Privacy Policy

Pal Call Privacy Policy

Effective date: September 23, 2026

Pal Call ("Pal Call," "we," "us," or "our") respects privacy and treats account, telecommunications, security, and integration data as sensitive operational information. This Privacy Policy explains how Pal Call collects, uses, discloses, and protects information when you use the Pal Call website, Pal Call Shield, customer portal, support center, call-protection features, reports, and supported telecommunications integrations.

1. Scope

This Policy applies to the Pal Call website and services that link to it. Third-party providers such as RingCentral, Twilio, carriers, hosting providers, payment providers, or other integrated services process information under their own terms and privacy notices when acting independently.

2. Information we may process

• Account and business information, including name, company name, email address, account preferences, language, and account status.
• Telecommunications metadata, including protected number, caller number, destination number, provider, timestamps, call state, duration when available, extension, queue, site, and related provider metadata.
• Security and protection data, including risk score, confidence, caller reputation, allow/block decisions, challenge results, attack indicators, shared threat patterns, alerts, and reasons supporting a protection decision.
• Integration data, including provider account identifiers, phone-number identifiers, extensions, queues, subscriptions, webhooks, granted permissions, and connection health.
• Authentication and security data, including encrypted or protected access tokens, refresh tokens, client secrets where required, login events, device/browser information, IP address, and security logs.
• Support and communications data, including support tickets, messages, and information you voluntarily provide.
• Audio files you or Pal Call upload for IVR or Voice Challenge prompts. Uploading a prompt does not mean Pal Call records the content of calls.

3. How we use information

We use information to provide, secure, maintain, and improve the service; connect supported providers; analyze inbound-call behavior; detect abusive or suspicious traffic; calculate risk and confidence; build caller reputation; operate allowlists, blocklists, challenge flows, attack mode, reports, and alerts; troubleshoot failures; prevent fraud and misuse; provide customer support; protect users and infrastructure; and comply with applicable law.

4. Caller reputation, automated analysis, and shared threat intelligence

Pal Call may use historical and behavioral signals to estimate whether a call, caller, or pattern presents elevated risk. Signals can include velocity, repetition, challenge outcomes, prior blocks, rotating caller IDs, unknown or anonymous status, provider identity signals, patterns across protected numbers, and prior security events.

Risk scores and reputation indicators are probabilistic security tools. They are not legal determinations that a person committed fraud, and caller ID can be spoofed. Pal Call does not intentionally label a number as fraudulent based on a single signal alone.

Shared Threat Intelligence may use aggregated or de-identified patterns across Pal Call customers to improve detection. Pal Call does not disclose one customer's identity or private account data to another customer through this feature.

5. Service-provider / processor role

To the extent applicable law treats customer-submitted call data as data processed on behalf of a business customer, Pal Call intends to use that data as a service provider or processor for the customer, subject to the customer's instructions, these terms, security needs, and applicable law. We do not use customer call metadata for unrelated third-party advertising.

6. Authentication credentials and secrets

When a provider supports OAuth, Pal Call does not need your provider password. Tokens, refresh tokens, client secrets, and similar credentials are treated as security-sensitive information, restricted to authorized use, redacted from normal interfaces and logs where designed, and encrypted or otherwise protected at rest where supported by the service architecture.

7. Voice Challenge and IVR

If Voice Challenge is enabled, the call may be routed to an IVR flow that plays a prompt and asks the caller to take an action, such as pressing a digit. Pal Call may record operational results such as challenge sent, passed, failed, wrong key, or timeout. These results may affect future risk analysis.

8. Call recording

Pal Call Shield does not, merely by operating a prompt or analyzing call metadata, represent that it records the audio content of calls. If call recording is separately enabled through Pal Call or a connected provider, the customer is responsible for configuring legally required notices and obtaining legally required consent. U.S. recording laws vary by jurisdiction.

9. How information may be disclosed

We may disclose information to vendors and subprocessors that help provide the service, such as telecommunications providers, infrastructure and hosting providers, email providers, security vendors, payment providers when applicable, and professional advisers. We may also disclose information when reasonably necessary to comply with valid legal process, protect rights and safety, investigate abuse, prevent fraud, or complete a corporate transaction.

10. No sale of call data for advertising

Pal Call does not sell customer call metadata to advertisers and does not intentionally share customer call metadata for cross-context behavioral advertising. If our practices materially change, we will update this Policy and provide legally required choices before the change applies where required.

11. Cookies and similar technologies

Pal Call uses strictly necessary session and security technologies to authenticate users, maintain sessions, prevent abuse, and operate the service. See our Cookie & Tracking Notice for additional details.

12. Retention

We retain information for as long as reasonably necessary to provide and secure the service, maintain records, investigate incidents, resolve disputes, enforce agreements, satisfy legal obligations, or protect legitimate business interests. Retention can vary by data type and account status. Deletion requests may be subject to legal, security, fraud-prevention, backup, accounting, or other permitted exceptions.

13. Security

We use administrative, technical, and organizational safeguards designed to protect information, including access controls, secret redaction, secure transport, account isolation, authentication controls, logging, backups, and monitoring. No internet-connected system can guarantee absolute security. Customers remain responsible for securing their own accounts, provider credentials, endpoints, users, and devices.

14. Data breaches and incidents

If we identify a security incident involving information under our control, we may investigate, contain, remediate, preserve evidence, and provide notices when required by applicable law.

15. U.S. privacy rights

Depending on your state and whether a particular law applies to Pal Call, you may have rights to request access, correction, deletion, or a copy of certain personal information, and in some jurisdictions rights relating to sale, sharing, targeted advertising, sensitive information, or certain automated processing. We will not discriminate against you for exercising a legally protected privacy right.

Privacy requests may be submitted through the Contact page / صفحة التواصل or the Contact page. We may need to verify your identity or authority before completing a request, and authorized agents may be required to provide proof of authority where permitted by law.

16. California residents

If the California Consumer Privacy Act, as amended (CCPA/CPRA), applies to Pal Call and to your information, additional disclosures and rights are described in our California Privacy Notice. Pal Call does not require a consumer to waive non-waivable CCPA rights.

17. Children

Pal Call is a business service intended for adults. It is not directed to children under 13, and customer accounts are intended for persons age 18 or older who have authority to act for themselves or the business they represent.

18. Sensitive industries and regulated data

Unless Pal Call signs a separate written agreement expressly supporting a regulated use case, the service is not intended to receive Social Security numbers, full payment-card data, medical records or protected health information subject to HIPAA, consumer reports used for FCRA decisions, or other data that is unnecessary to operate call protection. Do not submit such information in support tickets or call labels.

19. International users

Pal Call is designed for the United States market. If you access the service from another jurisdiction, you are responsible for determining whether your use is lawful there. Information may be processed in the United States or other locations used by our service providers, subject to applicable law and contractual protections where required.

20. Changes to this Policy

We may update this Policy when our services, legal obligations, or data practices change. We will post the updated version and effective date and provide additional notice when legally required.

21. Contact

Operator: Pal Call

Privacy contact: the Contact page / صفحة التواصل

Legal contact: the Contact page / صفحة التواصل

General contact: the Contact page / صفحة التواصل

Business address: the business address published by Pal Call / عنوان المراسلات المنشور من Pal Call