Privacy Policy

Effective date: September 23, 2026

This Privacy Policy explains how Kirker Inc., doing business as CallTrackingServices (“CallTrackingServices,” “we,” “us,” or “our”), collects, uses, shares, and protects personal information in connection with our website at calltrackingservices.com (the “Site”) and our call tracking software and related services (the “Service”). If you have questions, contact us at [email protected].

1. Who This Policy Covers

We handle personal information in two different roles:

Our customers (account holders). When you sign up for, pay for, or use a CallTrackingServices account, or when you visit our Site, we decide how and why your information is used. For this information we act as the “business” or “controller,” and this Privacy Policy applies directly to you.
Our customers’ callers, texters, and website visitors. When someone calls or texts a tracking number, or visits a website where one of our customers has installed our tracking code, we process that person’s information on behalf of our customer. For this information our customer is the “business” or “controller,” and we act as a “service provider” or “processor.” That customer’s privacy policy governs its use, and questions or requests should be directed to that business first.

2. Information We Collect

Information about our customers

Account and contact information, such as your name, business name, email address, phone number, mailing address, and login credentials.
Billing information, such as billing address, plan selection, and payment history. Payment card details are collected and processed directly by our payment processor, Stripe. We do not receive or store your full card number.
Account configuration and usage information, such as the tracking numbers you provision, campaign and integration settings, feature usage, minutes, messages, and support communications.
Communications, such as emails, chat messages, and phone calls you have with our support team.

Information about our customers’ callers and website visitors (processed on our customers’ behalf)

Call data, such as the caller’s phone number, caller ID name, approximate location derived from the phone number, date, time, and duration of the call, the number dialed, and call outcome.
Call recordings, transcriptions, and AI summaries, when a customer enables these features. Recordings may capture the voices and anything said by both parties.
Text message content and metadata, such as the sender and recipient numbers, message content, and delivery status.
Website session data collected by our dynamic number insertion and form tracking JavaScript snippet, such as IP address, device and browser type, referring URL, landing page, pages viewed, search keywords where available, UTM parameters, Google Click ID (gclid) and similar advertising click identifiers, and cookie identifiers used to connect a visit with a later call, text, or form submission.
Form submissions, such as the name, email address, phone number, and message a visitor enters into a tracked form.

Information collected automatically on our Site

When you visit our Site, we and our analytics and advertising partners may automatically collect your IP address, browser and device information, pages visited, referring URL, and similar data through cookies, pixels, and similar technologies. See Section 7 for details.

3. How We Use Information

We use information about our customers to:

Create and manage accounts, provide the Service, and authenticate users.
Process payments, calculate usage, send invoices, and collect amounts owed.
Provide customer support and respond to requests.
Send service notices and, with the ability to opt out, marketing communications.
Monitor, maintain, secure, and improve the Service and our Site, and develop new features.
Detect, prevent, and respond to fraud, abuse, spam, security incidents, and violations of our Terms of Service.
Comply with legal obligations, carrier and telecommunications requirements, and law enforcement requests, and to establish or defend legal claims.

We use information about our customers’ callers and website visitors only to provide the Service to the relevant customer and as that customer instructs, including to route calls and messages, attribute calls and leads to marketing sources, generate reports, create recordings, transcriptions, and summaries, and send conversion data to integrations the customer has connected. We may also use this information as permitted by law to maintain and secure the Service, prevent fraud and abuse, and comply with legal obligations. We do not use it for our own marketing.

AI features

Transcription and AI summary features use automated speech recognition and machine learning models, which may be operated by our call tracking platform provider or its subprocessors. These features process call audio and text only to deliver the requested output to the customer. Automated outputs may contain errors and should be reviewed before being relied upon.

4. How We Share Information

We do not sell personal information, and we do not share personal information for cross-context behavioral advertising, as those terms are defined under California law, except as described in Section 7 for our own Site’s advertising cookies, which you can control. We share information only as follows:

Our call tracking platform provider. The Service runs on infrastructure provided by a third-party call tracking platform provider, which hosts and processes account data, call data, recordings, messages, and website session data on our behalf.
Other service providers, such as Stripe for payment processing, telecommunications carriers and messaging providers that route calls and texts, cloud hosting, email delivery, customer support, and analytics vendors. These providers may use information only to perform services for us.
Integrations you or our customers enable. When a customer connects the Service to third-party tools such as Google Ads, Google Analytics 4, or a CRM, we send the data the customer has configured to that tool. The third party’s own terms and privacy policy govern its use of the data.
Our customers. Information about callers and website visitors is made available to the customer on whose behalf it was collected.
Carrier and regulatory registrations. To enable business text messaging, we may share customer business information with carriers and registries such as The Campaign Registry as required for A2P 10DLC registration.
Legal and safety. We may disclose information if we believe in good faith it is required by law, subpoena, or court order, or is necessary to protect the rights, property, or safety of us, our customers, or others, or to investigate fraud or abuse.
Business transfers. If we are involved in a merger, acquisition, financing, reorganization, or sale of assets, information may be transferred as part of that transaction, subject to this Privacy Policy.
With consent or at your direction.

