← Back to App

CallBae Privacy Policy

Effective Date: March 10, 2026

Last Updated: March 10, 2026

Operated by: Anton Santaniello Holdings LLC

656 Nostrand Ave, Brooklyn, NY 11216

Contact: [email protected]


1. Introduction

Welcome to CallBae ("we," "us," "our," or the "Platform"). CallBae (callbae.com) is an AI companion chat and voice platform. This Privacy Policy explains how we collect, use, disclose, retain, and protect your personal information when you use our services.

By creating an account or using CallBae, you acknowledge that you have read and understood this Privacy Policy. Where required by law, we will obtain your explicit consent before processing certain categories of data.

This Policy applies to all users worldwide. Sections 12–15 contain additional disclosures required under specific laws (GDPR, CCPA/CPRA, Illinois BIPA, COPPA).


2. Information We Collect

2.1 Account Data

2.2 Chat Messages & Conversation Content

2.3 AI-Extracted Memories

Our AI system automatically extracts and stores "memories" from your conversations. These may include:

Under the California Consumer Privacy Act (CCPA), these constitute "inferences drawn" from your personal information to create a profile about you.

2.4 Voice Call Data

2.5 AI-Generated Images

2.6 Payment Data

2.7 Device & Technical Data

3. How We Use Your Information

We use your information for the following purposes:

| Purpose | Data Used | Lawful Basis (GDPR) |

|---|---|---|

| Provide and operate the Platform | Account data, chat messages, memories | Performance of contract (Art. 6(1)(b)) |

| Age verification | Date of birth | Legal obligation (Art. 6(1)(c)) |

| Process payments and manage tokens | Payment data, account data | Performance of contract (Art. 6(1)(b)) |

| Personalize AI companion interactions | Chat messages, AI-extracted memories | Explicit consent (Art. 6(1)(a) and Art. 9(2)(a)) for intimate/special category data |

| Generate AI selfie images | Prompts, preferences | Performance of contract (Art. 6(1)(b)) |

| Voice call functionality | Voice audio (real-time processing only) | Explicit consent (Art. 6(1)(a)) |

| Platform security and fraud prevention | Device data, IP address, usage patterns | Legitimate interest (Art. 6(1)(f)) |

| Analytics and service improvement | Aggregated/anonymized usage data | Legitimate interest (Art. 6(1)(f)) |

| Legal compliance | All data as required | Legal obligation (Art. 6(1)(c)) |

| Respond to support requests | Account data, relevant conversation data | Performance of contract (Art. 6(1)(b)) |

We do not use your personal conversation data to train AI models. Your chat messages are processed by our AI provider to generate responses in real time but are not incorporated into model training datasets. See Section 11 for details.


4. Third-Party Service Providers (Data Processors)

We share your data with the following third-party processors who help us operate CallBae. Each processor only receives the data necessary for their specific function:

4.1 OpenAI

4.2 ElevenLabs

4.3 Supabase

4.4 Stripe

4.5 Cloudflare

4.6 Netlify

5. Data Retention

We retain your data for the following periods:

| Data Type | Retention Period | Notes |

|---|---|---|

| Account data | Duration of account + 30 days after deletion | 30-day grace period allows account recovery |

| Chat messages | Duration of account + 30 days after deletion | Permanently deleted after grace period |

| AI-extracted memories | Duration of account + 30 days after deletion | You may delete individual memories at any time |

| Voice call audio | Not retained | Processed in real time only; call metadata retained for account duration |

| AI-generated images | Duration of account + 30 days after deletion | |

| Payment records | 7 years after transaction | Required for tax and legal compliance |

| Device/technical data | 12 months from collection | Aggregated/anonymized data may be kept longer |

| Cookies | See Section 10 | Varies by cookie type |

| Support tickets | 3 years after resolution | |

After account deletion: We initiate permanent deletion of your personal data within 30 days. Some data may persist in encrypted backups for up to 90 days before being purged. Data required for legal obligations (e.g., tax records) is retained as noted above.


6. Data Security

We implement reasonable administrative, technical, and physical safeguards to protect your personal information, including:

However, no system is 100% secure. We cannot guarantee absolute security of your data. You are responsible for maintaining the confidentiality of your account credentials.


7. Data Breach Notification

In the event of a data breach involving your personal information:

8. International Data Transfers

CallBae is operated from the United States. All user data is stored on servers located in the United States (via Supabase).

If you are located outside the United States (including the European Economic Area, United Kingdom, or Switzerland):

9. Children's Privacy (COPPA Compliance)

CallBae is not directed at children under 18. We require date of birth during registration and do not knowingly permit anyone under 18 to create an account.

If we discover that a user is under 18:

  1. The account will be immediately suspended
  2. All personal data associated with the account will be deleted within 48 hours
  3. Any AI-extracted memories and conversation history will be permanently purged
  4. The user's email/identifier will be blocked from creating new accounts

If you believe a minor is using CallBae, please contact us immediately at [email protected].


10. Cookies & Tracking Technologies

CallBae uses cookies and similar technologies for the following purposes:

| Cookie Type | Purpose | Duration | Required? |

|---|---|---|---|

| Essential/session cookies | Authentication, security, basic functionality | Session / up to 30 days | Yes |

| Analytics cookies | Understanding usage patterns, improving the Platform | Up to 12 months | No (opt-out available) |

| Cloudflare cookies | Security, bot detection, performance | Per Cloudflare policy | Yes (functional) |

Your choices:

We do not use advertising cookies or third-party ad trackers. We do not sell data to advertisers.


11. AI Training Disclosure

Your conversations are not used to train AI models.

