TheyCall Privacy Policy
Scope: theycall.ai (marketing site) and app.theycall.ai (the platform application). US-only service. Drafted for a B2B platform with one sensitive particularity: we record calls with consumers who are not our users.
Effective date: July 7, 2026. Operator: The Real Corp DXB LLC, 2201 Menaul Blvd NE Ste A, Albuquerque, NM 87107, USA ("we", "us").
TheyCall is a pay-per-call marketplace: advertising partners ("publishers") run approved ads with our tracking numbers; consumers dial those numbers; we route the call to a licensed insurance agent who pays per qualified call. This policy explains what we collect, why, and your choices. It is written in plain English on purpose.
1. Who this policy covers
- Consumers (callers). You dialed a number from an ad and were connected to an insurance agent. You may never visit our sites; we still process your data (Section 3).
- Agents and agencies. Licensed insurance professionals with platform accounts.
- Publishers. Advertising businesses with platform accounts.
- Site visitors. Anyone browsing theycall.ai.
2. What we collect from account holders (agents, agencies, publishers)
- Account and identity data — name, business name, email, phone, password credentials (hashed via our auth provider), and for agents: the states where you attest you are licensed; for publishers: business information and tax-form designation (e.g., W-9 / W-8BEN).
- Payment data — handled by Stripe. Wallet top-ups run through Stripe Checkout; publisher payouts run through Stripe Connect or recorded bank transfers. We do not store card numbers; we store transaction records (amounts, timestamps, Stripe identifiers) in your ledger.
- Contract records — the version, timestamp, and IP address of each terms/attestation acceptance. We keep these to prove agreement.
- Platform activity — campaigns joined, availability status, call handling metrics, dispositions and reported sale amounts, compliance-checklist entries, payout accruals.
- Technical data — logs, device/browser data, and error diagnostics (Sentry).
3. What we collect about consumers (callers)
If you call a tracking number:
- Call recording. Billable calls routed through the platform (calls capable of generating a publisher payout or an agent charge) are recorded from the moment they are answered, and may be transcribed; the platform does not route billable calls without recording active. Recordings and transcripts are used for the purposes in Section 4. See our Call Recording Policy for the disclosure and consent approach.
- Call metadata — your phone number, the number you dialed, call time and duration, the state associated with your call, routing outcome.
- Call content data — what you discuss with the agent (captured in the recording/transcript), and the agent's logged outcome of the call (e.g., interested, sale, do-not-call request).
- Ad source — which approved advertisement/campaign the tracking number belongs to.
We do not buy data about consumers from data brokers, and we do not use consumer data for advertising to consumers.
4. Why we process data (purposes)
- Operate the marketplace: route calls, grade calls against published criteria, bill agents, credit non-qualified calls, accrue publisher earnings.
- Prove and audit: qualification verdicts, billing disputes, contract acceptances, fraud prevention.
- Compliance: telemarketing-law compliance (including producing records on lawful request), recording-law compliance, do-not-call requests logged by agents.
- Improve and support: quality review, training, support requests, service analytics, error monitoring.
- Legal: establish, exercise, or defend legal claims; comply with law.
5. Sharing
We share data only as needed to run the service:
- Between marketplace participants. The agent who takes your call receives the call, the recording/transcript of it, and its metadata to service your inquiry. The publisher who generated the call sees qualification data for its own calls (verdict, reason, limited lead data), contractually restricted to quality verification and barred from resale or remarketing.
- Processors. Twilio (telephony, call recording, transcription), Stripe (payments and payouts), Supabase (database, authentication), Vercel (hosting), Sentry (error monitoring), Resend (transactional email), PostHog (product usage analytics — page views, interface events).
- Legal and safety. Courts, regulators, or parties to litigation where required; professional advisers; a successor in a corporate transaction.
We do not sell personal information for money. Whether delivering a consumer's call and related data to a paying agent constitutes a "sale" or "sharing" under certain state privacy laws is under legal review.
6. Retention
We keep data only as long as needed for the purposes above. Indicative schedule:
| Data | Retention |
|---|---|
| Call recordings and transcripts | 5 years, then deletion, subject to legal hold |
| Call metadata, verdicts, ledgers | Life of the account, plus the period reasonably necessary to meet our legal, financial, and audit obligations (financial and audit records) |
| Contract/attestation acceptance records | Life of the account, plus the period reasonably necessary to meet our legal, financial, and audit obligations |
| Account data | Life of the account, then deletion or anonymization within a reasonable period |
| Support and log data | For as long as reasonably necessary for the purposes described in this policy |
7. Your rights — state privacy laws
Depending on your state of residence (including California under the CCPA/CPRA and the state privacy laws in effect in 2026 in states such as Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana, and others), you may have rights to: know/access the personal information we hold about you; correct it; delete it; obtain a portable copy; opt out of certain sharing, targeted advertising, or profiling; and limit use of sensitive personal information. We honor rights requests as required by the law applicable to you.
How to exercise rights: email privacy@theycall.ai with your request and your relationship to us (caller, agent, publisher). We will verify your identity — for callers, typically via the phone number that placed the call. We will not discriminate against you for exercising rights.
Where an agent holds their own copy of your recording, transcript, or personal information, the Agent Terms of Service (§9.3) require the agent to honor a deletion or correction request we forward, and to delete their copy, within 30 days of our notice.
Consumers note: if you asked an agent not to be called again, that request is logged against the agent's account. It is not a National Do Not Call Registry filing; you can register at donotcall.gov.
8. Security
Data is encrypted in transit; access to recordings and ledgers is role-restricted (agents see their own calls; publishers see quality data for their own calls; administrative access is limited and logged). Payment card data never touches our servers. No system is perfectly secure; we will notify you of breaches as required by law.
9. Minors
The platform and sites are for business users, and call campaigns target adults inquiring about insurance (Final Expense is marketed to adults, typically seniors). We do not knowingly collect data from anyone under 18. If you believe a minor's data reached us, contact privacy@theycall.ai and we will delete it.
10. Cookies and analytics
theycall.ai and the app use strictly necessary cookies (session, authentication) and error monitoring (Sentry). We do not run third-party advertising cookies on the app.
11. Changes
We will post updates here with a new effective date, and for material changes affecting account holders we will notify in-app or by email. Prior versions are archived.
12. Contact
The Real Corp DXB LLC, 2201 Menaul Blvd NE Ste A, Albuquerque, NM 87107, USA — privacy@theycall.ai.