Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how Teeoff Technologies Private Limited ("CatchMyCall," "we," "us," or "our") collects, uses, maintains, protects, and discloses information obtained from users ("User," "you," or "your") of the CatchMyCall service, website, and mobile applications (collectively, the "Service").

CatchMyCall is a virtual assistant service that allows you to conditionally forward your incoming phone calls to our automated assistant. Our assistant interacts with callers on your behalf, records conversations, generates AI-powered transcripts and summaries, and delivers them to you.

This Policy applies to all users of our Service, including:

• Service Users (individuals who subscribe to and use CatchMyCall)
• Callers (third-party individuals who call Service Users and interact with our virtual assistant)

Your privacy is critically important to us. This Policy complies with applicable privacy and data protection laws, including:

• United States federal laws and state privacy laws (including CCPA/CPRA, BIPA, and other state regulations)
• European Union General Data Protection Regulation (GDPR)
• United Kingdom GDPR and Data Protection Act 2018
• UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data

2. Who We Are

Data Controller Information:

Data Protection Officer (DPO):

For users in the European Union, United Kingdom, and other jurisdictions requiring a DPO, you may contact our Data Protection Officer at:

We act as the "data controller" for the personal information we collect and process through our Service, meaning we determine how and why your personal data is processed.

3. Scope and Applicability

This Privacy Policy applies to:

• All users who create accounts and subscribe to CatchMyCall
• All third-party callers whose calls are forwarded to our virtual assistant
• Visitors to our website at catchmycall.ai
• Users of our mobile applications
• All data processing activities conducted in connection with the Service

This Policy does NOT apply to:

• Information collected by third-party websites, applications, or services linked from our Service
• Information collected by our Service Users independently of CatchMyCall
• Employment-related information about our employees or contractors

4. Information We Collect

We collect and process the following categories of information:

4.1 Information About Service Users

Account Information:

• Full name
• Email address
• Phone number
• Username and password (encrypted)
• Billing and payment information
• Account preferences and settings

Call Forwarding Configuration:

• Conditional forwarding rules (time-based, contact-based, custom conditions)
• Blocked caller lists
• Priority caller settings
• Call handling preferences

Usage Information:

• Service usage statistics (calls forwarded, summaries generated, features used)
• Login and access logs
• Device information (device type, operating system, browser type)
• IP address and approximate geographic location
• Session information

4.2 Information About Callers (Third Parties)

When a third party places a call to a Service User who has enabled call forwarding to CatchMyCall, we collect:

Caller Metadata:

• Caller phone number
• Date and time of call
• Call duration
• Geographic location (derived from area code/network information)
• Network/carrier information
• Device type (if discernible)

Call Audio Recordings:

• Complete audio recording of the conversation between the caller and our virtual assistant
• Voice characteristics and patterns

Transcripts and AI-Generated Content:

• Text transcription of the call
• AI-generated summary of call content
• Key information extracted from the call (names, callback requests, messages, etc.)

4.3 Information We Collect Automatically

Cookies and Tracking Technologies:

• Cookies, web beacons, and similar technologies (see Section 17)
• Analytics data about website and app usage
• Performance and diagnostic information

Communications:

• Customer support inquiries and correspondence
• Feedback and survey responses
• Marketing communication preferences

5. How We Collect Information

We collect information through the following methods:

5.1 Information You Provide Directly

• Account registration and profile creation
• Configuring call forwarding preferences
• Customer support interactions
• Payment transactions
• Survey responses and feedback

5.2 Information Collected Automatically

• When you use our Service, website, or mobile applications
• Through cookies and tracking technologies
• When calls are forwarded to our virtual assistant

5.3 Information From Third Parties

• Payment processors (for billing verification)
• Telecommunications carriers (for call routing and metadata)
• Analytics service providers
• Identity verification services

5.4 Information About Callers

Source of Caller Information:

When a third-party caller contacts a Service User who has enabled call forwarding, we obtain the caller's phone number and metadata from telecommunications network data. We do NOT obtain caller information from purchased lists, data brokers, or other commercial sources; caller data is collected solely as a result of the caller initiating contact with our Service User.

Transparency Obligation:

We are required by law (particularly under GDPR Article 14) to inform third-party callers:

• That their call is being recorded and processed by CatchMyCall
• The purposes for which we process their data
• Their rights regarding their personal data
• How to exercise those rights

Callers receive an automated audio disclosure at the beginning of each call notifying them of recording and providing this information.

