Privacy Policy

Last Updated: December 26, 2025

CallNode ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our telephony services.

1. Information We Collect

Account Information

  • Name, email address, company name
  • Payment information (processed securely via Stripe)
  • Account credentials and authentication data

Communication Data

  • Phone numbers (yours and those you communicate with)
  • Call records (date, time, duration, participants)
  • Message content (SMS/MMS text and media)
  • Voice recordings (when enabled)
  • Webhook URLs and integration configurations

Usage Information

  • API requests and usage patterns
  • Service performance and error logs
  • IP addresses and device information

2. How We Use Your Information

  • Service Delivery: Process calls and messages, route communications
  • Billing: Calculate charges, process payments, maintain transaction records
  • Support: Troubleshoot issues, respond to inquiries
  • Compliance: Meet legal obligations, prevent fraud and abuse
  • Improvement: Analyze usage patterns, enhance service quality

3. Data Sharing and Disclosure

We share information only when necessary:

  • Service Providers: Bandwidth (carrier), Stripe (payments), AWS (hosting)
  • Legal Requirements: Court orders, subpoenas, regulatory requests
  • Business Transfers: In case of merger, acquisition, or asset sale
  • Your Webhooks: Message and call data sent to your configured endpoints

We never sell your personal information to third parties.

4. Data Retention

  • Call Records: Retained for 90 days for billing and support purposes
  • Messages: Retained for 90 days unless deleted earlier
  • Account Data: Retained while account is active
  • Payment Records: Retained for 7 years per tax requirements

You can request deletion of your data by contacting support.

5. Data Security

We implement industry-standard security measures:

  • TLS/SSL encryption for data in transit
  • Encryption at rest for sensitive data
  • Access controls and authentication
  • Regular security audits and monitoring
  • PCI DSS compliant payment processing

6. Your Rights

Depending on your location, you may have rights to:

  • Access: Request copies of your personal data
  • Correction: Update inaccurate information
  • Deletion: Request deletion of your data
  • Portability: Receive your data in machine-readable format
  • Opt-Out: Unsubscribe from marketing communications

Contact privacy@callnode.io to exercise these rights.

7. TCPA Compliance

CallNode is a communication platform. You are responsible for:

  • Obtaining proper consent before contacting recipients
  • Maintaining do-not-call lists and honoring opt-outs
  • Complying with TCPA, CAN-SPAM, and CTIA guidelines
  • Providing clear identification and opt-out instructions

8. International Data Transfers

CallNode operates primarily in the United States. If you're located outside the US, your data may be transferred to and processed in the US. We use standard contractual clauses and other safeguards to protect international data transfers.

9. Children's Privacy

CallNode services are not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us information, please contact us immediately.

10. Changes to Privacy Policy

We may update this Privacy Policy periodically. We will notify you of material changes via email or prominent notice on our website.

11. Contact Us

Questions about this Privacy Policy or our data practices?
Email: privacy@callnode.io
Mail: CallNode, Inc. 9157 Wall Triana Hwy Box 9, Harvest AL 35749