Privacy Policy

Last updated: 8 September 2026

WhisperCall AI ("we", "us") runs the voice-call service at whispercallai.com. This page explains what data the service handles, why, and what you can do about it. It is written to be read, not skimmed past.

The short version

Your calls are processed live. We do not store recordings or transcripts of what you or the AI said.
Your microphone is streamed only while a call is connected.
Speech recognition, voice synthesis and the AI's replies are produced by third-party providers listed below.
Payments are made in cryptocurrency through NOWPayments. We never see a card number because we do not accept cards.
We use our own first-party analytics and session replays with typed text masked. There are no advertising trackers and no Google Analytics on the site.

1. What we collect

Account

Your email address, a salted hash of your password (we cannot read the password itself), the time you signed up, the IP address you signed up from, and the anonymous visitor id described below.

Calls

For each call: the persona, start and end time, duration, how many turns were spoken, and the seconds charged to your balance. While a call is running the conversation is held in the server's memory so the AI can follow it; it is discarded when the call ends. Audio and transcripts are not written to disk or to any database.

What your companion remembers

After a call in which you took part, the AI writes a few short notes for that persona (up to about 900 characters: what you like to be called, what you are into, things you mentioned, where the call left off) so the next call can pick up where you were. These notes, not the conversation, are stored with your account. The persona picker shows what each persona knows and a Start fresh link that erases it at once; deleting your account erases it too. Contact details and other identifying data are filtered out of the notes.

Payments

Our order id, the pack you bought, its price, the payment status, the coin and amount you paid, the blockchain transaction id, and the invoice reference returned by NOWPayments.

Site usage

IP address, browser and operating system, language, time zone, screen size, the page that referred you, any campaign parameters in the link you arrived on, a random visitor id stored in a cookie, and whether you passed the age confirmation. From the IP address we derive an approximate location (country, region, city) and the network operator.

Session replays

To see where the site confuses people we record how pages are used: layout, clicks, scrolling and navigation. Everything you type is masked before it leaves your browser, and the conversation area of a call is excluded from the recording entirely. Replays are deleted after 30 days.

Server logs

Standard web-server logs (IP address, requested URL, time, browser) are kept for 14 days for security and debugging.

Email

We do not send email — not even password resets — so we never contact you at your address. If that ever changes it will be limited to your own account (a reset you ask for yourself, or a single message from your companion after sign-up with a one-click unsubscribe) and this page will say so first.

2. Why we use it

To run calls and bill call time against your balance.
To grant the free trial once per person: the visitor id and sign-up IP are checked so the free minutes cannot be farmed with throwaway emails.
To keep the service secure and detect bots, fraud and abuse.
To understand how the site is used and improve it.
To meet legal and accounting obligations.

We do not sell personal data and we do not use it for third-party advertising.

3. Who processes it for us

Provider	What it does	What it receives
ElevenLabs	Speech recognition and voice synthesis	Your call audio and the AI's reply text, during a call
OpenRouter and the language-model host it routes to	Generates the AI's replies	The text of the current conversation. No email, IP address or account details are sent.
NOWPayments	Cryptocurrency payment processing	Order id, amount, and the wallet transaction you send
ip-api.com	Approximate location from IP address	IP addresses of visitors
Hetzner	Hosting (Helsinki, Finland, EU)	Everything above is stored on servers they operate for us

ElevenLabs and OpenRouter are based in the United States, so call audio and conversation text leave the EU while a call is in progress. Each provider handles that data under its own privacy terms.

4. Cookies and browser storage

wc_vid: a random visitor id, kept for one year, used for analytics and the once-per-person free trial.
Session cookie: keeps you signed in. It expires after 90 days without a visit, or when you sign out.
Age confirmation: stored in your browser's session storage so the 18+ notice is not repeated on every page load. It disappears when the tab is closed.

You can clear all of these from your browser at any time. The site works without them; you will simply be asked to confirm your age and sign in again.

5. How long we keep it

Account and call records: until you ask us to delete your account.
Payment records: as long as accounting rules require, even after account deletion.
Session replays: 30 days. Server logs: 14 days.
Call audio and transcripts: not kept at all.
Support chat: what you write in the support chat bubble, our replies, and the visitor id of the browser you wrote from, kept so we can answer you and follow up. Ask us in the chat or by email to delete a conversation.

6. Your rights

You can ask us to show you the data we hold about you, correct it, export it, or delete it. Email support@whispercallai.com from the address on your account and say what you want done. We answer within 30 days, usually much sooner. If you live in the EU or UK you also have the right to complain to your data-protection authority.

7. Security

All traffic is encrypted with TLS. Passwords are hashed with scrypt. The application server is not reachable from the internet except through the website itself, and access to production systems is limited to the people who operate the service. No system is perfectly secure, so please use a password you do not use anywhere else.

8. Adults only

WhisperCall AI is for people aged 18 or over. We do not knowingly collect data from anyone younger. If you believe a minor has created an account, tell us and we will remove it.

9. Changes

When this policy changes we update the date at the top. Material changes will also be announced on the site before they take effect.

10. Contact

Privacy questions and requests: support@whispercallai.com. See also our Terms of Service and Content Policy.