Privacy policy
Last updated: 2026-10-26
The short version
- ✓ We collect only what we need to answer your missed calls and send you the messages.
- ✓ We never sell data. We don't keep call audio recordings.
- ✓ Transcripts are encrypted and deleted after 12 months. Messages stay until you delete them.
- ✓ You can ask us for a copy of your data or to delete it at any time.
Who we are
Allo Inc. (“AlloEva”, “we”) operates the AlloEva service. 123 Example St, City, Province, Postal code
Person in charge of the protection of personal information: Your Name, Privacy Officer, [email protected].
What we collect
Business owners: name, business name, business phone number, email, payment card (handled by our payment processor; we only see the brand and last 4 digits), app usage and device information needed for notifications.
Callers to a business that uses AlloEva: phone number (caller ID), what they say during the call (transcribed), and the details they give (name, callback number, reason for calling).
Website visitors: pages viewed and actions on our website, using a random identifier stored in your browser. No advertising trackers.
Why we use it
To answer calls for businesses, take messages and deliver them to the business owner.
To bill for the service, prevent fraud and abuse, provide support and keep the service secure and working.
To improve our service (for example, checking that messages are complete). We do not use caller data to advertise to callers.
Calls and recordings
Callers are told at the start of the call that it is transcribed to pass on their message. Eva, the assistant who answers, never claims to be a person: if a caller asks, she says she is a virtual assistant.
We do not keep audio recordings. When a voicemail is recorded, the audio is deleted as soon as it is transcribed.
Who we share it with
Service providers that help us run AlloEva, under contracts that protect your data: telephony (Telnyx), speech and language AI (OpenAI, Google, Anthropic), payments (Stripe), email (Resend), hosting and storage (Fly.io, Vercel, Cloudflare, Backblaze), and Meta for WhatsApp notifications if you turn them on.
Some providers process data outside your province or country (for example in the United States). We assess these transfers and require appropriate protection.
We may disclose information if the law requires it.
How long we keep it
Call transcripts: 12 months. Messages: until the business deletes them or closes its account. Billing records: as long as tax law requires. Website analytics: up to 13 months.
Security
Encryption in transit and at rest (with additional application-level encryption for transcripts and messages), strict access controls with two-factor authentication for staff, audit logs of staff access, and regular backups that we test.
Your rights
You can ask to access, correct or delete your personal information, withdraw consent, or ask questions about how we handle it. Write to [email protected]. We answer within 30 days.
If you are not satisfied, you can contact your local privacy authority (for example, the Commission d'accès à l'information du Québec, the Office of the Privacy Commissioner of Canada, or your EU/UK supervisory authority).
Changes
We will post any changes on this page and notify business owners of important changes.