Privacy Policy

This Privacy Notice for Callion LLC, a Wyoming limited liability company doing business as Callion AI ("we," "us," or "our"), describes how and why we might access, collect, store, use, and/or share ("process") your personal information when you use our services ("Services"), including when you:

• Visit our website at https://callion.ai or any website of ours that links to this Privacy Notice
• Engage with us in other related ways, including any marketing or events

Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. We are responsible for making decisions about how your personal information is processed. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at support@callion.ai.

This summary provides key points from our Privacy Notice, but you can find out more details about any of these topics by clicking the link following each key point or by using our table of contents below.

What personal information do we process? When you visit, use, or navigate our Services, we may process personal information depending on how you interact with us and the Services, the choices you make, and the products and features you use.

Do we process any sensitive personal information? We do not process sensitive personal information.

Do we collect any information from third parties? We do not collect information from third parties, except for specific data you explicitly authorize us to access via Google APIs (such as Google Sheets and Google Calendar data) to enable our integration features.

How do we process your information? We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We may also process your information for other purposes with your consent.

In what situations and with which parties do we share personal information? We may share information in specific situations and with specific third parties.

How do we keep your information safe? We have adequate organizational and technical processes and procedures in place to protect your personal information. However, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure.

What are your rights? Depending on where you are located geographically, the applicable privacy law may mean you have certain rights regarding your personal information.

How do you exercise your rights? The easiest way to exercise your rights is by contacting us. We will consider and act upon any request in accordance with applicable data protection laws.

Personal information you disclose to us

In Short: We collect personal information that you provide to us.

We collect personal information that you voluntarily provide to us when you register on the Services, express an interest in obtaining information about us or our products and Services, when you participate in activities on the Services, or otherwise when you contact us.

Personal Information Provided by You. The personal information that we collect depends on the context of your interactions with us and the Services, the choices you make, and the products and features you use. The personal information we collect may include:

• names
• phone numbers
• email addresses
• mailing addresses
• job titles
• usernames
• passwords
• contact preferences
• contact or authentication data
• billing addresses

Sensitive Information. We do not process sensitive information.

Payment Data. We may collect data necessary to process your payment if you choose to make purchases, such as your payment instrument number, and the security code associated with your payment instrument. All payment data is handled and stored by Paddle. You may find their privacy notice here: https://www.paddle.com/legal/privacy.

All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes to such personal information.

Information automatically collected

In Short: Some information, such as your Internet Protocol (IP) address and/or browser and device characteristics, is collected automatically when you visit our Services.

We automatically collect certain information when you visit, use, or navigate the Services. This information does not reveal your specific identity but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our Services, and other technical information.

The information we collect includes:

• Log and Usage Data. Service-related, diagnostic, usage, and performance information our servers automatically collect, including IP address, device information, browser type, settings, activity within the Services, and error reports.
• Device Data. Information about your computer, phone, tablet, or other device, IP address, device and application identification numbers, location, browser type, hardware model, ISP and/or mobile carrier, operating system, and system configuration.
• Location Data. Information about your device's location, which can be either precise or imprecise. You can opt out by refusing access or disabling Location on your device, though some Services may not function fully.

Google API Data Collection

When you choose to connect your Google Account to our Services, we access and process specific data via Google OAuth API scopes to enable core automation functionality:

Google Sheets Data (drive.file): When you connect Google Sheets, you select a spreadsheet through Google Picker. We read lead details, such as names, phone numbers, and email addresses, from your selected spreadsheet to provide automated lead qualification calls. Callion uses this access to read spreadsheet data and does not modify your spreadsheets.

Google Calendar Data (calendar.events): We read your calendar events strictly to detect scheduling conflicts. During live qualification calls, we create, update, or delete appointment events on your behalf when a lead schedules, reschedules, or cancels a booking.

