Privacy policy

Callista is an AI receptionist service operated by Infinite Library SAS, a French company (RCS Nanterre 995 219 276, VAT FR71 995 219 276), registered office in Montrouge, France. This policy explains what we collect, why, and your choices. Questions: hello@infinitelibrary.ai.

Two kinds of data

Account data. When a business signs up, we collect the owner's email, the business details they enter or import from their public website (services, prices, hours, service area), billing details handled by our payment processor, and usage data. For this data we are the controller.

Caller data. When someone calls a business that uses Callista, we process what is needed to answer and book: the caller's phone number, name, the service address for on-site jobs, the reason for the call, the conversation transcript and, only if the business turns recording on, the call audio. We do this on behalf of the business, which is the controller of its callers' data. We act as its processor and follow its instructions.

What the receptionist does not collect

• It does not take medical history or payment card numbers over the phone.
• It does not record call audio unless the business enables recording, in which case callers are told at the start of the call.

How we use data

• To answer calls, book appointments and jobs, check service areas, and alert the business.
• To show the business its calls, summaries, recordings and bookings.
• To bill subscriptions, prevent abuse, and keep the service secure and reliable.

We never sell personal data, and we do not use callers' conversations to train public AI models.

Who we share it with

We use carefully chosen service providers under data processing agreements: cloud hosting and database providers, AI model providers that generate the receptionist's replies, voice and telephony providers, an email delivery provider, and a payment processor. They may only use the data to provide their service to us. A current list is available on request. Some providers are in the United States; transfers rely on standard contractual clauses or equivalent safeguards.

How long we keep it

Transcripts, summaries and bookings are kept while the business's account is open, so it has a record of its calls. Recordings are kept for up to 90 days. When a business deletes its account, its data and its callers' data are deleted within 30 days, except what we must keep for tax and accounting.

Your rights

You can ask to access, correct, delete or export your data, or object to its use. If you called a business that uses Callista, contact that business first; we will help it respond. California residents have the rights described in the CCPA, and we do not sell or share personal information for cross-context behavioral advertising. EU and UK residents can complain to their data protection authority (in France, the CNIL).

Security

Data is encrypted in transit and at rest. Access is limited to the people and systems that need it.

Children

Callista is a business service and is not meant for children under 16.

Changes

We will post updates here and tell account owners by email about important changes.