Privacy Policy

CallScout is operated by NeonCell, based in Ontario, Canada. NeonCell is responsible for the personal information described here. You can reach our privacy contact through our contact form.

• Account details: your name, email address, profile photo, and your sign-in provider (Google or Microsoft) if you use one. We don't use passwords: you sign in with a code we email you, or with Google or Microsoft.
• Your phone and area: the phone number you add for test calls and callbacks, and a search area you choose, rounded to about a kilometre.
• Campaign content: your scripts and questions, the businesses and phone numbers you add or select, notes and images you attach.
• Call results: call status and length, the answers gathered, the name of the person who answered if they give it, an AI summary and, if you leave transcripts on, a text transcript. We do not keep call recordings.
• Billing: your plan, minutes and payment history. Card details are handled by Stripe; we never see or store your full card number.
• Support messages: what you send through the contact form or by email.
• Technical data: basic server logs used to keep the service secure and working.

• To place calls, turn them into results you can compare, and show them to you.
• To find businesses near your chosen area when you ask us to.
• To send account emails: welcome, sign-in codes, campaign summaries, billing notices and replies to your questions.
• To run billing, prevent abuse, and keep CallScout secure.

We measure how the site is used with our own privacy-first analytics, not a third-party tracker:

• No cookies, no IP addresses and no advertising or cross-site identifiers. A visit is identified only by a random id that lasts as long as your browser tab.
• We record the page, the website that linked to us (domain only), campaign tags in the link, your device type, browser and operating system family, language, time zone, screen size, how long the page was in view and how far you scrolled.
• If your browser sends Global Privacy Control or Do Not Track, we record nothing.
• When something breaks, we record the error, the page, and the last few buttons pressed, with emails, phone numbers and other personal details removed first. Form contents are never recorded.
• Analytics events and error reports are deleted after 90 days.

• We don’t sell your personal information or share it for advertising.
• We don’t use your campaigns or call results to train AI models.
• We don’t send marketing email without your consent, and every such email has an unsubscribe link.

When CallScout calls a business for you, the person who answers hears that they are speaking with an AI assistant calling on your behalf. We process what they say only to give you the answers you asked for. They can ask not to be called again, and the assistant will end the call. Anyone who was called can reach us through our contact form to ask about or remove information about them.

We share data only with providers that help us run CallScout, under contracts that limit their use of it:

• Convex: database, file storage and hosting.
• Twilio: phone calls and calling numbers.
• Google (Gemini and Places): the voice assistant, transcription and summaries, and business listings.
• Stripe: payments.
• Hostinger: email delivery.
• Google and Microsoft: sign-in, if you choose them.

We may also disclose information if the law requires it, or to protect people from harm.

Some of these providers process data outside Canada, including in the United States. When that happens your information is subject to the laws of that country, and may be accessed by its courts and authorities. We choose providers with strong security and privacy commitments.

• Account and campaign data stay until you delete them. Deleting a campaign removes its results.
• Deleting your account in Settings → Account permanently erases your data, releases your calling number and cancels your subscription.
• We keep billing records as long as tax law requires, and backups are deleted on a rolling schedule.

Data is encrypted in transit and at rest. Calling-number credentials are encrypted with AES-256. Access within NeonCell is limited to people who need it to run the service. No system is perfectly secure; if a breach puts you at real risk, we will tell you and the relevant regulator as the law requires.

Under Canada’s PIPEDA, and laws such as the GDPR and CCPA where they apply, you can ask to access, correct, export or delete your personal information, and withdraw consent. Most of this you can do yourself in Settings. For anything else, use our contact form. We reply within 30 days.

If you’re not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada, or your local data protection authority.

CallScout is not for anyone under 18, and we do not knowingly collect their information.

If we change this policy in a way that matters, we’ll email you before it takes effect and update the date at the top.