Introduction
PayCall is committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.
By using our services, you agree to the collection and use of information in accordance with this Privacy Policy. We will not use or share your information with anyone except as described in this Privacy Policy.
Data Controller
PayCall, Inc.
Address: 131 Continental Dr, Suite 305, Newark, DE 19713, United States
Email: support@paycall.co
Data Protection Contact: privacy@paycall.co
Website: https://paycall.co
Information We Collect
We collect information you provide directly to us and information we obtain automatically when you use our services:
Account Data
- Account Information: Name, email address, username, phone number, profile picture
- Pro Profile: Bio description, social media links, content preferences
- Payment Information: Billing address (processed by Stripe; we never store full card numbers)
- Communication Data: Messages, comments, and interactions with other users
- Content: Photos, videos, posts, and other content you upload
Technical & Device Data
- Device Information: IP address, browser type, operating system, device type
- Usage Data: Pages visited, features used, time spent on platform
- Analytics Data: Pro performance metrics, audience engagement (Microsoft Clarity, Mixpanel)
- Location Data: General location derived from IP address
WebRTC Metadata (Real-Time Communication)
During real-time audio and video calls, the following technical metadata is processed by our LiveKit servers (hosted on Contabo USA) and LiveKit Cloud (USA):
- IP Address: Required to establish peer-to-peer connections
- Device Information: Browser, operating system, device type
- Connection Quality: Latency, bandwidth, packet loss statistics
- WebRTC Session IDs: Unique identifiers for call sessions
✅ Important: Audio and video content is NOT stored and NOT recorded. Data transmission occurs directly between users (peer-to-peer) or via our LiveKit servers as technical intermediaries. We never have access to the content of your conversations.
Payment & Wallet Data
- Wallet Balance: Total balance, deposited credits, earned balance
- Transaction History: Deposits, withdrawals, tips, donations, call earnings, subscriptions
- Identity verification: Identity documents and tax forms (W-9, W-8BEN) are collected by Stripe when a pro opens a payout account. We do not store copies of those identity documents ourselves.
- Payment Methods: Card details are tokenized and stored by Stripe only. App-store purchases are processed by Apple or Google.
- Payout Information: Stripe Connect account and the bank account you connect there
- Tax Reporting: IRS Form 1099-K for US pros earning $600+ annually
Important: We operate as a marketplace platform, not a payment service provider. Stripe handles card payments, payouts, and pro identity checks. We never store full card numbers. We do not use PayPal.
How We Use Your Information
We use the information we collect to:
Service Provision
- Create and maintain your account
- Process payments and manage monetization features
- Enable real-time communication (voice/video calls, messaging)
- Provide customer support and technical assistance
- Send important updates about your account and services
Platform Improvement
- Analyze usage patterns to improve our platform
- Develop new features and tools for pros
- Personalize your experience and recommendations
- Conduct research and analytics (Clarity, Mixpanel)
- Ensure platform security and prevent fraud
Legal Bases for Processing (GDPR)
We process personal data based on the following legal grounds under Art. 6 GDPR:
- Art. 6(1)(a) – Consent: For optional features (e.g., marketing emails, certain analytics/cookies)
- Art. 6(1)(b) – Contract Performance: To create and maintain your account and provide core features
- Art. 6(1)(f) – Legitimate Interests: Platform improvement, fraud prevention, and security (balanced against your rights)
- Art. 6(1)(c) – Legal Obligations: Tax, accounting, and the identity checks Stripe must complete for payouts
Recipients of Personal Data
We share data with trusted service providers as necessary to operate the platform:
- Payment Processing: Stripe (card data and pro payouts). Apple and Google for in-app purchases.
- Hosting/Infrastructure: Contabo (US-East region)
- WebRTC Services: LiveKit (self-hosted on Contabo USA + LiveKit Cloud USA)
- Analytics: Microsoft Clarity, Mixpanel
- Email: ZeptoMail for account and transactional email
International Data Transfers (USA)
We host and process data primarily in the United States (Contabo, US-East). If you access our services from outside the US, your data will be transferred to and processed in the US.
Where EU/EEA data protection laws apply, we rely on appropriate safeguards such as the EU Standard Contractual Clauses (SCC) pursuant to Art. 46(2)(c) GDPR, along with supplementary measures and transfer impact assessments where required.
📍 Server Locations: Our application backend and self-hosted LiveKit servers run on Contabo cloud servers located in the United States. We also use LiveKit Cloud (USA) for additional WebRTC routing capacity. By using our services, you consent to this data transfer.
Data Retention
We retain personal data only for as long as necessary for the purposes outlined above:
- Account data: For the life of the account and up to 24 months after closure
- Server/Application logs: Up to 12 months
- Support tickets: Up to 24 months after resolution
- Billing/Financial records: Up to 7 years (to comply with applicable accounting/tax laws)
- WebRTC metadata: Retained for up to 30 days for troubleshooting and service quality monitoring
We delete or anonymize data when it is no longer needed.
Data Security
We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction:
- Encryption of data in transit (TLS/SSL) and at rest
- Regular security audits and assessments
- Access controls and authentication measures
- Secure payment processing through Stripe
- Regular staff training on data protection
Your Rights and Choices
Under GDPR and other data protection laws, you have the following rights regarding your personal information:
Access and Control
- Access (Art. 15 GDPR): Request a copy of your personal information
- Rectification (Art. 16 GDPR): Update or correct inaccurate information
- Erasure (Art. 17 GDPR): Request deletion of your personal information ("right to be forgotten")
- Portability (Art. 20 GDPR): Receive your data in a structured, machine-readable format
- Restriction (Art. 18 GDPR): Limit how we process your information
- Objection (Art. 21 GDPR): Object to processing based on legitimate interests
- Withdraw Consent (Art. 7(3) GDPR): Withdraw consent at any time (where processing is based on consent)
To exercise your rights, please contact us at privacy@paycall.co. You also have the right to lodge a complaint with your local data protection supervisory authority.
Cookies and Similar Technologies
We use necessary cookies for essential platform functionality and, where required by law, optional analytics/advertising cookies with your consent.
For details about cookie categories, purposes, durations and your choices, please see our Cookie Policy.
Age Restriction (18+)
Our service is not directed to individuals under 18 years old. We do not knowingly collect personal information from minors. Paycall does not allow adult, pornographic, or sexually explicit content on the platform.
If you believe a person under 18 has provided us with personal data, please contact us immediately at privacy@paycall.co to request deletion.
Automated Decision-Making
We do not engage in automated decision-making that produces legal effects concerning you or similarly significantly affects you (Art. 22 GDPR). If this changes, we will update this policy and provide required notices.
Changes to This Privacy Policy
We may update this policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last Updated" date above. For significant changes, we will provide additional notice (e.g., via email).
Regional Notices
If you are located in certain jurisdictions, additional rights and disclosures may apply:
- EU/EEA & UK: GDPR/UK GDPR rights as outlined above. You can find your competent supervisory authority via the EDPB list (EU/EEA) at edpb.europa.eu/members and the UK ICO at ico.org.uk.
- California (CCPA/CPRA): Where applicable, California residents may have rights to know, correct, delete, and opt out of selling/sharing of personal information. We do not currently sell or share personal information as defined by the CPRA.
- Switzerland (revDSG): Swiss data protection rights apply where relevant.
Questions About This Privacy Policy?
If you have any questions about this Privacy Policy or our data practices, please contact us:
Support
Effective Date: September 24, 2026 | See also: Terms of Service | Refund Policy