6. Call Recording and Consent

6.1 Call Recording Practices

All calls forwarded to CatchMyCall are recorded. This includes the complete audio conversation between our virtual assistant and the caller.

Call recordings are necessary to provide our core Service functionality:

• Creating accurate transcripts of conversations
• Generating AI-powered summaries
• Delivering call information to Service Users
• Improving virtual assistant accuracy and performance
• Ensuring quality and compliance

6.2 Consent Requirements

Consent is legally required from all parties to a call before recording can commence. The consent requirements vary by jurisdiction:

United States:

• Federal law requires consent from at least one party to the call (one-party consent).
• Eleven states and the District of Columbia require consent from ALL parties to the call (two-party consent): California, Connecticut, Florida, Illinois, Maryland, Massachusetts, Montana, New Hampshire, Nevada, Pennsylvania, and Washington.
• Our Policy: To ensure compliance across all U.S. jurisdictions, CatchMyCall obtains consent from all parties to every call before recording.

European Union and United Kingdom:

• Recording requires a lawful basis under GDPR/UK GDPR.
• Explicit consent is the primary lawful basis for call recording.
• Additional requirements under ePrivacy Directive and UK PECR may apply.

United Arab Emirates:

• UAE Federal Law No. 5 of 2012 (Cybercrime Law), Article 21, explicitly prohibits recording any conversation without the knowledge and approval of ALL parties.
• Two-party consent is mandatory and non-negotiable.
• Recording without consent is a criminal offense punishable by fines (AED 150,000 to AED 500,000) and imprisonment (6 months to 2 years).

6.3 How We Obtain Consent

For Service Users:

• When you register for CatchMyCall, you provide explicit consent to record calls forwarded to our Service.
• You acknowledge that you are responsible for ensuring callers are aware that calls may be recorded.
• You agree to our Terms of Service, which include call recording provisions.

For Callers (Third Parties):

• Consent by Continuation: If the caller continues the call after hearing the disclosure, they provide implicit consent to recording.
• Right to Refuse: Callers who do not consent can immediately hang up. We do not record conversations with callers who refuse consent.
• Documentation: We maintain logs of consent disclosures provided during each call.

6.4 Withdrawal of Consent

Callers can withdraw consent by:

• Hanging up before or during the call
• Requesting deletion of their recording after the call (see Section 13)

Service Users can withdraw consent by:

• Disabling call forwarding in their account settings
• Deleting their account (resulting in deletion of all recordings)
• Requesting deletion of specific recordings

7. Biometric Information

7.1 Collection of Biometric Data

Voice recordings may constitute biometric information under certain privacy laws, including:

• Illinois Biometric Information Privacy Act (BIPA): Defines "biometric identifier" to include voiceprints.
• Texas Capture or Use of Biometric Identifier Act (CUBI): Includes voiceprints as biometric identifiers.
• California Consumer Privacy Act (CCPA/CPRA): Treats voiceprints as sensitive personal information.
• EU and UK GDPR: Voice data used for biometric identification constitutes "special category data" under Article 9.

How We Use Voice Data:

CatchMyCall processes voice recordings for the following purposes:

• Transcription (converting speech to text)
• AI-powered summarization
• Service improvement and quality assurance

We do NOT use voice recordings for biometric identification, authentication, or voice pattern analysis beyond transcription and summarization.

7.2 Biometric Data Protections

We protect biometric information with:

• Encryption: All voice recordings are encrypted in transit.
• Access Controls: Only authorized personnel and systems can access biometric data on a need-to-know basis.
• Secure Storage: Biometric data is stored in secure cloud infrastructure with appropriate certifications.
• No Unauthorized Disclosure: We do not disclose biometric information to third parties except with your explicit consent, to service providers bound by confidentiality obligations, or as required by law.

7.3 Biometric Data Retention and Destruction

Retention Period: Voice recordings (biometric identifiers) are retained for 60 days from the date of the call, or until the purpose for collection is satisfied, whichever occurs first.

Destruction: Upon expiration of the retention period, or upon your request for deletion, we permanently and irreversibly delete voice recordings.

8. How We Use Your Information

We use the information we collect for the following purposes:

8.1 To Provide and Operate the Service

• Call Forwarding and Virtual Assistant Services: Route calls, answer calls on behalf of Service Users, interact with callers.
• Call Recording: Record conversations for transcription and summarization.
• Transcription and Summarization: Convert audio to text and generate AI-powered summaries.
• Delivery of Call Information: Provide transcripts, summaries, and call metadata to Service Users.
• Account Management: Create and maintain user accounts, process registrations, manage subscriptions.
• User Preferences: Store and apply call forwarding rules, preferences, and settings.

