Your calls, your voice, your data
Callmate hears your calls, knows your appointments and can speak in your voice. Here's how we protect all of it, and how you stay in control.
Promise
No training on your calls
We never train AI models on private calls or your voice.
Promise
Never sold
We don't sell your data or share it for advertising.
Consent
AI and recording notices
Callmate says it's an AI and gives recording notices where they're required.
Control
Access, export, delete
See, download or delete your calls, memory and voice at any time.
Practices
How we keep your data safe
Your calls
Recordings, transcripts and memory are encrypted everywhere they live, and never used to train models.
- Encrypted calls
- Voice travels over SRTP and TLS 1.2 or newer, including between our own services.
- Encrypted storage
- Recordings, transcripts and memory are encrypted at rest with AES-256.
- Recordings expire
- Recordings you don't save are deleted automatically after 30 days. Text stays until you delete it.
Your voice
Your cloned voice is only made with your consent, and only used for calls you start or approve.
- Consent first
- Cloning only works from the guided recording in your own account.
- Used only for you
- Your voice model is never shared, sold or used to train other models.
- Delete in one tap
- Deleting your clone removes the model and the recordings used to make it.
Your accounts
Connected accounts are read or updated only with your permission, and secrets stay secret.
- Permission per account
- You choose what each agent can read or change, and can revoke it any time.
- Hidden from the AI
- Passwords and payment details are kept out of the AI's view. Callmate asks you to step in instead.
- Separate agents
- Each agent's memory and connected accounts stay with that agent unless you share them.
How we build
Security is part of how we write, review and ship every change.
- Code review
- Every change is reviewed by a second engineer and scanned for known vulnerabilities.
- Least privilege
- Our team can't listen to your calls. Support access needs your permission and is logged.
- Stop means stop
- Cancelling a task ends its calls, retries and follow-ups. Callmate never reports success it didn't get.
Report a vulnerability
Found something? Write to security@callmate.test. We reply within one business day, keep you updated until it is fixed and credit you in our changelog if you like.
Questions about your data?
Ask us what we hold about you, request a copy or ask for it to be deleted. Business customers can also ask for our security questionnaire.