Effective: 23/02/2026 | Updated: 23/02/2026

This Privacy Policy explains how S4W L.L.C-FZ (Dubai, U.A.E.) trading as YourCalls.ai (“we”, “us”, “our”) collects, uses, shares, and protects personal data when you use the YourCalls.ai platform and related services (the “Service”).

This policy is written for business customers and their authorised users.

1) Important roles: Controller vs Processor
Depending on the data, we act as either:
- Controller (we decide how/why data is processed): for data about our customers and their users (e.g., account admin details, login details, billing admin contact details, support communications).
- Processor / Service provider (you decide how/why data is processed): for personal data you upload to the Service or generate through use of the Service, including End Recipient data (people you call) and call content. In this case, you are the controller and you are responsible for providing notices, selecting lawful bases, and handling data subject requests relating to your End Recipients.

If you need a Data Processing Addendum (DPA), we can provide one.

2) Personal data we collect
‍We collect personal data in the following categories:

A) Account and company information (customer data)
- User identifiers and contact details (e.g., name, email)
- Company details (e.g., company name, business email, phone number, billing address/notes, VAT number, onboarding information)

B) Contacts and lists you upload (End Recipient data)
- Phone numbers and any other information you upload or store in contact “raw data” fields (which may include names, notes, and other attributes depending on what you import)

C) Call and campaign data (End Recipient data + operational data)
Because the Service is used for calling, the Service may process and store:
- Call metadata (start/end time, duration, status, end reason, costs, assistant/campaign identifiers)
- Phone numbers called
- Call recordings
- Transcripts and message logs (including structured message-by-message content, summaries, and analysis fields)

Recording and transcription are enabled as part of the Service. What is captured depends on what callers and End Recipients say during calls.

D) Knowledge base and configuration content
- Content you upload (documents/files), names/descriptions, and related metadata

E) Billing and payment data
- Subscription and billing status, invoices/transactions references, payment events
- Card/payment details are processed by MamoPay. We do not store full card numbers; we may store limited references/metadata needed for billing status and reconciliation.

F) Support, communications, and feedback
- Messages you send to us (e.g., support tickets, emails), and related metadata

G) Technical and usage data
- Device/browser information, IP address, log data, and usage activity
- Error/diagnostic data from monitoring tools (which may include user identifiers, request URLs, and other technical context)

3) How we use personal data
We use personal data to:

- Provide, operate, and maintain the Service (including recording/transcription, analytics, and reporting)
- Manage accounts, authentication, authorisations, and user access
- Process billing and payments, and prevent fraud/abuse
- Provide customer support and respond to enquiries
- Monitor reliability, debug issues, and improve the Service
- Comply with legal obligations and enforce our Terms

4) Lawful bases (UK GDPR)
‍Where we act as controller, we rely on:

- Contract: to provide the Service to you
- Legitimate interests: to secure, maintain, and improve the Service; prevent fraud/abuse; and support customers
- Legal obligation: where required (e.g., tax/accounting, lawful requests)

Where we act as processor for your End Recipient data, you determine the lawful basis and provide any required notices/consents.

5) How we share personal data
‍We may share personal data with:

- Subprocessors and vendors that help us run the Service (cloud hosting, databases/storage, monitoring/alerting, communications tooling). They process data only to provide services to us and under contractual protections.
- Twilio (telephony) to place/receive calls and related call routing.
- MamoPay (payments) to process payments and manage billing.
- Legal and compliance parties when necessary: professional advisers, regulators, law enforcement, or others where required by law or to protect rights and safety.
- Your own integrations: if you configure webhooks/integrations, we may transmit event data to endpoints you control.

We do not sell personal data.

6) International transfers
‍We are based in the U.A.E., and our vendors/subprocessors may process data in the U.K., EEA, U.A.E., U.S., and other countries. Where required, we use appropriate safeguards for international transfers (such as contractual protections).

7) Data retention
‍We retain personal data for as long as needed to:

- Provide the Service, maintain your account, and meet contractual obligations
- Comply with legal requirements
- Resolve disputes and enforce agreements

Because call recordings and transcripts are part of the Service, they may be retained while your account is active and for a reasonable period afterwards unless you delete them sooner (where deletion is available) or unless we are required to retain them by law.

8) Security
‍We implement technical and organisational measures designed to protect personal data (e.g., access controls, least-privilege, encryption in transit, monitoring). No system is 100% secure; you are responsible for keeping your credentials secure and configuring access appropriately.

9) Your choices and rights
‍A) Customer account users (your staff/users)Depending on your location, you may have rights to access, correct, delete, or export your personal data, and to object/restrict certain processing. You can contact us using the details below.

B) End Recipients (people you call)For End Recipient data processed through your use of the Service, you (the customer) are typically the controller and are responsible for handling requests and providing required notices. If an End Recipient contacts us, we may direct them to you or, where appropriate, assist consistent with our role.

10) Cookies
‍The Service uses cookies and similar technologies for authentication/session management and security. A separate Cookie Policy will describe these in more detail.

11) Changes to this Privacy Policy
‍We may update this policy from time to time. If changes are material, we will take reasonable steps to notify you (e.g., in-app notice or email). The effective date above indicates when the current version applies.

12) Contact
‍Email: hello@yourcalls.ai
‍Address: Meydan Grandstand, 6th floor, Meydan Road, Nad Al Sheba, Dubai, U.A.E.