8.2 To Process Payments

• Process subscription fees and payments
• Manage billing, invoicing, and account status
• Detect and prevent fraudulent transactions

8.3 To Communicate With You

• Send transactional communications (account confirmations, service updates, technical notices)
• Respond to customer support inquiries
• Provide important notices about changes to our Service or Policy

8.4 To Improve Our Service

• Analyze usage patterns and Service performance
• Conduct research and development to enhance virtual assistant accuracy
• Train and improve AI models for transcription and summarization
• Identify and fix technical issues and bugs
• Develop new features and functionality

8.5 To Ensure Security and Prevent Fraud

• Monitor for suspicious activity, unauthorized access, and fraud
• Enforce our Terms of Service and other policies
• Protect the security and integrity of our Service, users, and systems
• Comply with legal obligations and respond to legal requests

8.6 To Comply With Legal Obligations

• Respond to subpoenas, court orders, and other legal processes
• Comply with applicable laws, regulations, and regulatory requests
• Cooperate with law enforcement and government authorities
• Enforce our legal rights and defend against legal claims

8.7 Payments, Refunds, and Cancellations

Where applicable, CatchMyCall processes payments for subscriptions, usage-based services, or wallet credits through authorized third-party payment processors. Personal and financial information is used solely for the purpose of processing payments, managing subscriptions, handling cancellations, issuing refunds where applicable, and complying with legal and accounting obligations.

We do not store complete payment card details on our servers. All payment processing is handled securely by third-party payment processors in compliance with applicable financial and data protection regulations.

9. AI and Automated Processing

9.1 Use of Artificial Intelligence

CatchMyCall uses artificial intelligence (AI) and machine learning technologies to:

• Transcribe call audio into text using automated speech recognition (ASR) technology
• Generate summaries of call content using natural language processing (NLP)
• Extract key information from calls (caller names, callback numbers, messages, action items)
• Improve virtual assistant responses through machine learning

9.2 Accuracy and Limitations of AI

9.3 Automated Decision-Making

We do NOT make decisions that produce legal effects or similarly significant effects based solely on automated processing. All significant decisions involve human review.

10. Legal Basis for Processing (EU/UK/UAE Users)

If you are located in the European Union, United Kingdom, or United Arab Emirates, data protection laws require that we have a "legal basis" for processing your personal data. We rely on the following legal bases:

10.1 Consent (GDPR Article 6(1)(a))

We process your data based on your explicit consent when:

• You agree to call recording and processing during account registration
• You opt in to marketing communications
• You provide consent for processing biometric information (voice recordings)

You have the right to withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

10.2 Contractual Necessity (GDPR Article 6(1)(b))

We process your data to perform our contract with you (our Terms of Service), including:

• Providing call forwarding and virtual assistant services
• Creating and managing your account
• Delivering call transcripts and summaries
• Processing payments

10.3 Legitimate Interests (GDPR Article 6(1)(f))

We process your data based on our legitimate business interests, which include:

• Improving our Service and developing new features
• Ensuring the security and integrity of our systems
• Detecting and preventing fraud and abuse
• Conducting analytics and research
• Communicating with you about Service updates

10.4 Legal Obligations (GDPR Article 6(1)(c))

We process your data to comply with legal obligations, including:

• Responding to court orders, subpoenas, and legal requests
• Complying with tax, accounting, and financial reporting requirements
• Cooperating with law enforcement and regulatory authorities

11. How We Share Your Information

We do NOT sell, rent, or trade your personal information to third parties for their marketing purposes.

We share your information only in the following limited circumstances:

11.1 Service Providers and Business Partners

We share information with trusted third-party service providers who assist us in operating our Service, including:

Service Provider Obligations: All service providers are contractually obligated to:

• Use your information only for the specified purposes
• Implement appropriate security measures
• Comply with applicable data protection laws
• Delete or return data upon termination of services

11.2 Legal Requirements and Protection of Rights

We may disclose your information when required or permitted by law:

• Legal Process: To comply with subpoenas, court orders, legal proceedings, or governmental requests.
• Law Enforcement: To cooperate with law enforcement investigations or regulatory inquiries.
• Rights Protection: To enforce our Terms of Service, protect our rights and property, or defend against legal claims.
• Safety and Security: To protect the safety, security, and integrity of our Service, users, or the public.
• Fraud Prevention: To detect, prevent, or investigate fraud, security breaches, or illegal activity.

