Log inCreate account
DRAFT — requires legal review. This document is a template and is not yet in effect.

Privacy notice

Draft last updated September 2026

This notice explains how Kallo ("we") collects, uses and protects personal data when you use our website, dashboard, APIs and SDKs (the "Service"). We process personal data in line with applicable data-protection laws, such as the EU and UK General Data Protection Regulation (GDPR).

Roles

For account, billing and website data we act as controller. For personal data your end users send through calls you run on the Service, you are the controller and we act as your processor under a data processing agreement.

Data we collect

  • Account data: name, email address, workspace and team membership.
  • Billing data: payment records and prepaid balance history. Card details are handled by Stripe and never reach our servers.
  • Usage data: rooms, participant sessions, participant-minutes, API requests and audit logs, including IP addresses and user agents.
  • Call data: media streams are relayed in real time and not recorded. Participant names and metadata you supply are stored with the room.

Why we use it

  • To provide, secure and bill the Service (performance of contract).
  • To prevent abuse and keep audit trails (legitimate interests).
  • To meet accounting and legal obligations (legal obligation).
  • To send product and security notices; marketing only with your consent.

Sharing

We share data only with service providers that help us run the Service, such as hosting, email delivery and Stripe for payments, under contracts that protect it. We do not sell personal data.

International transfers

Data may be processed in countries other than yours. Where required, we rely on appropriate safeguards such as standard contractual clauses.

Retention

We keep account and billing records for as long as your account is active and as required by law. Usage and audit data are kept for a limited period to support billing and security.

Your rights

Depending on where you live, you may have the right to access, correct, delete or export your personal data, to object to or restrict processing, and to complain to a data-protection authority. Contact us to exercise these rights.

Security

Secrets and tokens are stored as hashes, traffic is encrypted in transit, and access to production systems is restricted and logged.

Contact

Questions about this notice can be sent to the privacy contact listed in your dashboard.