Privacy notice

Last updated 27 October 2026. Callfort is in a pilot phase; this notice describes how the service works today.

Callfort is an AI phone assistant for small businesses. This notice explains what personal data the service handles, why, who it is shared with and the rights you have. It covers two groups of people: business owners who sign up and run an assistant, and callers and customers who speak with a business's assistant.

Who is responsible

• For owner accounts (sign-in, billing, settings), Callfort is the data controller.
• For callers and customers, the business you called is the controller, and Callfort processes the data on its behalf to answer calls, take messages and place calls the business asks for. If you called a business, you can also contact that business directly about your data.

Contact: admin@callfort.ie.

What we collect

Business owners

• Email address, and your Google account identifier if you sign in with Google.
• Security data: sign-in codes (stored only as hashes), two-factor and passkey details, sessions, and IP addresses used for sign-in throttling and security notices.
• Your business profile, assistant settings and the documents you upload and publish.
• Messages you exchange with your assistant through WhatsApp, Telegram or a connected AI app (Claude or ChatGPT).
• Billing status from Stripe. Card details are entered on Stripe's pages and never reach Callfort.

Callers and customers

• Phone number. Numbers are encrypted at rest.
• A text transcript of the call, a summary, and any details the caller gives (for example name, address and the job they need done).
• Call times, duration and outcome.

We do not store call audio. Calls are processed in real time to produce speech and a transcript; the audio itself is not kept.

Why we use it

• To provide the service you signed up for: answering calls, sending you summaries, and placing calls you request (contract).
• To keep accounts and the platform secure and to prevent abuse (legitimate interests).
• To bill for the service and meet tax and accounting duties (contract and legal obligation).

We do not sell personal data, use it for advertising, or use caller data to train AI models.

Telling callers about the AI

Every call opens by telling the caller they are speaking with an AI assistant. Businesses using Callfort are responsible for telling their customers how they handle call information, for example in their own privacy notice.

Service providers

We use these providers to run the service. Each receives only what it needs.

Where data leaves the European Economic Area, transfers rely on an adequacy decision or the European Commission's standard contractual clauses.

How long we keep it

• Account, call and customer records are kept while the business account is open, so the owner can see their history.
• When an account is closed, or on request, we delete its records. Database backups roll over after 14 days.
• Background job records are deleted after 14 days.

Your rights

You can ask for access to, a copy of, correction of or deletion of your personal data, and you can object to or ask us to restrict its use. Email admin@callfort.ie and we will reply within one month. If you are a caller, we may pass your request to the business you called. You can also complain to the Irish Data Protection Commission (dataprotection.ie) or your local authority.

Security

Data is encrypted in transit. Phone numbers are encrypted at rest. Each business's data is kept separate, and owners can protect their account with two-factor authentication or passkeys.

Cookies

We use only the cookies needed to keep you signed in and protect forms. There are no analytics or advertising cookies.

Changes

We will update this notice as the service changes and show the date above. Significant changes will be emailed to account owners.