Privacy Policy

Effective date: October 20, 2026

This Privacy Policy explains how Kirker Inc., doing business as CallTrackingServices (“CallTrackingServices,” “we,” “us,” or “our”), collects, uses, shares, and protects personal information in connection with our website at calltrackingservices.com (the “Site”) and our call tracking software and related services (the “Service”). If you have questions, contact us at [email protected].

1. Who This Policy Covers

We handle personal information in two different roles:

  • Our customers (account holders). When you sign up for, pay for, or use a CallTrackingServices account, or when you visit our Site, we decide how and why your information is used. For this information we act as the “business” or “controller,” and this Privacy Policy applies directly to you.
  • Our customers’ callers, texters, and website visitors. When someone calls or texts a tracking number, or visits a website where one of our customers has installed our tracking code, we process that person’s information on behalf of our customer. For this information our customer is the “business” or “controller,” and we act as a “service provider” or “processor.” That customer’s privacy policy governs its use, and questions or requests should be directed to that business first.

2. Information We Collect

Information about our customers

  • Account and contact information, such as your name, business name, email address, phone number, mailing address, and login credentials.
  • Billing information, such as billing address, plan selection, and payment history. Payment card details are collected and processed directly by our payment processor, Stripe. We do not receive or store your full card number.
  • Account configuration and usage information, such as the tracking numbers you provision, campaign and integration settings, feature usage, minutes, messages, and support communications.
  • Communications, such as emails, chat messages, and phone calls you have with our support team.
  • Sign-in and security information, such as the IP address, browser and time of logins and security events (for example sign-in codes and login-attempt limits), and a random identifier for browsers you have verified so you are not asked for a code on every visit.
  • Content you add to configure your calls, such as messages played to callers (the text you type, or audio you upload or record in your browser), business hours, after-hours choices, and notes you share with your team.
  • Number transfer information, when you ask us to transfer a number to us: the account holder’s name, service address, your current provider’s account number and PIN, a copy of a recent bill, and the name you type to sign the authorization with the time and IP address. PINs are stored encrypted and bills are kept in storage that is not publicly accessible.

Information about our customers’ callers and website visitors (processed on our customers’ behalf)

  • Call data, such as the caller’s phone number, caller ID name, approximate location derived from the phone number, date, time, and duration of the call, the number dialed, and call outcome.
  • Call recordings, transcriptions, and AI summaries, when a customer enables these features. Recordings may capture the voices and anything said by both parties.
  • Text message content and metadata, such as the sender and recipient numbers, message content, and delivery status.
  • Website session data collected by our dynamic number insertion and form tracking JavaScript snippet, such as IP address, device and browser type, referring URL, landing page, pages viewed, search keywords where available, UTM parameters, Google Click ID (gclid) and similar advertising click identifiers, and cookie identifiers used to connect a visit with a later call, text, or form submission.
  • Website form submissions, such as the name, phone number, email address, form name and page that a visitor enters on a customer’s website form, sent to us by the customer’s form tracking script, lead address or our WordPress plugin, together with the visitor’s session identifier so the lead can be credited to its source.
  • Form submissions, such as the name, email address, phone number, and message a visitor enters into a tracked form.

Information collected automatically on our Site

When you visit our Site, we and our analytics and advertising partners may automatically collect your IP address, browser and device information, pages visited, referring URL, and similar data through cookies, pixels, and similar technologies. See Section 7 for details.

3. How We Use Information

We use information about our customers to:

  • Create and manage accounts, provide the Service, and authenticate users.
  • Process payments, calculate usage, send invoices, and collect amounts owed.
  • Provide customer support and respond to requests.
  • Send service notices and, with the ability to opt out, marketing communications.
  • Monitor, maintain, secure, and improve the Service and our Site, and develop new features.
  • Detect, prevent, and respond to fraud, abuse, spam, security incidents, and violations of our Terms of Service.
  • Comply with legal obligations, carrier and telecommunications requirements, and law enforcement requests, and to establish or defend legal claims.

We use information about our customers’ callers and website visitors only to provide the Service to the relevant customer and as that customer instructs, including to route calls and messages, attribute calls and leads to marketing sources, generate reports, create recordings, transcriptions, and summaries, and send conversion data to integrations the customer has connected. We may also use this information as permitted by law to maintain and secure the Service, prevent fraud and abuse, and comply with legal obligations. We do not use it for our own marketing.

