privacy policy

updated October 11, 2026

This policy covers call4me at call4.me, our phone-calling service, and our connected tools, including the call4me plugin in ChatGPT. Contact me@call4.me with privacy questions or requests.

What we collect and why

• Account and sign-in information. We store your email, account identifier, and information supplied by your sign-in provider, such as your name and profile image. We store sign-in sessions, authorization grants and tokens, and a password hash for accounts that use password sign-in. This lets us identify you, protect your account, and authorize the clients you connect. Security records can include IP addresses, browser information, and request times.
• Call requests and history. We store the destination number, business and task details you or your agent provide, scheduling information, answers you give during a call, call status, timing and charges, outcomes, text transcripts, and recording references. If you join a call or receive a callback, we also process your phone number and your part of the conversation. We use this information to make and manage the requested calls, return results, maintain your history, resolve problems, and prevent abuse.
• Saved calling profile. If you choose to save details, we store fields such as your name, date of birth, phone number, address, and vehicle details so they can be reused for relevant calls. Some integrations outside the ChatGPT plugin also support health or dental insurance fields. Saving a profile is separate from giving details for one call; you can remove saved fields.
• Payments. We store your balance, purchases, charges, and payment-provider references for billing and reconciliation. Stripe handles card payments; call4me does not receive your full card number or security code.
• Support and email. We process the messages and contact details you send us to answer requests, plus delivery and subscription records for account emails and newsletters. Blog comments store the name, email, comment, IP address and posting time; your name and comment are public, but your email is not displayed. Blog likes use a browser identifier. If you answer the optional question about how you found call4me, we store your answer with your account and use it to understand how people find us.
• Website and usage information. We process browser and device information, IP addresses, referring sites, landing pages, campaign and click identifiers, cookie identifiers, and account-linked usage events for site analytics and advertising measurement. The recipients and limits are described below.

Data used by the ChatGPT plugin

Connecting the plugin links it to your call4me account. We receive the inputs sent with a tool request, not your entire ChatGPT conversation. These inputs can include the business to call, the task, necessary contact or booking details, and answers you authorize your agent to pass along.

The tools return information to your connected client, including the requested call status, outcome, transcript, recording links, saved profile fields, or balance. Your client processes those results under its own privacy settings and policy. Only send information needed for the task and information you have permission to share about another person.

The ChatGPT plugin excludes medical and dental appointment categories and health-insurance profile fields. Do not send protected health information, government identifiers, payment-card details, passwords, API keys, or one-time authentication codes in call briefs, profiles, or tool inputs. Sign in through the dedicated authorization flow, not by putting credentials into a chat or call request.

Who receives information

• The people and businesses you call receive the information shared during the conversation to carry out your task. They may keep their own records. Anyone you share a recording link with may be able to use it while it remains valid.
• Cloudflare hosts our application, databases, call-session state, and operational logs. Telnyx carries calls and processes phone numbers, call metadata, and recorded audio.
• OpenAI processes call instructions, relevant calling details, live audio, transcripts, and generated responses for the voice agent, its supporting reasoning, and call summaries. This API processing is separate from your use of ChatGPT as the connected client.
• Raindrop, when monitoring is enabled, receives diagnostic information about voice sessions and summaries, including account and call identifiers, model activity, and conversation content. We enable its personal-information redaction and apply additional redaction to supported fields; this is not a guarantee that every personal detail is removed.
• Stripe processes payments. Google or X handles the sign-in method you choose. Our email service, normally Fastmail, processes message addresses and content to deliver account, support, and newsletter emails.
• Your connected client receives tool results as described above. Our service providers may process information outside your country. Their separate retention and legal obligations can apply to information they receive.

Analytics, advertising measurement, and cookies

We use Google Analytics and Ahrefs Web Analytics to understand site visits, and Meta and Reddit to measure our ads. Website scripts receive visit and browser information. Some account events are also sent from our servers, including when a connected agent uses call4me without an open browser.

• Google Analytics receives browser identifiers, our internal account identifier, a one-way hash of your email when available, acquisition information, and sign-up, purchase, and call-usage events. Our server-side events do not include call destinations, briefs, transcripts, or audio.
• Meta receives browser and ad-click identifiers, IP address and browser type when available, a hashed account identifier, and sign-up, purchase and call-placement events. Our conversion payloads do not include your email, phone number, name, destination, or conversation content.
• Reddit receives click and campaign information, available browser information, hashed account and email identifiers, purchase amounts, and milestones such as a first completed call, returning use, or a resolved task. Our conversion payloads exclude phone numbers, destinations, call categories, briefs, transcripts, recordings, and detailed outcomes.

