Privacy Policy
Last updated: March 17, 2026
1. Introduction
AwesomeWorks AI ("Company", "we", "us") operates CallWise, a SaaS platform for automated sales call analysis. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our Service.
We are committed to protecting your privacy and processing your data in compliance with the General Data Protection Regulation (GDPR) and applicable Polish data protection laws.
2. Data Controller
The data controller for personal data processed through CallWise is AwesomeWorks AI. For data protection inquiries, contact us at privacy@callwise.awesomeworks.ai.
3. Data We Collect
We collect and process the following categories of personal data:
3.1 Account Information
- Email address
- First and last name
- Organization name and role
- Authentication credentials (stored securely via Keycloak)
3.2 Audio Recordings
- Sales call audio files uploaded by users
- Transcriptions generated from audio files
- Speaker identification data
3.3 Analysis Data
- AI-generated conversation analysis and scoring
- Performance metrics and aggregated statistics
- Call metadata (duration, date, language)
3.4 Technical Data
- IP address and browser information
- Session and authentication tokens
- Usage logs for security and debugging purposes
3.5 Meta Lead Ads Data
- Lead contact information from Facebook Lead Ad forms (name, email, phone number)
- Facebook Page connection data (Page ID, encrypted access tokens)
- Lead Ad form metadata (form ID, ad ID, submission timestamp)
4. How We Use Your Data
We process your data for the following purposes:
- Service delivery: Transcribing, analyzing, and scoring sales calls.
- Account management: Creating and maintaining user accounts, authentication.
- Communication: Sending account-related emails (verification, password reset, team invitations).
- Improvement: Analyzing aggregated, anonymized usage patterns to improve the Service.
- Security: Detecting and preventing fraud, abuse, and unauthorized access.
- Lead management: Importing and managing sales leads from connected Meta (Facebook/Instagram) advertising campaigns.
- Legal compliance: Meeting our legal obligations under applicable law.
5. Legal Basis for Processing
We process personal data based on:
- Contract performance: Processing necessary to provide the Service (Art. 6(1)(b) GDPR).
- Legitimate interests: Security, fraud prevention, and service improvement (Art. 6(1)(f) GDPR).
- Consent: Where required, such as for optional communications (Art. 6(1)(a) GDPR).
- Legal obligation: Compliance with applicable laws (Art. 6(1)(c) GDPR).
6. Third-Party Processors
We use the following third-party services to process data:
| Provider | Purpose |
|---|---|
| Hetzner Cloud | Infrastructure hosting (servers, object storage) — Germany |
| AssemblyAI | Speech-to-text transcription and speaker diarization |
| OpenAI | AI-powered conversation analysis (GPT-4) |
| Twilio | VoIP telephony, call routing, and call recording |
| Resend | Transactional email delivery |
| Meta Platforms, Inc. | Lead Ads data source — Facebook/Instagram lead form submissions — United States |
Each third-party processor is bound by data processing agreements and processes data only as instructed by us.
7. Data Storage & Security
Your data is stored on servers located in Germany (Hetzner Cloud, Nuremberg datacenter). We implement appropriate technical and organizational measures to protect your data:
- Encryption in transit (TLS/SSL) and at rest
- Multi-tenant data isolation (organization-level access controls)
- Role-based access control (RBAC)
- Regular security monitoring and updates
- Secure authentication via OpenID Connect (Keycloak)
8. Data Retention
We retain your personal data for as long as your account is active. After account deletion:
- Account data is deleted within 30 days.
- Audio recordings are deleted within 30 days.
- Anonymized, aggregated analytics may be retained indefinitely.
- Data required for legal obligations may be retained as required by law.
- Meta Lead Ads data: Lead contact information is retained as long as the associated lead record exists. Facebook Page access tokens are encrypted and retained while the integration is active; revoked tokens are deleted within 7 days.
9. Your Rights (GDPR)
Under the GDPR, you have the right to:
- Access: Request a copy of your personal data.
- Rectification: Correct inaccurate or incomplete data.
- Erasure: Request deletion of your data ("right to be forgotten").
- Restriction: Request restriction of data processing.
- Portability: Receive your data in a structured, machine-readable format.
- Objection: Object to processing based on legitimate interests.
- Withdraw consent: Where processing is based on consent.
Meta data deletion: If you connected your Facebook account to CallWise, you can disconnect at any time via Settings → Integrations. To request deletion of all data received from Meta, contact us at privacy@callwise.awesomeworks.ai.
To exercise any of these rights, contact us at privacy@callwise.awesomeworks.ai. We will respond within 30 days.
10. Cookies & Tracking
CallWise uses only essential cookies required for authentication and session management. On the public landing page, we may also store limited first-party interaction events (for example, clicks on persona guides) without cookies or user IDs to understand which pages are most useful. We do not use advertising cookies, third-party analytics trackers, or third-party tracking scripts.
11. Children's Privacy
The Service is not intended for individuals under the age of 18. We do not knowingly collect personal data from children.
12. International Data Transfers
Some of our third-party processors (AssemblyAI, OpenAI, Twilio, Meta Platforms) are located in the United States. Data transfers to the US are facilitated under Standard Contractual Clauses (SCCs) or the EU-US Data Privacy Framework, as applicable.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify users of material changes via email or through the Service. The "Last updated" date at the top indicates when the policy was last revised.
14. Contact & Complaints
For privacy-related questions or concerns, contact us at privacy@callwise.awesomeworks.ai.
You also have the right to lodge a complaint with a supervisory authority. In Poland, the relevant authority is the President of the Personal Data Protection Office (UODO).