Data Retention & Deletion: Google Sheets and Google Calendar data accessed via the Google APIs is retained only as long as your Callion account is active and connected. Upon disconnecting your Google account, deleting your Callion account, or revoking access, all OAuth tokens and cached Google user data are permanently deleted from our systems within 30 days. We do not retain backups of Google user data beyond this window.

Revoking Google Access: You can revoke Callion's access to your Google account at any time by visiting https://myaccount.google.com/permissions and removing Callion from the list of connected apps. You may also disconnect Google from inside the Callion dashboard. Revoking access immediately stops all future data access and triggers deletion of cached Google user data within 30 days.

Google API Disclosure & Limited Use Compliance

Our use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Callion's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is used solely to provide user-facing features, is never sold, is not used for advertising, and is not used to train generalized AI models. It may be transmitted to the following subprocessors under no-training enterprise terms: OpenAI, Google (Gemini), Vapi, Deepgram, ElevenLabs, Cartesia.

Specific Use: We only use access to Google User Data to provide or improve user-facing features that are prominent in the Callion AI user interface.

No Transfers: We do not transfer Google User Data to third parties unless necessary to provide or improve these features, comply with applicable law, or as part of a merger, acquisition, or sale of assets.

Sharing of Google User Data: We do not share, sell, rent, trade, or disclose Google User Data to any third party for advertising, marketing, data brokerage, credit assessment, lending, retargeting, personalization, or any purpose unrelated to delivering the user-facing features of Callion AI. The only third-party processors that may touch Google User Data are infrastructure sub-processors strictly necessary to operate the Service (such as cloud hosting and our AI voice provider), each bound by a written data processing agreement.

No Sale of Google User Data: Callion AI does not and will not sell Google User Data under any definition (including the CCPA/CPRA definition of "sale" or "sharing").

No AI / ML Model Training: Google User Data is never used to develop, improve, or train generalized or non-personalized AI or machine-learning models. Our AI voice agent processes Google User Data only at runtime to perform the specific user-requested action (calling a lead, booking an appointment) and is never used to train foundation models.

No Advertising: We will never use Google User Data to serve you advertisements.

No Human Readership: We do not allow humans to read your Google User Data unless we have obtained your affirmative agreement for specific messages, it is necessary for security purposes (such as investigating abuse), it is required to comply with applicable laws, or our use is limited to internal operations and the data has been aggregated and anonymized.

Security: All Google OAuth tokens and Google User Data are encrypted in transit (TLS 1.2+) and at rest (AES-256), stored in access-controlled infrastructure, and protected by least-privilege access controls, audit logging, and credential rotation. OAuth refresh tokens are stored encrypted and isolated from application code paths that do not require them.

In Short: We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We may also process your information for other purposes with your consent.

We process your personal information for a variety of reasons, including to:

• Facilitate account creation and authentication and manage user accounts.
• Deliver and facilitate delivery of services to the user.
• Respond to user inquiries and offer support.
• Send administrative information, including changes to our terms and policies.
• Fulfill and manage your orders, payments, returns, and exchanges.
• Request feedback and contact you about your use of our Services.
• Send you marketing and promotional communications in line with your preferences.
• Post testimonials that may contain personal information.
• Protect our Services, including fraud monitoring and prevention.
• Administer prize draws and competitions.
• Evaluate and improve our Services, products, marketing, and your experience.
• Identify usage trends and determine the effectiveness of our marketing.
• Comply with our legal obligations.

In Short: We may share information in specific situations described in this section and/or with specific third parties.

We may need to share your personal information in the following situations:

• Business Transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.

In Short: We may use cookies and other tracking technologies to collect and store your information.

We may use cookies and similar tracking technologies (like web beacons and pixels) to gather information when you interact with our Services. Some online tracking technologies help us maintain the security of our Services and your account, prevent crashes, fix bugs, save your preferences, and assist with basic site functions.

We also permit third parties and service providers to use online tracking technologies on our Services for analytics and advertising. To the extent these are deemed a "sale" or "sharing" under applicable US state laws, you can opt out as described in the US Residents section.

