Privacy.

This page explains what data Callpit processes, why, for how long, and to whom it is passed on. It is written to be read.

01Two distinct roles

Callpit occupies two different positions depending on the data, and this distinction governs everything else.

In other words : on your prospects data, you are the one who answers to them, and Callpit undertakes to do nothing with it other than what you ask. The corresponding commitments are set out in article 8 of the terms and conditions.

02Data controller

Julien Lougarre, entrepreneur individuel (EI), 6 avenue Abbé Oliba, 66200 Elne, France. Contact : contact@callpit.io.

03What is collected

Your account

Email address, display name, password kept in a one-way encrypted form. If you log in with Google, Callpit receives your email address, your name and your profile picture, never your Google password.

Your subscription

Stripe customer and subscription identifiers, subscription status, billing date, billing history. No bank card number is received or stored by Callpit : the entry takes place on the Stripe servers.

What you create in the tool

Company and contact records, prospecting stages, notes, tasks, reminders, audio recordings of your calls and transcriptions of those recordings.

Your mailbox, if you connect it

You may connect your own mailbox to Callpit, whatever its provider. The connection uses two standard protocols: SMTP to send messages, IMAP to read them. Callpit then stores the address, the login, the server names and ports, and the password you enter, encrypted with a key kept outside the space accessible from the web. That password is never disclosed in any form: not in the interface, not in our logs, not in our responses.

Once the mailbox is connected, Callpit can read the whole mailbox, across all folders, including drafts, archives, spam and trash. This reading happens only when you open the Emails page or a message, and always read-only: opening a message in Callpit does not mark it as read, does not move it, does not change it and does not delete it. Callpit does not copy your mailbox onto its servers: it reads messages at the moment you display them, and keeps neither their body nor their attachments. An attachment you download passes through our servers without being stored there.

What Callpit keeps from your mailbox is limited to this: for each email you send from Callpit, the recipient, the subject, the text sent, the date and the message identifier, up to the last five hundred sends; for each detected prospect reply, the date, the subject, the name of the sender and the analysis drawn from it, but never the body of the message; a notebook of technical identifiers allowing a message to be found again in your mailbox, with no content; and, for messages you mark as followed, their subject, their sender and their date.

Which messages are treated as business exchanges. An address appearing in your CRM is not enough to make a message a business exchange: someone may be in your records and write to you about something else entirely. A send on your part is not enough either. Callpit treats a message as a business reply only if it attaches to an email you sent from Callpit, either through the conversation headers of the message, or because it reuses the subject of your send. A spontaneous message, even from an address you have contacted, is set aside. In every other case, Callpit simply tells you the address is known to your CRM, and draws no conclusion from it.

Which messages are analysed by artificial intelligence. Synchronisation looks for replies only from prospects you emailed within the last sixty days, and only among messages that attach to that send. Receiving a message triggers no analysis: its content is sent to no model. The text of an email goes to a model only when you ask for a feature that needs it: if you ask Callpit to draft a reply, the message you are answering is then sent to the drafting model, served by Google, on that occasion only and on your action. No other message from your mailbox is sent to a model: not personal messages, not messages from people you have not contacted, not the rest of your mail. Our other analysis modules, which handle your calls and the history of your prospects, access no email at all.

Disconnecting your mailbox. You may disconnect your mailbox at any time from the Emails page. Your credentials are then erased, not merely disabled. Your sending history and the replies already linked to your prospects remain in your account, as they are part of your sales record; you may request their deletion, or close your account, which deletes them with it. Your rights of access, rectification, erasure, restriction, objection and portability may be exercised at the address given at the top of this page.

Technical data

IP address, date and time of connections, error logs, and a usage count of the artificial intelligence features intended to enforce the quotas.

04Why, and on what basis

Callpit sends no commercial prospecting to third parties, resells no data and uses no advertising trackers. The public site and the application use Google Analytics to measure traffic and improve the service.

05Who receives this data

Company search queries the public API recherche-entreprises.api.gouv.fr of the French State. Only the search terms pass through it, never your data.

The data may also be disclosed to a judicial or administrative authority upon a lawful request.

06Google services, if you use them

Connecting a Google account is optional. It serves three purposes, which you enable separately: linking your Google Calendar to the Callpit Calendar page, creating a Google Meet video link, and storing or retrieving documents in your Google Drive. Sending your emails does not go through Google: it goes through the mailbox you connect yourself, described above.

