Privacy Policy
Privacy Policy
Last updated: 20 October 2026
Who is responsible
The controller of your personal data is the provider of Behalf.
For anything about your data, write to us through the app.
What we collect from you
As little as possible: your email, a password (stored hashed) and, if you give one, the name the assistant uses on calls. Payment is handled by Stripe; we receive only the payment status and invoice data, not your card. We do not ask for your ID, address or phone number.
What we process and why
| Data | Why | Legal basis (GDPR) |
|---|---|---|
| Account: email, password (hashed), display name | Run your account; the assistant says whose behalf it calls on | Contract, Art. 6(1)(b) |
| Briefs, transcripts, summaries, vault facts | Make and answer calls for you, show you what happened | Contract, Art. 6(1)(b) |
| What the people called or calling say, and their numbers | Hold the conversation you asked for and report it to you | Legitimate interest of you and Behalf, Art. 6(1)(f) |
| Call times, durations, usage | Deliver the service, enforce limits, prevent abuse | Contract and legitimate interest |
| Payment status and invoices (from Stripe) | Take payment, keep accounting records | Contract and legal obligation, Art. 6(1)(c) |
| Security logs | Keep the service safe | Legitimate interest, Art. 6(1)(f) |
| Waiting-list email and name | Tell you when access opens | Consent, Art. 6(1)(a) |
We never use your calls, transcripts or vault to train AI models, and we do not sell data.
People on the other end of a call
Behalf is the controller of what the people it calls, or who call it, say. We process it only to carry out and report the call the user asked for. Each of them is told at the start of the call that an AI assistant is speaking, on whose behalf, that the call is transcribed and where to read this notice (Art. 14). Audio is not stored by default: it is turned into text during the call and discarded. If the user turns on keeping audio, it is deleted after 30 days. Transcripts follow the retention below.
The assistant sorts incoming callers (for example expected, sales, spam) only to decide how urgently to notify the user. Every caller can leave a message, and the user can review each decision.
How long we keep it
- Transcripts and summaries: until you delete them, at most 30 days on Starter and 12 months on Plus and Pro.
- Vault facts: until you delete them. Deletion is permanent.
- Account data: while your account is open, then deleted. Backups clear within 30 days.
- Invoices: 5 years, as tax law requires.
- Security logs: 12 months.
Who processes data for us
We use providers that act on our instructions under data processing agreements:
- Telephony: Telnyx (lines held by Behalf)
- Real-time voice: LiveKit
- Speech recognition, AI language model and speech synthesis: specialist voice and AI providers
- Payments: Stripe, or the app store when you subscribe in an app
- Hosting: cloud hosting in the EU
- Push notifications: Apple and Expo (notifications carry no call content)
Some providers process data outside the EEA. Those transfers are covered by the EU Standard Contractual Clauses or the EU-US Data Privacy Framework. We share data with authorities only when the law requires it.
Security
Data is encrypted in transit and at rest, access is limited to the people who need it, and we report breaches to the supervisory authority within 72 hours.
Your rights
You can ask to access, correct, delete, restrict or export your data, object to processing based on legitimate interest, and withdraw consent at any time. If you spoke with a Behalf secretary on a call, you have the same rights; write to us through the app with your number and the time of the call. We answer within one month.
You can also complain to the Polish supervisory authority, the President of the Personal Data Protection Office (Prezes UODO, uodo.gov.pl).
The service is for adults (18+).