5. Data Retention

We retain customer account and billing information for as long as your account is active and afterward as needed to comply with legal, tax, and accounting obligations, resolve disputes, and enforce our agreements.

Call records, recordings, transcriptions, messages, and website session data are retained according to the settings and plan of the customer’s account and the retention practices of our call tracking platform provider. Customers may delete recordings and other data through the account portal where that functionality is available. After an account is canceled or closed, we may delete customer data, including recordings and call history, within a reasonable period, and we do not guarantee that data will be recoverable after cancellation. Customers who need to keep data should export it before canceling. We may retain limited information in backups or where required by law, and we may retain de-identified or aggregated data that does not reasonably identify any individual.

6. Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information, including encrypted connections (HTTPS), access controls, and reliance on established providers for hosting and payment processing. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security. Customers are responsible for keeping their login credentials confidential, limiting account access to authorized users, and notifying us promptly at [email protected] of any suspected unauthorized access.

The Service is not designed to store protected health information (PHI) under HIPAA, payment card numbers, Social Security numbers, or other sensitive information, and customers should not use it for such data unless we have agreed otherwise in a signed written agreement, such as a Business Associate Agreement.

7. Cookies and Analytics

On our Site

Our Site uses cookies and similar technologies to operate the Site, remember preferences, understand how visitors use the Site, and measure the effectiveness of our advertising. We may use tools such as Google Analytics and advertising pixels from platforms such as Google. These providers may collect information about your visits across websites over time. You can control cookies through your browser settings, opt out of Google Analytics using Google’s browser add-on, and manage ad personalization through Google’s Ad Settings. Where required by law, we honor Global Privacy Control (GPC) browser signals as a request to opt out of sale or sharing for that browser.

On our customers’ websites

When a customer installs our tracking snippet on its own website, the snippet sets cookies and collects the session data described in Section 2 on the customer’s behalf. The customer is responsible for disclosing this tracking in its own privacy policy and for obtaining any consent required by applicable law.

8. Your California Privacy Rights

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (together, “CCPA”), gives you the following rights regarding personal information we hold about you as a business:

Right to know the categories and specific pieces of personal information we have collected about you, the categories of sources, the purposes for collecting it, and the categories of third parties to whom we disclose it.
Right to delete personal information we collected from you, subject to certain exceptions.
Right to correct inaccurate personal information.
Right to opt out of the sale or sharing of personal information. We do not sell personal information and do not knowingly sell or share the personal information of consumers under 16.
Right to non-discrimination. We will not discriminate against you for exercising any of these rights.

Categories we collect. In the past 12 months we have collected the following categories of personal information described in the CCPA: identifiers (such as name, email, phone number, IP address); customer records and commercial information (such as billing and purchase history); internet or network activity (such as browsing and Site usage); approximate geolocation; audio and electronic information (such as call recordings); professional information (such as business name and role); and inferences drawn from the above. These are collected from the sources and for the purposes described in Sections 2 and 3, and disclosed for business purposes to the categories of recipients described in Section 4.

How to submit a request. Email [email protected] with the subject line “Privacy Request” and describe the right you wish to exercise. We will verify your identity by matching information in our records. You may use an authorized agent to submit a request on your behalf if you provide written permission, and we may ask you to verify your identity directly. We will respond within the time required by law, generally 45 days.

Requests about callers and visitors. If your information was collected through one of our customers’ tracking numbers or websites, please contact that business directly. If you contact us, we will refer your request to the relevant customer where we can identify it, and we will assist the customer as its service provider.

Other states. Residents of other states with consumer privacy laws may have similar rights. We will honor such requests as required by applicable law using the process above.

9. Children’s Privacy

The Service and our Site are intended for businesses and are not directed to children. We do not knowingly collect personal information from children under 13, and we do not knowingly sell or share the personal information of anyone under 16. If you believe a child has provided us with personal information, contact us and we will take steps to delete it.

10. International Users and Data Transfers

We are based in the United States, and the Service is hosted in the United States. If you access the Site or Service from outside the United States, your information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country.

11. Your Choices

Account information. You can review and update much of your account information in the account portal, or by contacting us.
Marketing emails. You can unsubscribe using the link in any marketing email. We will still send service-related messages.
Cookies. You can manage cookies as described in Section 7.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will change the effective date at the top of this page, and if the changes are material, we will provide additional notice, such as by email to account holders or a notice in the account portal. Your continued use of the Site or Service after an update takes effect means you accept the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or our privacy practices, contact us at:

Kirker Inc. dba CallTrackingServices
Tustin, California, USA
Email: [email protected]