Privacy Policy — Callio

Effective date: 2026-06-04 · Last updated: 2026-06-11

This Privacy Policy explains how Wojciech Szymański (Alchemicy AI) ("Callio", "we", "us") collects, uses, and shares information in connection with the Callio AI voice receptionist service, our website, dashboard, and mobile app (the "Service").

Controller / contact: Wojciech Szymański (Alchemicy AI), Poznań, Poland. Email: [email protected].


1. Who our users are

2. Information we collect

From Customers (account): name, business name, business phone number, email, login credentials (hashed), billing details (processed by Stripe — we do not store card numbers), agent configuration, and usage data (minutes, call counts).

From End Callers (during calls): the phone number you call from, the audio recording and transcript of the call, and information you provide during the call (e.g., name, vehicle/appointment details, the reason for your call). We generate an AI summary of the call for the Customer, and we keep a per-caller profile (e.g., name and prior-call facts) so the Customer can recognise returning callers.

Automatically: device/app diagnostics, log data, and (for the website) standard analytics and cookies.

3. Call recording, transcription & AI disclosure

4. How we use information

Notification policy: We deliver operational notifications (e.g., call summaries) to the Customer (business owner) as in-app push notifications. We do not send SMS or any messages to End Callers. Customers can disable push notifications in their device settings.

5. How we share information

We share information with service providers (subprocessors) strictly to operate the Service:

We require these providers to protect information under data-processing terms. We do not sell personal information. We may disclose information to comply with law or protect rights/safety.

6. Legal bases (GDPR / EEA)

Where GDPR/RODO applies, we process: (a) to perform our contract with Customers; (b) on legitimate interests (operating, securing, and improving the Service; B2B outreach) balanced against your rights; (c) to comply with legal obligations; and (d) on consent where required (e.g., call recording).

7. Your rights

To exercise rights, contact [email protected]. End Callers may request deletion of their call data by contacting us or the relevant Customer.

8. Data retention

We retain End-Caller call recordings, transcripts, summaries, and per-caller profiles for up to 12 months (or a shorter period the Customer configures, or longer where required by law), after which they are deleted or anonymised. Account data is retained while the account is active and for a reasonable period afterward for legal/accounting needs.

9. International transfers

We are based in Poland (EU); our providers may process data in the United States and elsewhere. Where required, transfers rely on appropriate safeguards (e.g., Standard Contractual Clauses).

10. Security

We use industry-standard measures (encryption in transit, hashed passwords, access controls, JWT-based auth, tenant isolation). No method is 100% secure.

11. Children

The Service is for businesses and is not directed to children under 16. We do not knowingly collect their data.

12. Google API Services & Google Calendar integration

Callio offers an optional integration with Google Calendar so your AI receptionist can check availability and create, update, or cancel appointment events on calendars you own. If you connect Google Calendar:

13. Changes

We may update this Policy; we will post the new effective date and, for material changes, notify Customers.

14. Contact

Wojciech Szymański (Alchemicy AI), Poznań, Poland · [email protected]