7.1. Types of Tracking Technologies
- Cookies: Session cookies, persistent cookies, third-party cookies
- Web Beacons: Invisible pixel tags that track email opens and web page visits
- Local Storage: HTML5 local storage and session storage
- Device Fingerprinting: Collecting device attributes to create unique identifiers
- ETags: Cache identifiers used for tracking
- JavaScript Tags: Code snippets that collect behavioral data
- SDK Tracking: Mobile app tracking through integrated SDKs
7.2. Third-Party Tracking
We allow numerous third parties to place tracking technologies on our Services:
- Google Analytics and Google Tag Manager
- Facebook Pixel and Conversions API
- Microsoft Clarity for session recordings
- Hotjar for heatmaps and recordings
- LinkedIn Insight Tag
- Twitter Pixel
- Various advertising and retargeting services
7.3. Cross-Device Tracking
We use technologies to track you across multiple devices and browsers to provide personalized experiences and targeted advertising.
7.4. Do Not Track
We do NOT respond to Do Not Track (DNT) signals. We continue to collect information regardless of your DNT settings.
8. Third-Party Services and APIs
Our Services integrate with numerous third-party services that have their own data practices:
8.1. Microsoft Azure Services
- Azure AI Services for voice synthesis and analysis
- Personal Voice and Custom Voice features that process voice biometrics
- Azure Active Directory for authentication
- Azure storage and compute services
8.2. Google Services
- Google OAuth for authentication
- Google Analytics for usage tracking
- Google Ads for advertising
- Google Cloud services
- YouTube API for video integration
8.3. Voice Data Processing
When using voice features:
- Your voice data is sent to Microsoft Azure for processing
- Voice models may be retained by Microsoft
- Voice data may be used to improve AI services
- Biometric voice prints may be created and stored
- You consent to all third-party processing of voice data
9. International Data Transfers
Your information is transferred and processed globally without restriction:
- We transfer data across international borders without specific safeguards
- We do NOT use Standard Contractual Clauses or other transfer mechanisms
- Your data may be subject to foreign government surveillance
- Different countries have different data protection standards
- You consent to the transfer of your data to any country
10. Your Rights and Choices
10.1. Limited Rights: While some jurisdictions provide data protection rights, we provide only limited options:
10.2. Access and Correction
You may request access to some of your personal information through your account settings. We may deny requests that we deem unreasonable or burdensome.
10.3. No Deletion Rights
WE DO NOT DELETE USER DATA UPON REQUEST. Account closure does not result in data deletion. Your information remains in our systems indefinitely.
10.4. Marketing Communications
You may opt out of marketing emails using the unsubscribe link. However, we continue to send transactional and service-related communications.
10.5. Cookie Choices
You can manage some cookies through your browser settings, but this may impact Service functionality. We do not provide a cookie preference center.
11. Children's Privacy
Our Services are not intended for children under 18 years of age. We do not knowingly collect information from children. If we discover that we have collected information from a child, we may or may not delete it at our discretion.
12. California Privacy Rights
12.1. CCPA Notice: If you are a California resident, you have certain rights under the California Consumer Privacy Act (CCPA). However, we limit these rights to the maximum extent permitted by law.
12.2. Sale of Personal Information: We may share information with third parties in ways that could constitute a "sale" under CCPA. We do not provide an opt-out mechanism.
12.3. Shine the Light: California residents may request information about disclosures to third parties for direct marketing purposes. Contact us at [email protected].
13. European Privacy Rights
13.1. Legal Basis: If you are in the European Economic Area (EEA) or United Kingdom, we process your data based on:
- Contract performance
- Legitimate interests (which override your rights)
- Legal obligations
- Consent (which may be implied through use)
13.2. GDPR Rights: While GDPR provides certain rights, we limit these to the minimum required by law. Data deletion requests are not honored. We do not appoint an EU representative.
14. Changes to This Privacy Policy
We reserve the right to modify this Privacy Policy at any time without prior notice. Changes are effective immediately upon posting. Your continued use of the Services constitutes acceptance of the revised Policy.
We may or may not notify you of changes. It is your responsibility to review this Policy periodically.
15. Contact Information
For privacy-related inquiries, contact us at:
KALLABOT LTD
Email: [email protected]
Data Protection Inquiries: [email protected]
Website: https://kallabot.com
Note: We may not respond to all privacy inquiries. Response times vary and are not guaranteed.