11.3 Business Transfers

If CatchMyCall is involved in a merger, acquisition, asset sale, bankruptcy, or other business transaction, your information may be transferred to the successor entity. We will notify you via email and/or prominent notice on our website before your information is transferred and becomes subject to a different privacy policy.

11.4 With Your Consent

We may share your information with third parties when you explicitly consent or direct us to do so (e.g., integrating with third-party applications you authorize).

11.5 Aggregated and De-Identified Data

We may share aggregated, anonymized, or de-identified data that cannot reasonably be used to identify you. This includes:

• Usage statistics and analytics
• Industry research and reports
• Service performance metrics

12. Data Retention and Deletion

12.1 Retention Periods

We retain your information for as long as necessary to fulfill the purposes described in this Policy, unless a longer retention period is required or permitted by law.

12.2 Automated Deletion

We implement automated deletion processes to permanently remove data upon expiration of the retention period. Deleted data is irretrievably destroyed and cannot be recovered.

12.3 User-Initiated Deletion

Service Users can delete data by:

• Deleting individual call recordings via dashboard or contacting support
• Deleting account by contacting support

Upon account deletion, all associated data (call recordings, transcripts, summaries, metadata) is permanently deleted within 30 days.

Callers (Third Parties) can request deletion by:

Contacting support@catchmycall.ai with phone number used for the call, approximate date and time, and name of Service User called (if known). We will verify your identity and delete your data within 30 days of verification.

13. Your Privacy Rights

Depending on your location, you have specific rights regarding your personal information.

13.1 Rights for All Users

• Access to Information: You can access, review, and download your information by logging into your account or contacting us.
• Correction: You can update or correct inaccurate information through your account settings or by contacting us.
• Deletion: You can request deletion of your information.
• Communication Preferences: You can opt out of marketing communications at any time.

13.2 Rights for California Residents (CCPA/CPRA)

Under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), California residents have the following rights:

• Right to Know: Request information about the categories and specific pieces of personal information we collected.
• Right to Delete: Request deletion of your personal information, subject to certain exceptions.
• Right to Correct: Request correction of inaccurate personal information.
• Right to Limit Use of Sensitive Personal Information: Limit our use of sensitive personal information (biometric information/voiceprints).
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA/CPRA rights.

13.3 Rights for EU and UK Residents (GDPR)

Under the GDPR and UK GDPR, EU and UK residents have the following rights:

• Right of Access (Article 15): Obtain confirmation and access to your personal data.
• Right to Rectification (Article 16): Correct inaccurate or incomplete personal data.
• Right to Erasure / "Right to be Forgotten" (Article 17): Request deletion of your personal data in certain circumstances.
• Right to Restriction of Processing (Article 18): Request temporary suspension of processing.
• Right to Data Portability (Article 20): Receive your data in a machine-readable format.
• Right to Object (Article 21): Object to processing based on legitimate interests or direct marketing.
• Right Not to Be Subject to Automated Decision-Making (Article 22): Not be subject to decisions based solely on automated processing.
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent.
• Right to Lodge a Complaint: Lodge a complaint with a supervisory authority.

13.4 Rights for UAE Residents

Under UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data, UAE residents have rights including:

• Right to Access
• Right to Rectification
• Right to Erasure
• Right to Object
• Right to Restrict Processing
• Right to Data Portability
• Right to Lodge a Complaint

How to Exercise Your Rights

To exercise any of your privacy rights, please contact us at:

We will respond to verifiable requests within the timeframes required by applicable law.

14. International Data Transfers

CatchMyCall operates globally and may transfer your information to countries outside your country of residence, including the United States and other countries where our service providers operate.

14.1 Transfers from the EU and UK

For transfers to countries without an adequacy decision (including the United States), we use Standard Contractual Clauses approved by the European Commission or UK Information Commissioner's Office. SCCs are legally binding contracts that require recipients to protect your data to EU/UK standards.

