Privacy policy

LlamaCalls is the data controller for your account. When your agent joins a call with other people, such as a Google Meet or a Telegram call, you decide that it does, so for those people you are the controller and we process their data on your behalf.

• Account: your email, name and, with Google sign-in, your profile picture.
• Agents: the instructions, voice, face and settings you give them.
• Calls: audio is streamed for speech-to-text, and we keep a transcript. Depending on your settings we also keep audio, video, screenshots the agent took, and an analysis report.
• Uploaded portraits: a photo you upload to use as an agent’s face. Only upload a face you have the right to use.
• Connections: access tokens for tools you connect (such as Notion), sites you sign the agent’s browser into, and a connected Telegram account’s session and phone number. All are encrypted at rest.
• Payments: the amount and time of each top-up. Card details go to our payment provider and never reach us.
• Technical: IP address and browser for each sign-in session, and short-lived server logs.
• Contact form: what you write to us, and your name and email if you give them.

• To provide the service you signed up for: running calls, keeping your history, billing. Basis: contract (Art. 6(1)(b)).
• To keep it safe and working: preventing abuse, fixing faults, rate limits. Basis: legitimate interests (Art. 6(1)(f)).
• Uploaded portraits and call analysis run only when you turn them on. Basis: consent (Art. 6(1)(a)), which you can withdraw by deleting the portrait or turning analysis off.

We do not sell your data, show ads, or use your calls to train our models. Skill scores and analysis reports are feedback for you; nothing we produce makes decisions with legal or similarly significant effects about anyone.

If your agent joins a call with people other than you, tell them an AI agent is present and what it records before it joins. You are responsible for having a lawful basis for recording them. They can ask you, or us at hello@llamacalls.com, to have a call deleted.

• Call transcripts, audio, video and analysis: deleted automatically 90 days after the call.
• Preview clips: 7 days.
• Account, agents and connections: until you delete them or your account.
• Server logs: a few days.

Deleting your account erases all of it. Recordings are wiped from storage within minutes. Our payment provider keeps its own invoice records as required by tax law.

These kinds of companies process personal data for us under their data processing terms. Where data leaves the EU or UK, the transfer is covered by the EU Standard Contractual Clauses or the EU–US Data Privacy Framework. For the named list of processors, email hello@llamacalls.com.

Tools you connect to an agent (such as Notion) receive what the agent sends them, under their own terms.

Under the GDPR you can:

• get a copy of your data, and take it elsewhere (access and portability);
• have it corrected, or erased;
• restrict or object to how we use it, and withdraw consent at any time;
• complain to your data protection authority.

Signed in, go to Privacy in the app to download everything or delete your account in one step. Anything else, email hello@llamacalls.com and we will answer within one month.

Everything travels over TLS. Connector tokens, browser sign-ins and Telegram sessions are encrypted with AES-256-GCM before they are stored. Each account can only reach its own data. If a breach puts your data at risk, we will tell the authority within 72 hours and tell you without undue delay.

We only use cookies that keep you signed in. They are strictly necessary, so there is no cookie banner. There are no analytics, advertising or tracking cookies.

LlamaCalls is not for anyone under 16.

When this policy changes we update the date above, and tell you by email if the change is significant.