← Back

Privacy Policy

Last updated: May 2026

1. Who we are

CallBack is operated as a sole trader service. Our contact email is support@getcallback.co.uk. We provide a missed revenue recovery and SMS appointment booking service for tradespeople in the UK.

2. What data we collect

We collect and process the following categories of data:

  • Account data: Your name, email address, and password (stored hashed) when you create an account.
  • Business data: Your business name, phone number, trade type, and average job value.
  • Call logs: Phone numbers of callers who miss your business line, captured via Vonage when a call diverts to your CallBack number.
  • SMS messages: The content of SMS conversations between your CallBack number and your leads.
  • Appointment data: Booking times and job types extracted from SMS conversations.
  • Payment data: Billing information is handled by Stripe. We do not store card details.

3. How we use your data

  • To provide the CallBack service — capturing missed calls and sending automated SMS replies on your behalf.
  • To book appointments into your Google Calendar when connected.
  • To send you transactional emails (account setup, number provisioning).
  • To calculate your dashboard metrics (leads recovered, conversion rate, estimated revenue).
  • To process subscription payments via Stripe.

We do not sell your data. We do not use your data for advertising. We do not share caller phone numbers with third parties beyond the processors listed below.

4. Data processors

We use the following third-party processors to operate the service:

  • Supabase (Supabase Inc., USA) — database and authentication. Your account data, business data, leads, messages, and appointments are stored in Supabase. Data is processed under a Data Processing Agreement. More at supabase.com/privacy.
  • Vonage (Vonage Holdings Corp., USA) — voice and SMS infrastructure. Caller phone numbers and SMS messages pass through Vonage. More at vonage.co.uk/legal/privacy-policy.
  • Anthropic(Anthropic PBC, USA) — AI inference used to parse natural language booking times from SMS messages. Message content is sent to Anthropic's API for this purpose.
  • Stripe (Stripe Inc., USA) — payment processing. We do not store card details. More at stripe.com/gb/privacy.
  • Resend (Resend Inc., USA) — transactional email delivery.
  • Vercel(Vercel Inc., USA) — application hosting. Request logs may be retained per Vercel's data policy.
  • Google (Google LLC, USA) — Google Calendar API. Used only when you connect your Google Calendar and only to create/read calendar events on your behalf.

5. Legal basis for processing

Under UK GDPR, we process your personal data on the following bases:

  • Contract: Processing necessary to provide the service you have signed up for.
  • Legitimate interests: Platform security, fraud prevention, and service improvement.
  • Consent: Google Calendar integration (you explicitly authorise this).

6. Your rights

Under UK GDPR you have the right to:

  • Access the personal data we hold about you.
  • Rectification of inaccurate data.
  • Erasure ("right to be forgotten") — you can delete your account at any time from Settings, which permanently deletes your business data, leads, messages, and appointments.
  • Data portability — request a copy of your data in a machine-readable format.
  • Object to processing based on legitimate interests.

To exercise any of these rights, email support@getcallback.co.uk. We will respond within 30 days.

7. Data retention

We retain your account and business data for as long as your account is active. If you delete your account, your data is permanently deleted within 30 days. Call logs and SMS messages are retained for 12 months from capture to support your dashboard history. Stripe retains billing records for up to 7 years for tax compliance.

8. Caller data

When a missed call is captured, we store the caller's phone number. This is used solely to send them an SMS on your behalf and, if they respond, to facilitate booking an appointment with you. Callers' phone numbers are not shared with third parties beyond the processors listed above. If a caller wishes to have their number removed from our system, they can request this by emailing support@getcallback.co.uk.

9. Cookies

We use only essential cookies required to maintain your login session (Supabase auth cookies). We do not use tracking, advertising, or analytics cookies.

10. Changes to this policy

We may update this policy from time to time. The date at the top of this page reflects the last update. Continued use of the service after a policy update constitutes acceptance of the updated terms.

11. Contact

For any privacy-related queries, email support@getcallback.co.uk.