In addition to SCCs, we implement supplementary technical and organizational measures to protect your data, including:

• Encryption in transit and at rest
• Access controls and authentication
• Regular security audits

14.2 Transfers from the UAE

For transfers of data outside the UAE, we comply with UAE PDPL requirements through:

• Transfer to countries with adequate data protection
• Standard contractual clauses imposing PDPL-equivalent protections
• Your explicit consent for the transfer

15. Data Security

We take the security of your information seriously and implement appropriate technical and organizational measures to protect your data from unauthorized access, disclosure, alteration, or destruction.

15.1 Security Measures

Technical Safeguards:

• Encryption: All data is encrypted in transit and at rest using industry-standard encryption.
• Access Controls: Role-based access controls (RBAC) ensure only authorized personnel can access data.
• Authentication: Multi-factor authentication (MFA) required for all employee and service provider access.
• Network Security: Firewalls, intrusion detection systems (IDS), and intrusion prevention systems (IPS).
• Vulnerability Management: Regular security assessments, penetration testing, and vulnerability scanning.

Organizational Safeguards:

• Employee Training: All employees receive regular data security and privacy training.
• Background Checks: Background checks conducted for employees with access to sensitive data.
• Confidentiality Agreements: All employees and contractors sign confidentiality agreements.
• Incident Response Plan: We maintain a comprehensive incident response plan for data breaches.

15.2 Data Breach Notification

In the event of a data breach that affects your personal information, we will:

• Investigate the breach to determine the scope and impact
• Take immediate steps to contain and remediate the breach
• Notify affected users within the timeframe required by applicable law
• Notify relevant data protection authorities as required
• Provide information about the breach and recommendations for affected individuals

15.3 Your Responsibilities

While we implement strong security measures, you also play a role in protecting your information:

• Keep your username and password confidential
• Use strong, unique passwords for your account
• Enable multi-factor authentication if available
• Monitor your account activity for unauthorized access
• Report any suspected unauthorized access immediately

16. Children's Privacy

Age Restrictions

CatchMyCall is NOT intended for use by children under the age of 18. We do not knowingly collect personal information from children under 18.

If you are under 18, do NOT use our Service, create an account, or provide any personal information.

17. Cookies and Tracking Technologies

17.1 Use of Cookies

CatchMyCall uses cookies, web beacons, and similar tracking technologies on our website and mobile applications to:

• Remember your preferences and settings
• Authenticate your login sessions
• Analyze website traffic and usage
• Improve website performance and functionality

What Are Cookies?

Cookies are small text files stored on your device by your web browser. Cookies allow websites to recognize your device and remember information about your visit.

17.2 Your Cookie Choices

You can control cookies through your browser settings. Most browsers allow you to:

• Block all cookies
• Block third-party cookies
• Delete cookies after each browsing session
• Receive notifications when cookies are set

Effect of Disabling Cookies: If you disable cookies, some features of our website may not function properly.

18. Third-Party Links and Services

Our Service may contain links to third-party websites, applications, or services that are not operated or controlled by CatchMyCall.

We are NOT responsible for the privacy practices of third-party websites or services. This Privacy Policy applies only to information collected by CatchMyCall.

19. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.

How We Will Notify You:

Material Changes: If we make material changes that significantly affect your rights or how we use your information, we will notify you by:

• Email to the address on file (at least 30 days before the effective date)
• Prominent notice on our website
• In-app notification (if applicable)

Non-Material Changes: For minor or non-material changes, we will update the "Last Updated" date at the top of this Policy.

Your Continued Use: Your continued use of the Service after the effective date of the updated Policy constitutes your acceptance of the changes. If you do not agree to the updated Policy, you must stop using the Service and may request deletion of your account.

20. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Response Time: We will respond to inquiries within [7 business days].

21. Jurisdiction-Specific Provisions

21.1 California Residents (United States)

California Consumer Privacy Act (CCPA) Disclosures:

Categories of Personal Information Collected (Last 12 Months):

• Identifiers (name, email, phone number, IP address)
• Audio, electronic, or visual information (call recordings, voiceprints)
• Internet or network activity information (usage logs, device information)
• Geolocation data (approximate location)
• Biometric information (voiceprints)
• Commercial information (subscription details, payment history)

Categories of Sources:

• Directly from you (account registration, call recordings)
• Automatically from your use of the Service (usage data, device information)
• From telecommunications providers (caller metadata)

Business or Commercial Purposes for Collection:

• Providing the Service (call forwarding, transcription, summarization)
• Account management and customer support
• Service improvement and development
• Security and fraud prevention
• Legal compliance

Sale or Sharing of Personal Information:

We do NOT sell your personal information for monetary consideration.