Hashed identifiers are pseudonymous, not anonymous: a recipient may match them to information it already holds. We keep first-visit attribution and paid Reddit visit records so we can connect later purchases and usage to their source.

Text alerts

call4me alerts is operated by Skeptrune LLC. If you choose optional SMS alerts, we store your verified phone number, the consent wording you accepted, the time of your choice, and any later withdrawal. We use these records to manage call attention and phone number renewal notifications and honor your preferences.

Mobile information, SMS consent, and SMS subscription records are not sold or shared with third parties or affiliates for marketing or promotional purposes. They are shared only with service providers, including Telnyx and mobile carriers, as necessary to operate the messaging service, honor your preferences, or comply with legal requirements. SMS consent does not authorize advertising use of your phone number.

You can withdraw consent at text alert preferences or, once messages are available, by replying STOP. We retain consent and withdrawal records to document your choices and prevent unwanted messages. Contact me@call4.me for questions or deletion requests.

How long information is kept

• Account records and text call history: there is currently no automatic age-based deletion. Account details, call briefs, transcripts, outcomes, schedules, and balance history remain stored until removed through an account or data-deletion request. Disconnecting a plugin or not using the service does not delete these records.
• Saved profiles: fields remain until you remove them or request account deletion. Removing a profile field does not erase a copy already used in an earlier call or shared with a business.
• Call recordings: Telnyx stores the audio. Its published recording policy currently states that recordings are stored for one year unless deleted earlier, and that this maximum may change. We do not guarantee availability for that whole period. An expiring download link is not deletion of the underlying audio. Contact us to request earlier removal of a recording.
• Sign-in and authorization: our browser sessions are configured for up to 400 days and renew with active use. OAuth access tokens last seven days; refresh tokens can last ten years and rotate when used. Tokens can be revoked before expiry. These are access lifetimes, not promises to erase the associated account, authorization records, or call history when a token expires.
• Our cookies: first-visit attribution lasts up to 365 days, paid Reddit visitor and visit cookies up to 90 days, and the blog reader cookie up to 365 days. The blog database bookmark cookie lasts up to ten minutes. Browsers may remove cookies earlier. Attribution copied into our database has no automatic age-based expiry; deleting a cookie does not delete that copy.
• Blog, email, support, and measurement records: stored comments, subscription and delivery records, support correspondence, attribution records, and conversion-delivery records do not currently have a fixed automatic deletion period. Unsubscribing stops the relevant emails but keeps the subscription record, including its unsubscribed status, so we can honor that choice. Ask us about removing these records.
• Provider logs and copies: providers may retain security logs, backups, payment records, and diagnostic data on their own schedules. For example, OpenAI's API data controls describe default abuse-monitoring retention of up to 30 days, with legal and safety exceptions and separate rules for stored application data. We do not promise immediate erasure of every provider copy when data is removed from call4me. Contact us for help with provider-held data related to your account.

Your choices and deletion requests

• View and correct: use my account or the connected tools to review your calls and available recordings. Your saved calling profile is on that page too, where you can edit or delete any field or the whole profile; connected tools can do the same with call4me_get_profile and call4me_save_profile (an empty string removes a field). Only save details you want reused.
• Disconnect: remove the plugin or connection in your client's settings to stop using it there. Contact us if you also need help revoking access. Disconnecting, signing out, and deleting an account are different actions.
• Email choices: use the unsubscribe link in the relevant newsletter or promotional email. This does not stop essential account or support messages, or automatically delete subscription records.
• Browser controls: your browser can block or clear cookies and block third-party scripts. This can affect sign-in and preferences. These controls do not by themselves stop account-linked events sent from our servers or delete information already shared. Contact us about objecting to measurement or requesting removal of associated data; there is currently no in-product account-wide analytics switch.
• Access, deletion, and other privacy requests: email me@call4.me from the address associated with your account. Say whether the request concerns your account, particular calls or recordings, profile, comments, newsletter, or measurement data. We may need to verify account ownership before acting. Account and call-history deletion is handled by support, not by a plugin tool.

Some records may need to be retained for applicable legal, payment, fraud-prevention, or dispute obligations; ask us about the reason and applicable period for your request. Deletion from call4me does not recall information already shared with a business, exported by you, or stored in your connected client's conversation. Those recipients have their own controls.

We may update this policy as the service changes; the date above identifies this version. Privacy questions and requests always go to me@call4.me.