12. Your Rights — General

All CallBae users have the following rights, regardless of location:

  1. Access — Request a copy of the personal data we hold about you
  2. Correction — Request correction of inaccurate or incomplete data
  3. Deletion — Request deletion of your personal data (subject to legal retention requirements)
  4. Data export — Request a portable copy of your data in a machine-readable format
  5. Withdraw consent — Where processing is based on consent, withdraw it at any time
  6. Delete memories — Delete specific AI-extracted memories from your profile at any time through the Platform

To exercise any right, contact us at [email protected] with the subject line: "Privacy Rights Request." We will verify your identity and respond within 30 days (or sooner where required by law).

You may also delete your account directly through the Platform settings, which initiates deletion of all associated personal data per our retention schedule (Section 5).


13. Additional Rights for California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA/CPRA"):

13.1 Right to Know

You have the right to request that we disclose:

13.2 Categories of Personal Information Collected

Under CCPA categories, we collect:

| CCPA Category | Examples from CallBae | Sold or Shared? |

|---|---|---|

| A. Identifiers | Email, username, IP address | No |

| B. Personal info (Cal. Civ. Code § 1798.80) | Name, email | No |

| D. Commercial information | Purchase/transaction history, token balance | No |

| F. Internet/electronic activity | Browsing history, interaction data, usage patterns | No |

| G. Geolocation data | Approximate location from IP address | No |

| H. Audio/visual information | Voice call audio (not stored), AI-generated images | No |

| I. Professional/employment info | Only if voluntarily shared in conversation | No |

| K. Inferences drawn | AI-extracted memories: preferences, emotional states, behavioral patterns | No |

| L. Sensitive personal information | Chat content (intimate/sexual), precise geolocation, DOB | No |

13.3 We Do Not Sell or Share Your Personal Information

We do not sell your personal information as defined by the CCPA/CPRA. We do not share your personal information for cross-context behavioral advertising.

13.4 Right to Limit Use of Sensitive Personal Information

Your chat messages (including intimate content) and AI-extracted memories about emotional states constitute sensitive personal information under CPRA. You have the right to limit the use and disclosure of sensitive personal information to what is necessary to provide the services you request.

Because we only use sensitive personal information to provide CallBae's core functionality (AI companion conversations and personalization), we do not use it for purposes that would trigger the "Limit the Use of My Sensitive Personal Information" requirement. However, if you wish to submit such a request, contact us at [email protected].

13.5 Right to Delete

You may request deletion of your personal information. We will delete your data unless an exception applies (e.g., legal retention requirements, security, completing a transaction).

13.6 Right to Correct

You may request correction of inaccurate personal information, including AI-extracted memories.

13.7 Non-Discrimination

We will not discriminate against you for exercising your CCPA/CPRA rights. You will not receive different pricing, service quality, or access levels for making a privacy request.

13.8 Authorized Agents

You may designate an authorized agent to submit requests on your behalf. We will require the agent to provide proof of authorization and may verify your identity directly.

13.9 How to Submit a CCPA Request

14. Additional Rights for EEA/UK Residents (GDPR)

If you are located in the European Economic Area (EEA) or United Kingdom, the General Data Protection Regulation (GDPR) and UK GDPR apply:

14.1 Data Controller

The data controller is:

Anton Santaniello Holdings LLC

656 Nostrand Ave, Brooklyn, NY 11216, USA

Email: [email protected]

14.2 Lawful Basis for Processing

See the table in Section 3 for the lawful basis applicable to each processing purpose.

Special Category Data (Article 9): Your chat messages may contain data revealing racial or ethnic origin, political opinions, religious beliefs, health data, sex life, or sexual orientation. This constitutes special category data under GDPR Article 9. We process this data only with your explicit consent (Art. 9(2)(a)), which we obtain during account registration. You may withdraw consent at any time by deleting your account or contacting us.

14.3 Your GDPR Rights

In addition to the general rights in Section 12, you have the right to:

14.4 Data Protection Officer

We have not appointed a formal Data Protection Officer (DPO) at this time. For all privacy inquiries, contact [email protected].

14.5 Automated Decision-Making

CallBae uses automated processing (AI) to generate companion responses and extract memories. This processing:

15. Illinois Biometric Information Privacy Act (BIPA) Disclosure

15.1 Biometric Data Practices

CallBae's voice call feature processes your voice audio in real time. While we do not intentionally create, collect, or store voiceprints or other biometric identifiers:

15.2 Consent

By using CallBae's voice call features, you consent to the real-time processing of your voice audio as described in this Policy. If you do not consent, do not use the voice call feature; all other Platform features remain available.

15.3 Retention and Destruction

15.4 Your Rights Under BIPA

Illinois residents may contact us at [email protected] to:

16. Do Not Sell or Share My Personal Information

We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising.

If you wish to submit a "Do Not Sell or Share" request regardless, you may do so by emailing [email protected] with the subject line "Do Not Sell My Information." We will confirm in writing that no sale or sharing is occurring.


17. Limit the Use of My Sensitive Personal Information

We use sensitive personal information (including intimate chat content and AI-inferred emotional data) only as necessary to provide the CallBae service you requested. We do not use sensitive personal information for advertising, profiling for unrelated purposes, or any secondary use.

To submit a request to limit the use of sensitive personal information, email [email protected] with the subject line "Limit Sensitive PI."


18. Third-Party Links

CallBae may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies.


19. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes:

20. Contact Us

For any questions, concerns, or requests related to this Privacy Policy or your personal data:

Anton Santaniello Holdings LLC

656 Nostrand Ave

Brooklyn, NY 11216

Email: [email protected]

Subject line: "Privacy Inquiry"

Response time: We aim to respond to all privacy inquiries within 10 business days and fulfill verified data rights requests within the timeframes required by applicable law.


This Privacy Policy was last updated on March 10, 2026.