Privacy notice

What we hold

Your email address, the language you chose, and the calling number we generate for you.

The billing details you give us when you sign up: first and last name or company name, codice fiscale or VAT number, address, and for companies the SDI recipient code or PEC address. They are needed to issue the invoice, which we are required by law to issue.

Your credentials, in two different forms and for two different reasons. Of the password you sign in to the site with, we keep only a cryptographic fingerprint from which the password cannot be recovered: not even we can read it. The password for calling is generated by us and kept encrypted, so that you can read it back when you set up the app.

Your call records: the number called, when, how long, and what it cost. These come from the platform that carries your calls. We do not record, listen to, or store the content of your calls — we have no technical way to.

Your top-ups: amount, date, status, and the payment reference from Stripe. We never see or hold your card number.

Basic technical records: the IP address a request came from, and the time. These are kept in server logs.

Why, and on what legal basis

To provide the service you asked for and to take payment — this is the performance of our contract with you (Article 6(1)(b) GDPR).

To issue invoices and keep accounting records — a legal obligation (Article 6(1)(c) GDPR). We process your tax details for this, and for nothing else.

To prevent fraud and abuse, and to keep the service secure — our legitimate interest, and yours (Article 6(1)(f) GDPR).

We do not use your data for advertising, we do not profile you, and we do not sell your data to anyone. Ever.

Who else sees it

Dellmont B.V., PO Box 368, 2130 AJ Hoofddorp, Paesi Bassi (reg. 73623806), the operator that creates your calling account and carries your calls. It necessarily knows the numbers you call and your calling number. It does not receive your tax details.

Stripe Payments Europe, which handles the payment.

Brevo, which sends our emails.

Hetzner, which hosts our server inside the European Union.

The Italian Revenue Agency’s Sistema di Interscambio, to which electronic invoices must be transmitted by law, and our tax adviser.

Each of them handles your data only to do the job we ask of them, or because the law requires it. Nobody else receives it, unless we are required by law to hand it over — and in that case we tell you, unless the law forbids it.

How long we keep it

Your account data: for as long as you have an account, and 12 months after you close it — so that a payment dispute or a question can still be answered.

Invoices and accounting records: 10 years, because Italian tax law requires it. We cannot shorten this, not even if you ask us to.

Call records: for as long as needed for invoicing and for handling any dispute, and within the terms set by the rules on traffic data.

Server logs: 12 months.

Password reset links: 7 days, and each one can only be used once.

Where it is

Our server is inside the European Union. The operator that carries the calls is established in the Netherlands. Stripe and Brevo may process some data outside the Union, under the safeguards the GDPR requires.

What you can ask us to do

You can ask for a copy of your data, ask us to correct it, ask us to delete it, ask us to limit what we do with it, or object to it. You can also ask for it in a portable form.

One honest note about deletion: we cannot delete tax documents before ten years have passed, because the law requires us to keep them. Everything else, we can.

Write to info@callwebcom.com. We answer within 30 days.

If you are not happy with our answer, you can complain to the Garante per la protezione dei dati personali (www.garanteprivacy.it) or to the authority in the country you live in.

Cookies

This site uses one cookie, called cwc_lang. It only remembers which language you chose, so the site opens in that language next time. It carries nothing else and it is not shared with anyone.

When you are signed in, your browser also stores your session locally so you do not have to sign in on every page. It stays on your device and is deleted when you sign out.

There is no advertising, no tracking, and no analytics on this site.