Privacy Policy

The data controller for personal data processed under this Policy is Callmagi, a legal entity registered in the Republic of Lithuania.

Official company details:

• Company name: MB Callmagi
• Company code: 307543681
• Address: Povilo Matulionio g. 4, Akademija, LT-53348 Kauno r.
• Contact email: [email protected]

If you have questions regarding this Policy or personal data processing, you may contact us using the contact details published on our official website.

This Policy applies to:

• visitors of the Callmagi website;
• customers and their authorized users;
• callers whose calls are answered, recorded, or transcribed using the Services;
• representatives and contacts of business customers, partners, and suppliers.

Depending on the context, Callmagi may process the following categories of personal data:

• Identification data: name, surname, company name;
• Contact data: phone number, email address;
• Call data: call recordings, call transcripts, call metadata (date, time, duration);
• Account data: login credentials, user role, subscription details;
• Technical data: IP address, device information, browser type, log files;
• Billing data: payment status, invoices, transaction references (payment card data is processed by payment service providers, not stored by Callmagi);
• Communication data: inquiries, support requests, and correspondence.

Callmagi processes personal data only where there is a valid legal basis under GDPR, including:

4.1. Performance of a Contract (Article 6(1)(b) GDPR)

• to provide and operate the Services;
• to manage user accounts and subscriptions;
• to handle billing and payments;
• to provide customer support.

4.2. Legitimate Interests (Article 6(1)(f) GDPR)

• to ensure service security and prevent abuse;
• to improve and develop the Services;
• to maintain logs and system integrity;
• to manage business relationships.

4.3. Legal Obligations (Article 6(1)(c) GDPR)

• to comply with accounting, tax, and regulatory requirements.

4.4. Consent (Article 6(1)(a) GDPR)

• where required for call recording or marketing communications.

5.1. The Services may include call recording and transcription features.

5.2. In most cases, Callmagi acts as a data processor for call data, processing such data on behalf of its business customers.

5.3. Business customers are responsible for:

• determining the lawful basis for call recording and transcription;
• informing callers about call recording and AI usage;
• obtaining any required consents under applicable law.

5.4. Callmagi shall not be responsible for a customer's failure to meet legal requirements related to call data processing.

6.1. Personal data may be disclosed to:

• trusted cloud hosting and infrastructure providers;
• telecommunication and voice service providers;
• payment service providers;
• professional advisors where legally required.

6.2. Where personal data is transferred outside the European Economic Area (EEA), Callmagi ensures appropriate safeguards, such as Standard Contractual Clauses approved by the European Commission.

7.1. Personal data is retained only for as long as necessary to fulfill the purposes described in this Policy.

7.2. Call recordings and transcripts are retained according to customer settings or contractual arrangements, unless longer retention is required by law.

7.3. Accounting and billing data is retained for the periods required by Lithuanian law.

Under GDPR, data subjects have the following rights:

• right of access;
• right to rectification;
• right to erasure ("right to be forgotten");
• right to restriction of processing;
• right to data portability;
• right to object to processing;
• right to withdraw consent at any time, where processing is based on consent.

Requests may be submitted using the contact details provided on the Callmagi website. We will respond without undue delay and within the time limits set by GDPR.

Callmagi implements appropriate technical and organizational measures to protect personal data against unauthorized access, loss, alteration, or disclosure, including access controls, encryption, and regular security assessments.

Callmagi uses cookies and similar technologies on its website. Detailed information about cookies, purposes, and consent management is provided in the Cookie Policy available on the website.

The Services may involve automated processing of call content. Callmagi does not use personal data for automated decision-making that produces legal effects concerning individuals within the meaning of Article 22 GDPR.

The Services are intended for business use and are not directed at children. Callmagi does not knowingly collect personal data from children under 16 years of age.

Callmagi may update this Policy from time to time. Material changes will be communicated via the website or other appropriate means.

If you believe that your personal data has been processed unlawfully, you have the right to lodge a complaint with the competent supervisory authority. In Lithuania, this is the State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija).