← Back to GetCallBounce

Privacy Policy

Effective: 2026-04-26 · Last updated: 2026-04-26 · GetCallBounce, operated by Gopal Bagaswar.

1. What this policy covers

GetCallBounce ("we," "us," "the Service") provides automated missed-call recovery for US home service businesses (HVAC, plumbing, electrical, pest control, roofing, landscaping). This policy explains what data we collect, why, how we use it, and the rights you have.

This policy applies to:

• Our marketing website (getcallbounce.com)
• Our customer dashboard and signup flows
• Voice and SMS handling performed via the Twilio platform under our account
• Billing performed via Stripe

2. Data we collect

2.1 From our customers (the businesses that subscribe)

• Business name, business type, city/state, owner name, owner email, owner phone, and a Twilio number we assign or you forward.
• Billing identifiers stored by Stripe (we never see or store your card number).
• Usage data: number of calls received, calls missed, SMS auto-replies sent, leads logged, dashboard activity.

2.2 From your end customers (the people who call your business)

• Caller phone number (received from Twilio).
• The content of any SMS message they send to your assigned number (so we can respond and log the lead).
• Voice transcripts of inbound calls (when AI voice features are enabled), generated via Deepgram speech-to-text and stored as text in our database.
• The audio recording of inbound calls is NOT retained by default; only the transcript is stored.

2.3 Automatic technical data

• IP address, browser type, OS, page views (for marketing-site analytics only - anonymized after 30 days).
• Server logs for security and debugging (90-day retention).

3. How we use the data

• To deliver the core Service: receive your inbound calls, send auto-replies, log leads, deliver follow-up sequences.
• To bill you (via Stripe).
• To send you operational notifications (new lead alerts, billing receipts, security updates).
• To improve the Service (aggregated, de-identified analytics only).
• To comply with US legal obligations (TCPA, CAN-SPAM, A2P 10DLC, lawful subpoenas).

We do not sell or rent your data, and we do not sell or rent the data of your end customers.

4. Sub-processors (third parties that process data on our behalf)

5. SMS & voice - TCPA / CAN-SPAM / A2P 10DLC compliance

• We only auto-reply to inbound calls and SMS - i.e., the caller initiated contact with you. Pure outbound cold-SMS to consumers is outside the scope of the auto-reply feature.
• Every SMS we send on your behalf includes an opt-out instruction (Reply STOP to opt out) and an identification of your business.
• We honor STOP, UNSUBSCRIBE, CANCEL, END, and QUIT immediately and permanently for the responding phone number.
• We send only between 8:00 AM and 9:00 PM in the recipient's local time, per TCPA "calling hours."
• We support customer A2P 10DLC brand and campaign registration through Twilio.

6. Data retention

• Lead records: retained while your account is active + 30 days after cancellation, then deleted.
• Call transcripts: 90 days, then deleted.
• SMS message bodies: 180 days, then deleted.
• Billing records: 7 years (US tax/regulatory minimum).
• Server logs: 90 days.

7. Your rights

You and your end customers may at any time:

• Request a copy of all personal data we hold (data portability).
• Request correction of inaccurate data.
• Request deletion ("right to be forgotten") - except where retention is required by law (e.g., billing records).
• Withdraw consent or opt out of further communications.
• Lodge a complaint with the relevant supervisory authority.

To exercise any right, email gopal@getcallbounce.com. We respond within 30 days.

8. Children

The Service is not directed to anyone under 16 and we do not knowingly collect their data.

9. International users

The Service is operated for and primarily used by businesses in the US, UK, Canada, and Australia. Data is stored on US-based servers (Render, Cloudflare, Twilio US data centers). EU/UK users: by using the Service you consent to transfer of your data to the US.

10. Security

• All connections use TLS 1.2+ (HTTPS).
• API secrets are stored in encrypted environment variables, never committed to source control.
• Stripe and Twilio webhooks are signature-verified before processing.
• Admin endpoints use constant-time key comparison and per-IP rate limiting.
• We disclose any confirmed data breach to affected users within 72 hours.

11. Changes to this policy

If we make material changes we will update the "Last updated" date above and email active customers at the address on their account at least 14 days before the change takes effect.

12. Contact

GetCallBounce
Operated by Gopal Bagaswar
Email: gopal@getcallbounce.com

---

This policy is provided as a good-faith template and does not constitute legal advice. Customers operating in regulated industries (healthcare, finance) should obtain independent legal review before relying on it.