AI features

Transcription and AI summary features use automated speech recognition and machine learning models, which may be operated by our call tracking platform provider or its subprocessors. These features process call audio and text only to deliver the requested output to the customer. Automated outputs may contain errors and should be reviewed before being relied upon.

Messages you send us. When you write to us through the account portal or by email, we may use AI systems to help our staff handle your message: to sort it by topic and urgency, to summarize longer conversations, and to suggest draft replies and help articles. Only the message or conversation and basic account details (such as your name, company and plan) are used for this. A member of our staff reads and approves every reply before it is sent; AI does not send messages to you on its own.

Third-party systems, partners and AI. To run and improve the Service, we send information about you and your use of it, including your name, business and contact details (email address and phone numbers), the questions and messages you send us, account and billing details, and call and message data (such as caller numbers, recordings, transcripts and call details), to third-party systems of many kinds. These include our service providers and subprocessors (for example call tracking, telephony, payment, email, hosting and analytics providers), our business partners (for example integration, referral and affiliate partners), and artificial intelligence systems (currently including Anthropic, Google and OpenAI) that power features such as the help assistant, voice previews, call transcription, summaries, call labels, and sorting, summarizing and drafting replies to the messages you send us. These third parties process the information to provide their part of the Service under their own terms and privacy policies. Please don’t include passwords, card numbers or other sensitive details in questions or messages you send us.

4. How We Share Information

We do not sell personal information, and we do not share personal information for cross-context behavioral advertising, as those terms are defined under California law, except as described in Section 7 for our own Site’s advertising cookies, which you can control. We share information only as follows:

  • Our call tracking platform provider. The Service runs on infrastructure provided by a third-party call tracking platform provider, which hosts and processes account data, call data, recordings, messages, and website session data on our behalf.
  • Other service providers, such as Stripe for payment processing, telecommunications carriers and messaging providers that route calls and texts, cloud hosting, email delivery, customer support, and analytics vendors. These providers may use information only to perform services for us.
  • Integrations you or our customers enable. When a customer connects the Service to third-party tools such as Google Ads, Google Analytics 4, or a CRM, we send the data the customer has configured to that tool. The third party’s own terms and privacy policy govern its use of the data.
  • Our customers. Information about callers and website visitors is made available to the customer on whose behalf it was collected.
  • Carrier and regulatory registrations. To enable business text messaging, we may share customer business information with carriers and registries such as The Campaign Registry as required for A2P 10DLC registration.
  • Legal and safety. We may disclose information if we believe in good faith it is required by law, subpoena, or court order, or is necessary to protect the rights, property, or safety of us, our customers, or others, or to investigate fraud or abuse.
  • Business transfers. If we are involved in a merger, acquisition, financing, reorganization, or sale of assets, information may be transferred as part of that transaction, subject to this Privacy Policy.
  • With consent or at your direction.

5. Data Retention

We retain customer account and billing information for as long as your account is active and afterward as needed to comply with legal, tax, and accounting obligations, resolve disputes, and enforce our agreements.

Call records, recordings, transcriptions, messages, and website session data are retained according to the settings and plan of the customer’s account and the retention practices of our call tracking platform provider. Customers may delete recordings and other data through the account portal where that functionality is available. Account owners can choose how long call recordings are kept (for example, forever, one year, six months, or 90 days); older recordings are then deleted automatically, while the call record itself remains in reports. Owners can download their account data (people, tracking numbers, calls and texts from the last 12 months, and invoices) from the account portal at any time, and can request that the account be deleted. After a deletion request, service continues until the end of the paid period; we then close the call tracking account (which releases its tracking numbers) and erase account data such as logins, team members, notes, and settings, keeping billing and payment records as required by law. After an account is canceled or closed, we may delete customer data, including recordings and call history, within a reasonable period, and we do not guarantee that data will be recoverable after cancellation. Customers who need to keep data should export it before canceling. Number transfer documents (the bill copy, PIN and carrier account number) are deleted within 90 days after the transfer request is completed or canceled; the record that a transfer happened is kept with the account. We may retain limited information in backups or where required by law, and we may retain de-identified or aggregated data that does not reasonably identify any individual.

6. Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information, including encrypted connections (HTTPS), access controls, limits on login and password-reset attempts, bot protection on our login form, optional email sign-in codes when you log in from a new browser, and reliance on established providers for hosting and payment processing. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security. Customers are responsible for keeping their login credentials confidential, limiting account access to authorized users, and notifying us promptly at [email protected] of any suspected unauthorized access.

The Service is not designed to store protected health information (PHI) under HIPAA, payment card numbers, Social Security numbers, or other sensitive information, and customers should not use it for such data unless we have agreed otherwise in a signed written agreement, such as a Business Associate Agreement.

7. Cookies and Analytics

On our Site

Our Site uses cookies and similar technologies to operate the Site, remember preferences, understand how visitors use the Site, and measure the effectiveness of our advertising. We may use tools such as Google Analytics and advertising pixels from platforms such as Google. These providers may collect information about your visits across websites over time. Some cookies are strictly necessary, such as those that keep you logged in, a short-lived cookie used while you enter a sign-in code, and a cookie that remembers a browser you have verified (for up to 30 days). When we offer a referral or partner program, a cookie may record which partner referred you (for a limited period stated in the program terms). You can control cookies through your browser settings, opt out of Google Analytics using Google’s browser add-on, and manage ad personalization through Google’s Ad Settings. Where required by law, we honor Global Privacy Control (GPC) browser signals as a request to opt out of sale or sharing for that browser.

On our customers’ websites

When a customer installs our tracking snippet on its own website, the snippet sets cookies and collects the session data described in Section 2 on the customer’s behalf. The customer is responsible for disclosing this tracking in its own privacy policy and for obtaining any consent required by applicable law. If the customer also uses our form tracking script or WordPress plugin, the form submissions described in Section 2 are sent to us together with the session identifier set by the tracking snippet; the form script does not set cookies of its own.

8. Your California Privacy Rights

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (together, “CCPA”), gives you the following rights regarding personal information we hold about you as a business:

  • Right to know the categories and specific pieces of personal information we have collected about you, the categories of sources, the purposes for collecting it, and the categories of third parties to whom we disclose it.
  • Right to delete personal information we collected from you, subject to certain exceptions.
  • Right to correct inaccurate personal information.
  • Right to opt out of the sale or sharing of personal information. We do not sell personal information and do not knowingly sell or share the personal information of consumers under 16.
  • Right to non-discrimination. We will not discriminate against you for exercising any of these rights.

Categories we collect. In the past 12 months we have collected the following categories of personal information described in the CCPA: identifiers (such as name, email, phone number, IP address); customer records and commercial information (such as billing and purchase history); internet or network activity (such as browsing and Site usage); approximate geolocation; audio and electronic information (such as call recordings); professional information (such as business name and role); and inferences drawn from the above. These are collected from the sources and for the purposes described in Sections 2 and 3, and disclosed for business purposes to the categories of recipients described in Section 4.

How to submit a request. Email [email protected] with the subject line “Privacy Request” and describe the right you wish to exercise. We will verify your identity by matching information in our records. You may use an authorized agent to submit a request on your behalf if you provide written permission, and we may ask you to verify your identity directly. We will respond within the time required by law, generally 45 days.

Requests about callers and visitors. If your information was collected through one of our customers’ tracking numbers or websites, please contact that business directly. If you contact us, we will refer your request to the relevant customer where we can identify it, and we will assist the customer as its service provider.

Other states. Residents of other states with consumer privacy laws may have similar rights. We will honor such requests as required by applicable law using the process above.

9. Children’s Privacy

The Service and our Site are intended for businesses and are not directed to children. We do not knowingly collect personal information from children under 13, and we do not knowingly sell or share the personal information of anyone under 16. If you believe a child has provided us with personal information, contact us and we will take steps to delete it.

10. International Users and Data Transfers

We are based in the United States, and the Service is hosted in the United States. If you access the Site or Service from outside the United States, your information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country.

11. Your Choices

  • Account information. You can review and update much of your account information in the account portal, or by contacting us.
  • Marketing emails. You can unsubscribe using the link in any marketing email. We will still send service-related messages.
  • Cookies. You can manage cookies as described in Section 7.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will change the effective date at the top of this page, and if the changes are material, we will provide additional notice, such as by email to account holders or a notice in the account portal. Your continued use of the Site or Service after an update takes effect means you accept the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or our privacy practices, contact us at:

Kirker Inc. dba CallTrackingServices
Tustin, California, USA
Email: [email protected]