Privacy Policy

• Stella processes your clients' data for one purpose: running your front desk. Nothing else.
• Everything is encrypted at rest with FIPS 140-3 validated cryptographic modules (VaultDB, the same store under Clavitor's credential vaults) and in transit with TLS, in SOC 2–audited data centres.
• We don't sell, share or rent data. To anyone. For any reason. We don't train AI models on it, and neither may our providers.
• This website: no analytics, no tracking pixels, no third-party scripts, no cookies.
• HIPAA: we're your business associate and sign a BAA. GDPR: our Data Processing Agreement applies to every paid account.
• You can export or delete your data at any time.

This policy applies to the callitor.ai website and to the Callitor service — Stella answering, booking and messaging for your business. Callitor is a product of Clavitor LLC, a Florida limited liability company.

Your business is the controller of your clients' data: you decide what Stella asks, keeps and says. Callitor is the processor — we handle that data only on your instructions, to provide the service. Where your practice is a covered entity under HIPAA we are your business associate, and a Business Associate Agreement is available on request. Our Data Processing Agreement — standard contractual clauses for GDPR and Swiss FADP compliance — applies to every paid account.

• Your clients: names, phone numbers, appointment details, messages exchanged with Stella, and the structured outcome of each call — who called, when, what was booked, moved or asked to be passed on.
• Calls: audio is processed by speech models to understand and reply. Whether recordings and full transcripts are kept, and for how long, is your setting; by default Stella keeps the structured outcome, not the recording.
• Your team and business: staff names, hours and locations, your services and prices, your policies, your on-call arrangement.
• Your account: the owner's email address and authentication; billing details are held by Paddle, our Merchant of Record, not by us.

• Analytics, telemetry or tracking on this website — none, and no third-party scripts.
• Cookies — none on callitor.ai.
• IP address logs beyond immediate request processing and abuse protection (access logs are kept with addresses masked).
• Anything from your clients that isn't needed to run your front desk. Stella never asks a first-time caller what it's regarding.

Reminders say a time and a place, never a reason. No client ever hears another client's business — a freed slot is offered without saying whose it was, and a moved appointment is moved without saying why. The staff panel shows first names and times, not records. If someone asks what your practice does, Stella says so plainly and stops.

We use infrastructure providers to run the service: hosting in SOC 2–audited data centres, telephony carriers to connect calls and deliver texts, speech and language model providers to understand and reply, and Paddle for billing. Each processes only what its function requires, under contract: our speech and language providers may not retain audio or text beyond processing and may not train on it. We do not use analytics services, advertising networks or data brokers. The current list of subprocessors is available on request.

Your book and your clients' details are kept for as long as you're a customer. Recordings and transcripts, if you keep them, are kept for the retention you set. After cancellation your book is read-only for 30 days, then permanently deleted; compliance backups are destroyed 30 days after that. You can ask for immediate deletion at any time.

If compelled by valid legal process, we provide what we hold — encrypted account and booking data — and, unless the law prohibits it, we tell you first. For customers outside the United States and Canada, Swiss jurisdiction (see the Terms) provides additional protection against foreign government requests.

By default your data is hosted in the United States. Other regions are available on request; when we host you elsewhere, your data stays there and isn't replicated across regions unless you ask.

Requests from your clients — to see, correct or erase what is held about them — come to you as the controller, and we help you answer them: every appointment, message and outcome tied to a person can be exported or erased on your instruction.

Cancel anytime; there is no contract. Stella keeps answering through the current billing month, then your book is read-only for 30 days and deleted after that. Refunds: after any charge you have 14 days to cancel for a full refund of that charge. Full details are in the Terms of Service.

We'll notify customers by email before making material changes. The current version is always available at this URL.

Questions about this policy, a BAA or a DPA? Email legal@callitor.ai.