1. Introduction
CastGlobe Corporation ("CastGlobe", "we", "our", "us") operates OnCall (the "Service") and the website castglobe.com ("Site"). This Privacy Policy explains how we collect, use, and share information when you use the Service or visit the Site.
By using the Service, you agree to the collection and use of information in accordance with this policy.
2. Information We Collect
Account information. Name, email, business name, phone number, vertical/industry, and password (hashed and salted, never stored in plaintext).
Payment information. We use Stripe to process payments. Card details are handled directly by Stripe and never stored on CastGlobe servers. We retain transaction history (amounts, dates, status) for billing and audit purposes.
Call data. When you use the AI receptionist, we capture call recordings, transcripts, caller phone numbers, call durations, and AI-extracted summaries. This data is used to operate the Service and improve AI quality.
Lead data. When your AI captures a lead, we store the lead's name, phone number, email (if provided), and conversation summary in your account. This data is owned by you and processed by us on your behalf.
SMS communications. We retain records of SMS sent and received through the Service for compliance and operational purposes.
Usage data. IP addresses, browser type, device information, pages visited, and actions taken — standard web analytics for security and product improvement.
3. How We Use Your Information
We use the information we collect to operate the Service, process payments, send notifications you've subscribed to, prevent fraud and abuse, comply with legal obligations, and improve the AI models that power the Service. We do not sell your data. We do not share your data with advertisers.
4. AI and Third-Party Services
OnCall uses these third-party services to operate:
- Twilio — phone calls and SMS routing
- VAPI — AI voice agent infrastructure
- Anthropic — knowledge base parsing and call analysis (Claude AI)
- Stripe — payment processing
- Resend — transactional email
- Google Calendar / Calendly — calendar integration (only if connected by you)
- Cloudflare — anti-bot protection and DDoS mitigation
Each provider processes data subject to their own privacy policies. We have data processing agreements where required by GDPR, PIPEDA, and similar regulations.
5. Call Recording Disclosure
OnCall records inbound calls for quality and operational purposes. Recordings are stored encrypted and accessible only to the account owner and CastGlobe staff handling support requests. By using the Service, you agree to:
- Inform callers that calls may be recorded (your AI agent does this when configured to)
- Comply with all applicable call recording laws in your jurisdiction
- Not use the Service to record calls in jurisdictions requiring two-party consent without obtaining that consent
6. Data Retention
We retain your account data for as long as your account is active. After account closure:
- Personally identifiable information is deleted within 90 days
- Aggregated, anonymized usage data may be retained indefinitely
- Financial records are retained for 7 years per Canadian tax law
Default call recording retention is 90 days. You can request earlier deletion at any time.
7. Your Rights
Subject to applicable law (PIPEDA in Canada, GDPR in Europe, CCPA in California, and similar), you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Receive an export of your data in a portable format
- Object to certain processing
- Withdraw consent for marketing communications
To exercise these rights, email privacy@castglobe.com or hello@castglobe.com. We respond within 30 days.
8. Children's Privacy
OnCall is a B2B service and is not directed at children under 16. We do not knowingly collect data from children. If we learn we've collected data from a child, we will delete it promptly.
9. International Transfers
CastGlobe is based in Canada. By using the Service, you understand your data may be processed in Canada, the United States (where some service providers operate), and other jurisdictions. We use standard contractual clauses and other lawful mechanisms for international transfers where required.
10. Security
We use industry-standard security measures, including TLS encryption in transit, encryption at rest for sensitive data, hashed and salted passwords, and access controls. No system is perfectly secure; we will notify affected users of any breach as required by applicable law.
11. Changes to This Policy
We may update this Privacy Policy. Material changes will be notified via email to active account holders at least 30 days before taking effect. Continued use of the Service after changes constitutes acceptance.
12. Contact
For privacy questions: privacy@castglobe.com or hello@castglobe.com.
CastGlobe Corporation
Toronto, ON, Canada