Google Analytics

We use Google Analytics (provided by Google, Inc.) to track and analyze how visitors use our Services. Google Analytics uses cookies and similar technologies to collect information such as your IP address, browser type, device information, pages visited, time spent on pages, and referring URLs. This data helps us understand traffic patterns and improve our Services.

The cookies set by Google Analytics may include _ga (used to distinguish users), _gid (used to distinguish users for 24 hours), and _gat (used to throttle request rates). These cookies are first-party cookies stored under our domain.

The information generated by these cookies about your use of our Services is transmitted to and stored by Google on servers in the United States. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf.

You can prevent Google Analytics from collecting your data by installing the Google Analytics Opt-out Browser Add-on available at https://tools.google.com/dlpage/gaoptout. You can also refuse the use of cookies by selecting the appropriate settings on your browser. For more information on Google's privacy practices, see the Google Privacy & Terms page.

Google API Services Data

Our platform integrates with Google Services to power core real estate agent workflows. Callion's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Google Sheets Integration: Users can connect their Google account to import lead spreadsheets into Callion. Our application reads this data so our AI agents can parse the necessary context to call and score leads.

Google Calendar Integration: Callion allows users to book, reschedule, or cancel appointments natively within the application interface. These events are automatically synchronized, updated, or removed on the user's connected Google Calendar.

In Short: We offer products, features, or tools powered by artificial intelligence, machine learning, or similar technologies.

As part of our Services, we offer products, features, or tools powered by AI, machine learning, or similar technologies (collectively, "AI Products"). The terms in this Privacy Notice govern your use of the AI Products within our Services.

Use of AI Technologies

We provide the AI Products through third-party service providers ("AI Service Providers"), including Vapi and OpenAI. Your input, output, and personal information will be shared with and processed by these AI Service Providers to enable your use of our AI Products. You must not use the AI Products in any way that violates the terms or policies of any AI Service Provider.

Our AI Products

• AI automation
• AI bots
• AI predictive analytics

How We Process Your Data Using AI

All personal information processed using our AI Products is handled in line with this Privacy Notice and our agreements with third parties.

In Short: We keep your information for as long as necessary to fulfill the purposes outlined in this Privacy Notice unless otherwise required by law.

We will only keep your personal information for as long as it is necessary for the purposes set out in this Privacy Notice, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements).

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize it, or, if not possible, securely store it and isolate it from any further processing until deletion is possible.

In Short: We aim to protect your personal information through a system of organizational and technical security measures.

We have implemented appropriate and reasonable technical and organizational security measures designed to protect the security of any personal information we process. However, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure. Transmission of personal information to and from our Services is at your own risk.

In Short: We do not knowingly collect data from or market to children under 18 years of age.

We do not knowingly collect, solicit data from, or market to children under 18 years of age. By using the Services, you represent that you are at least 18. If we learn that personal information from users less than 18 years of age has been collected, we will deactivate the account and take reasonable measures to promptly delete such data. If you become aware of any data we may have collected from children under 18, please contact us at support@callion.ai.

In Short: You may review, change, or terminate your account at any time, depending on your country, province, or state of residence.

Withdrawing your consent: If we are relying on your consent to process your personal information, you have the right to withdraw your consent at any time by contacting us.

SMS/Text Messaging Communications

Opt-In: By providing your phone number on our website forms, during account registration, or via our lead intake integrations, you provide your express written consent to receive SMS text messages and voice calls from Callion AI. These communications may include, but are not limited to, real estate lead inquiries, appointment scheduling, account updates, and customer support. Message frequency varies. Message and data rates may apply.

Opt-Out: You can opt out of receiving SMS messages at any time. To stop receiving text messages, reply STOP, QUIT, CANCEL, OPT-OUT, or UNSUBSCRIBE to any message you receive from us. You will receive a final confirmation message that you have been unsubscribed.

