CallFlow

Privacy Policy

Effective date: August 9, 2026

CallFlow ("CallFlow", "we", "us") is operated by Raphael Kalonji. This Privacy Policy explains what personal data we collect when you use CallFlow at call-flow.app, why we collect it, and the choices you have. It applies to everyone who uses CallFlow: account holders (organizations, admins, workers) and the guests who book meetings through a CallFlow link.

1. Data we collect

Account data. When you create a CallFlow account we store your name, email address, timezone, and, if you sign up with a password, a securely hashed version of it. If you sign in with Google or Microsoft, we receive your name, email address, and profile picture from that provider.

Calendar connections. If you choose to connect a calendar so CallFlow can check your availability and create events, we request access to:

  • Google Calendar — permission to read free/busy time and create calendar events (we do not request broader access to your Google account).
  • Microsoft Outlook / Microsoft 365 — permission to read and write calendar events.
  • Apple iCloud Calendar — a read-only connection using an app-specific password you generate yourself; it is used only to check availability and CallFlow never creates or modifies iCloud events. Your app-specific password is stored encrypted.

You can disconnect any calendar at any time from your account settings, which revokes CallFlow's access.

Booking and guest data.When someone books a meeting through a CallFlow link, we collect the guest's name, email address, phone number (if provided), and any notes entered for that booking, so the meeting can be scheduled and the relevant people notified.

Organization data. If you use CallFlow as part of a team, we store your organization or team name and the email addresses of people you invite.

2. How we use your data

  • To operate the scheduling service: matching availability, creating bookings, and adding events to connected calendars.
  • To send booking confirmations, reminders, and workflow notifications by email and, where enabled, by SMS.
  • To authenticate you and keep your account secure.
  • To provide customer support and respond to your requests.
  • To maintain and improve the reliability of the service.

We do not sell your personal data, and we do not use it for advertising.

3. Who we share data with

We share personal data only with the service providers ("subprocessors") needed to run CallFlow, and with the third parties you explicitly connect:

  • Google, Microsoft, Apple — to sync availability and create events on the calendar you connect.
  • Resend — to deliver transactional emails (invitations, confirmations, reminders).
  • Twilio — to deliver SMS reminders, when SMS notifications are enabled for a workflow.
  • Our infrastructure provider, to host the application and database.

These providers only receive the data required to perform their specific function and are not permitted to use it for their own purposes. We do not otherwise share your data with third parties, except where required by law.

4. Data retention

We retain account and booking data for as long as your account is active, so that booking history and analytics remain available to you. If you delete your account or ask us to delete your data, we will remove it within a reasonable period, except where we are required to retain it by law.

5. Security

We apply reasonable technical and organizational measures to protect your data, including encryption of sensitive credentials such as calendar app-specific passwords, and access controls on our infrastructure. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

6. Your rights

If you are located in the European Economic Area, you have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise these rights, contact us at support@call-flow.app. You also have the right to lodge a complaint with your local data protection authority (in France, the CNIL).

7. Children

CallFlow is not directed at children under 16, and we do not knowingly collect data from them.

8. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the effective date above and, where appropriate, notify account holders by email.

9. Contact us

Questions about this policy or your data? Email us at support@call-flow.app.