This policy explains which personal data YesWeCall processes, why, and your rights under the GDPR. The controller for account and billing data is Anas Samidi, Kaunas, Lithuania. Contact: anas.samidi@gmail.com.
1. Data we process
Account data: name, company, email, phone, password (stored hashed), language and settings.
Billing data: plan, invoices and billing address. Card details are entered on Stripe and never stored by us.
Service data you put in YesWeCall: contacts and phonebooks, call history, phone numbers, call recordings, AI conversation transcripts and appointments.
Technical data: logs, IP address and browser information needed for security.
2. Why we process it
To provide the service and your subscription (performance of the contract), to send service and billing emails such as trial and payment reminders, to secure the platform and prevent abuse (legitimate interest), and to keep accounting records (legal obligation).
For the contacts and callers in your account, your company is the controller and YesWeCall acts as processor on your instructions.
3. Service providers
Stripe (payments), Resend (email delivery), Telnyx (phone numbers and calls), ElevenLabs (AI voice agent, only when the add-on is used), OVHcloud (hosting in the EU) and Amazon Web Services (call recording storage in the EU).
Some providers may process data outside the EU/EEA; such transfers are covered by the European Commission's Standard Contractual Clauses or an adequacy decision.
4. Retention
Account and service data are kept while your account is active and up to 30 days after closure, unless you ask for earlier deletion. Invoices are kept for the period required by Lithuanian accounting law (10 years).
5. Your rights
You can ask to access, correct, delete or export your data, to restrict or object to processing, and to withdraw consent where processing is based on consent. Write to anas.samidi@gmail.com.
You may also complain to the Lithuanian data protection authority, the State Data Protection Inspectorate (vdai.lrv.lt).
6. Security
Data is encrypted in transit (HTTPS), passwords are hashed, access is restricted by roles, and payments are handled by PCI-DSS certified Stripe.