Help: For assistance or support regarding our text messaging services, reply HELP to any message you receive from us or contact our support team directly at support@callion.ai.

Data Sharing: We value your privacy. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All other categories of information sharing exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties under any circumstances.

Account Information

If you would at any time like to review or change the information in your account or terminate your account, you can log in to your account settings and update your user account. Upon termination, we will deactivate or delete your account, though we may retain some information to prevent fraud, troubleshoot problems, assist with investigations, enforce our legal terms, and comply with applicable legal requirements.

Most web browsers include a Do-Not-Track ("DNT") feature you can activate. No uniform technology standard for recognizing and implementing DNT signals has been finalized, so we do not currently respond to DNT browser signals. If a standard is adopted that we must follow, we will inform you in a revised version of this Privacy Notice.

In Short: If you are a resident of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, or Virginia, you may have specific rights regarding your personal information.

Categories of Personal Information We Collect

Categories A–J and L (Identifiers; California Customer Records data; protected classifications; commercial information; biometric information; internet activity; geolocation data; audio/sensory information; professional or employment-related information; education information; sensitive personal information) are not collected. Category K (Inferences drawn from collected personal information) is collected and retained for as long as the user has an account with us.

We may also collect other personal information outside of these categories through customer support, surveys or contests, and in the delivery of our Services and in responding to your inquiries.

How We Use and Share Personal Information

Your personal information may be used in profiling and automated processes that could produce legal or similarly significant effects for you. We may disclose your personal information with our service providers pursuant to a written contract.

We have not disclosed, sold, or shared any personal information to third parties for a business or commercial purpose in the preceding twelve (12) months. We will not sell or share personal information in the future belonging to website visitors, users, and other consumers.

Your Rights

• Right to know whether or not we are processing your personal data
• Right to access your personal data
• Right to correct inaccuracies in your personal data
• Right to request the deletion of your personal data
• Right to obtain a copy of the personal data you previously shared with us
• Right to non-discrimination for exercising your rights
• Right to opt out of the processing of your personal data for targeted advertising, sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects

Depending upon the state where you live, you may also have additional rights, including the right to access categories of personal data being processed, obtain a list of categories or specific third parties to which we have disclosed or sold personal data, review and question how data has been profiled, limit use of sensitive personal data, and opt out of collection of sensitive data and data collected through voice or facial recognition.

How to Exercise Your Rights

To exercise these rights, you can contact us by submitting a data subject access request, contacting support, or by referring to the contact details at the bottom of this document. You may designate an authorized agent to make a request on your behalf, with valid written and signed permission.

Request Verification

Upon receiving your request, we will verify your identity to determine you are the same person about whom we have the information in our system. We will only use personal information provided in your request to verify your identity or authority. If we cannot verify your identity from the information already maintained, we may request additional information for verification and security purposes.

Appeals

If we decline to take action regarding your request, you may appeal our decision by emailing us at support@callion.ai. We will inform you in writing of any action taken or not taken, including a written explanation. If your appeal is denied, you may submit a complaint to your state attorney general.

California "Shine The Light" Law

California Civil Code Section 1798.83 permits California residents to request, once a year and free of charge, information about categories of personal information (if any) we disclosed to third parties for direct marketing purposes and the names and addresses of all third parties with which we shared personal information in the immediately preceding calendar year. To make such a request, please use the contact details below.

In Short: Yes, we will update this notice as necessary to stay compliant with relevant laws.

We may update this Privacy Notice from time to time. The updated version will be indicated by an updated "Revised" date at the top of this Privacy Notice. If we make material changes, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification.

If you have questions or comments about this notice, you may email us at support@callion.ai or contact us at:

You have the right to request access to the personal information we collect from you, details about how we have processed it, correct inaccuracies, or delete your personal information. You may also have the right to withdraw your consent to our processing of your personal information. These rights may be limited in some circumstances by applicable law. To request to review, update, or delete your personal information, please contact us at support@callion.ai.