• Three permissions, requested separately : reading and writing the events of your calendars (calendar.events), the creation of a video meeting space (meetings.space.created) and access to the Drive files you create or open with Callpit only (drive.file). Callpit requests no permission from Google over your mailbox. Access to your mailbox, if you connect it, goes through the SMTP and IMAP protocols described above, with the credentials you provide to us, and never through Google. Callpit does not see the rest of your Drive and does not access your Google contacts.
• Your Google Calendar: Callpit reads the events of your primary calendar to display them in its Calendar page, and writes there the appointments you set in Callpit: it creates, moves and deletes them when you do so in Callpit. It also reads the status of the events it created, so that an appointment you deleted in Google Calendar is removed from Callpit too. Events are read when they are displayed and are not stored on our servers. Callpit invites nobody to your events, creates or deletes no calendar, and never changes an event it did not create.
• No prospecting email leaves without your click on « Send ». If you enable appointment reminders, those alone are sent automatically, at the times you chose, to the people whose appointment is in your calendar.
• The data received from Google (address of the Google account, technical identifier of the account, authorisation tokens, events of your calendar read for display, identifiers of the Drive files you open or create with Callpit, address of the Meet link created) is used only to make those three services work and to display them in Callpit. It is neither sold, nor used for advertising purposes, nor passed to third parties outside our host.
• No Google content is sent to artificial intelligence: no content obtained through Google APIs (Calendar, Meet, Drive) is sent to an artificial intelligence provider: no title, no description, no location, no attendee, no video call link, no event or file identifier. The Callpit assistant receives one single thing from your linked calendar: the start and end TIMES of your events, so that it never tells you a slot is free when your Calendar page knows it is busy. It knows neither their subject nor their detail, and can neither change nor delete them. Those times are never used to develop, improve or train any artificial intelligence or machine learning model, whether generalized or personalized.
• Nobody consults it, except with your explicit agreement in order to answer a support request, for security reasons, or to comply with the law.
• The authorisation tokens are encrypted on our servers and are never passed to your browser.
• You can withdraw access at any time : the « Disconnect » button in My account, which also revokes the permission at Google, or from the myaccount.google.com/permissions page of your Google account. The tokens are then deleted.

Callpit use and transfer to any other app of information received from Google APIs adhere to the Google API Services User Data Policy, including the Limited Use requirements (Limited Use).

Callpit’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

07For how long

The automatic deletion of the audio after ninety days is deliberate : a voice recording is the most sensitive data in the service, and nothing justifies keeping it indefinitely. The transcription, for its part, remains available.

08Your rights

You have a right of access, rectification, erasure, restriction, objection and portability, as well as the right to give directions on what happens to your data after your death.

An export feature is available in the service and lets you retrieve your data at any time. For any other request, write to contact@callpit.io. An answer reaches you within one month.

If a person you have called sends you a request about their data, they must address it to you : you are the one responsible for it. The publisher assists you in answering it.

Finally, you may lodge a complaint with the Commission nationale de l informatique et des libertés, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, www.cnil.fr.

09Cookies

Callpit sets the cookies necessary for it to work : keeping the session, checking the origin of forms, and remembering your display preferences. To these are added the traffic measurement cookies set by Google Analytics, which tell us which pages are viewed, where visits come from, the type of device and the country.

No advertising cookie and no embedded social network. Traffic measurement is provided by Google Analytics 4, supplied by Google Ireland Limited, which acts as a processor and may transfer data outside the European Union under its standard contractual clauses. You can refuse these cookies from your browser settings, or install the opt out add on published by Google at tools.google.com/dlpage/gaoptout. Refusing takes nothing away from the features of the service.

As payment goes through Stripe, Stripe may set cookies necessary for fraud prevention at the time of payment.

10Security

Exchanges are encrypted with TLS, and the mail server certificate is verified on every connection: a connection whose certificate does not match is refused, never bypassed. The data of each account is partitioned in a separate space. Passwords are never stored in clear text: the password of your mailbox and the authorisation tokens are encrypted with a key kept outside the space accessible from the web. Our technical logs contain no password, no token and no message content. The host performs regular backups.

No system is infallible. In the event of a data breach likely to create a risk for you, you will be informed without delay, as will the CNIL when the law requires it.