Privacy Policy

1. Introduction

AwesomeWorks AI ("Company", "we", "us") operates CallWise, a SaaS platform for automated sales call analysis. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our Service.

We are committed to protecting your privacy and processing your data in compliance with the General Data Protection Regulation (GDPR) and applicable Polish data protection laws.

2. Data Controller

The data controller for personal data processed through CallWise is AwesomeWorks AI. For data protection inquiries, contact us at hello@awesomeworks.ai.

3. Data We Collect

We collect and process the following categories of personal data:

4. How We Use Your Data

We process your data for the following purposes:

• Service delivery: Transcribing and analyzing sales calls to generate summaries, action items, and extracted insights.
• Account management: Creating and maintaining user accounts, authentication.
• Communication: Sending account-related emails (verification, password reset, team invitations).
• Improvement: Analyzing aggregated, anonymized usage patterns to improve the Service.
• Security: Detecting and preventing fraud, abuse, and unauthorized access.
• Lead management: Importing and managing sales leads from connected Meta (Facebook/Instagram) advertising campaigns.
• Legal compliance: Meeting our legal obligations under applicable law.

5. Legal Basis for Processing

We process personal data based on:

• Contract performance: Processing necessary to provide the Service (Art. 6(1)(b) GDPR).
• Legitimate interests: Security, fraud prevention, and service improvement (Art. 6(1)(f) GDPR).
• Consent: Where required, such as for optional communications (Art. 6(1)(a) GDPR).
• Legal obligation: Compliance with applicable laws (Art. 6(1)(c) GDPR).

6. Third-Party Processors

We use the following third-party services to process data:

Each third-party processor is bound by data processing agreements and processes data only as instructed by us.

7. Data Storage & Security

Your data is stored on servers located in Germany (Hetzner Cloud, Nuremberg datacenter). We implement appropriate technical and organizational measures to protect your data:

• Encryption in transit (TLS/SSL) and at rest
• Multi-tenant data isolation (organization-level access controls)
• Role-based access control (RBAC)
• Regular security monitoring and updates
• Secure authentication via OpenID Connect (Keycloak)

8. Data Retention

We retain your personal data for as long as your account is active. After account deletion:

• Account data is deleted within 30 days.
• Audio recordings are deleted within 30 days.
• Anonymized, aggregated analytics may be retained indefinitely.
• Data required for legal obligations may be retained as required by law.
• Meta Lead Ads data: Lead contact information is retained as long as the associated lead record exists. Facebook Page access tokens are encrypted and retained while the integration is active; revoked tokens are deleted within 7 days.

9. Your Rights (GDPR)

Under the GDPR, you have the right to:

• Access: Request a copy of your personal data.
• Rectification: Correct inaccurate or incomplete data.
• Erasure: Request deletion of your data ("right to be forgotten").
• Restriction: Request restriction of data processing.
• Portability: Receive your data in a structured, machine-readable format.
• Objection: Object to processing based on legitimate interests.
• Withdraw consent: Where processing is based on consent.

Meta data deletion: If you connected your Facebook account to CallWise, you can disconnect at any time via Settings → Integrations. To request deletion of all data received from Meta, contact us at hello@awesomeworks.ai.

To exercise any of these rights, contact us at hello@awesomeworks.ai. We will respond within 30 days.

10. Cookies & Tracking

CallWise uses only essential cookies required for authentication and session management. On the public landing page, we may also store limited first-party interaction events (for example, clicks on persona guides) without cookies or user IDs to understand which pages are most useful. We do not use advertising cookies, third-party analytics trackers, or third-party tracking scripts.

11. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal data from children.

12. International Data Transfers

Some of our third-party processors (AssemblyAI, OpenAI, Twilio, Meta Platforms) are located in the United States. Data transfers to the US are facilitated under Standard Contractual Clauses (SCCs) or the EU-US Data Privacy Framework, as applicable.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes via email or through the Service. The "Last updated" date at the top indicates when the policy was last revised.

14. Contact & Complaints

For privacy-related questions or concerns, contact us at hello@awesomeworks.ai.

You also have the right to lodge a complaint with a supervisory authority. In Poland, the relevant authority is the President of the Personal Data Protection Office (UODO).