Privacy Policy

Last updated: October 21, 2026

LiveCall ("we", "us") provides a "Video call me now" button that businesses (our customers) add to their websites so that visitors can talk to them on a live browser video call. This policy explains what information we handle, why, who helps us run the service, and the choices you have. Questions: hello@joinlivecall.com.

Two kinds of people, two roles

• Customers and their team members who sign up for LiveCall. For their account information, LiveCall decides how it is used.
• Visitors who start a call through a customer's widget. We process visitor information on behalf of that customer, following their instructions. The customer is responsible for telling their visitors about it (for example in their own privacy policy, which the widget can link to). Visitors who want to exercise their rights should contact the business they called; we will help that business respond.

What we collect

From customers and team members

• Account details: name, email address, password (stored only as a salted scrypt hash), profile photo, title and optional phone number for SMS alerts.
• Workspace settings: widget text and colours, booking link, allowed websites, alert destinations (for example a Slack webhook address), team schedules and availability.
• Billing details, if you subscribe: handled by Stripe. We receive your Stripe customer and subscription identifiers and status, never your full card number.
• Sign-in records: session identifiers, browser type, time of last sign-in.

From visitors (on behalf of our customers)

• What the visitor types into the widget: name, and depending on the customer's settings, phone number, email address, company and a short message.
• Context of the call: the page the widget was on, the referring page and campaign (UTM) tags, approximate device and browser type, language and time zone, and a one-way salted hash of the IP address (used only to stop abuse; the address itself is not stored).
• Call records: when the call started, who answered, duration, outcome and notes added by the team, and an optional rating from the visitor.

We do not record calls. Audio and video stream directly between participants through our video provider, Daily, and are not stored by LiveCall.

How we use information

• To run the service: ring the right team members, connect calls, show call history and statistics, send alerts the customer has configured, and offer the booking link when nobody answers.
• To secure the service: authentication, two-factor authentication for staff, rate limits and abuse prevention.
• To communicate with customers: account confirmation, invitations, password resets, billing and important service notices.

We do not sell personal information, we do not use it for advertising, and we do not use visitor information for any purpose other than providing the service to the customer who collected it.

Who helps us (subprocessors)

• Fly.io: hosting and managed PostgreSQL database (United States).
• Daily.co: real-time video infrastructure for calls.
• Resend: sending email (confirmations, invitations, alerts).
• Stripe: payments, for customers on paid plans.
• Twilio: SMS alerts, only for team members who opt in.
• Google Fonts: web fonts on our pages; your browser requests them from Google.

When a customer connects Slack, Discord, Telegram or their own webhook, call alerts are sent there at the customer's direction, and that service's own terms apply.

Cookies and browser storage

We use only what the service needs: a sign-in cookie for the dashboard and a separate one for our staff portal. The widget stores a random visitor identifier, the position you dragged it to, and whether you dismissed an invitation, in your browser's local or session storage. We use no advertising or cross-site tracking cookies.

How long we keep information

• Call records and the visitor information attached to them are deleted automatically 180 days after the call, and customers can delete individual calls sooner.
• Account and workspace information is kept while the account is active. Ask us to delete your account and we will delete it, except for records we must keep by law (for example invoices).
• Encrypted database backups are kept for a limited period by our hosting provider and then overwritten.

Security

All traffic uses HTTPS. Passwords are hashed, email links are single-use and stored only as hashes, staff access requires two-factor authentication and is logged, and data is stored with our hosting provider's encrypted storage. No system is perfectly secure; if we learn of a breach affecting your information, we will notify you as the law requires.

Your rights

Depending on where you live (for example under the GDPR in the EU/UK or the CCPA in California) you may have the right to access, correct, delete or export your information, and to object to or restrict some processing. Customers can do most of this in the dashboard; for anything else email hello@joinlivecall.com. Visitors should contact the business they called. You may also complain to your local data protection authority.

International transfers

LiveCall is operated from and hosted in the United States. If you use it from elsewhere, your information is transferred to and processed in the United States, with the safeguards required by applicable law.

Children

LiveCall is not directed to children under 16, and we do not knowingly collect their information.

Changes

If we change this policy we will update the date above, and for significant changes we will tell customers by email or in the dashboard before they take effect.