Claustaff Claustaff ← Back to Home
Legal

Privacy Policy

Last updated: May 29, 2026  ·  Effective date: May 29, 2026

Summary: Claustaff collects information you provide to us and data generated through your use of the platform. We use it to operate and improve our service. We do not sell your personal data. This policy covers all users in the US, Canada, UK, European Union, and Australia.
Table of Contents
  1. Who We Are
  2. Data We Collect
  3. How We Use Your Data
  4. Legal Basis for Processing (GDPR)
  5. Data Sharing & Third Parties
  6. Data Retention
  7. Your Rights
  8. Cookies & Tracking
  9. AI Calling & Call Recording
  10. International Data Transfers
  11. Children's Privacy
  12. Security
  13. Changes to This Policy
  14. Contact Us

1. Who We Are

Claustaff ("Claustaff", "we", "us", or "our") operates the website claustaff.com and provides an AI-powered voice agent and website assistant platform ("Service"). References to "you" or "user" mean any person who accesses our website or uses our Service.

For privacy enquiries, contact us at: info@claustaff.com

2. Data We Collect

2.1 Data You Provide Directly

  • Account & contact information: name, email address, phone number, business name when you sign up or book a demo
  • Payment information: billing name and payment method details — processed securely by PayPal; we do not store raw card numbers
  • Communications: messages you send us via email, forms, or support channels
  • Business information: details about your business, use case, and CRM/telephony setup provided during onboarding

2.2 Data Collected Automatically

  • Usage data: pages visited, features used, session duration, click events
  • Device & technical data: IP address, browser type, operating system, referring URL
  • Cookies and similar technologies: see Section 8

2.3 Data from Your Use of the AI Platform

  • Call data: call recordings, transcripts, duration, outcomes, and metadata generated by AI calling agents you deploy
  • Contact lists: prospect data you upload for outbound calling campaigns
  • CRM sync data: lead and contact data exchanged with your connected CRM (GoHighLevel, Salesforce, Zoho)
  • Voice data: voice samples you provide for voice cloning features
  • Website assistant interactions: conversations between your site visitors and your AI assistant widget

2.4 Data from Third Parties

  • Payment confirmation data from PayPal
  • Calendar availability data from Google Calendar or Cal.com when integrated
  • Analytics data from website analytics tools

3. How We Use Your Data

PurposeData Used
Providing and operating the ServiceAccount data, usage data, platform data
Processing paymentsBilling information via PayPal
Onboarding and customer supportContact info, business info, communications
AI agent configuration and trainingBusiness info, call data, voice data
Improving the platformUsage data, call data (anonymised where possible)
Sending product updates and offersEmail address (with consent or legitimate interest)
Legal complianceAny data required by applicable law
Fraud prevention and securityIP address, payment data, usage patterns

We do not sell, rent, or trade your personal data to third parties for their marketing purposes.

4. Legal Basis for Processing (GDPR / UK GDPR)

For users in the European Economic Area (EEA), United Kingdom, and other jurisdictions requiring a legal basis, we process your data under:

  • Contract performance: processing necessary to deliver the Service you have purchased or signed up for
  • Legitimate interests: improving our platform, preventing fraud, sending relevant product communications
  • Legal obligation: compliance with applicable laws
  • Consent: where we have obtained your explicit consent (e.g. marketing emails, voice cloning)

You may withdraw consent at any time by contacting info@claustaff.com.

5. Data Sharing & Third Parties

We share your data only with trusted third-party service providers necessary to operate the platform:

Third PartyPurposeLocation
PayPalPayment processingUS / Global
CalendlyDemo bookingUS
Twilio / TelnyxTelephony infrastructureUS / Global
GoHighLevel / Salesforce / ZohoCRM integration (user-selected)US / Global
OpenAI / Google / AnthropicAI model inferenceUS
Zapier / Make / n8nWorkflow automation (user-selected)US / EU / Global
CloudflareSecurity and CDNUS / Global
HostingerWeb hostingEU / US

We may also disclose your data: (a) if required by law or valid legal process; (b) to protect the rights, property, or safety of Claustaff, our users, or the public; (c) in connection with a merger, acquisition, or sale of assets, with notice to you.

6. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. Specifically:

  • Account data: retained for the duration of your subscription plus 90 days after cancellation
  • Call recordings and transcripts: retained for 12 months by default unless you request earlier deletion
  • Payment records: retained for 7 years for tax and compliance purposes
  • Voice cloning samples: deleted upon your request or account closure
  • Website visitor interactions: retained for 6 months

You may request deletion of your data at any time by emailing info@claustaff.com.

7. Your Rights

Depending on your location, you have the following rights regarding your personal data:

RightApplies In
Access — request a copy of your dataEU, UK, Canada, Australia, California (CCPA)
Rectification — correct inaccurate dataEU, UK, Canada, Australia
Erasure — request deletion of your dataEU, UK, Canada, Australia, California
Restriction — limit how we use your dataEU, UK
Portability — receive your data in a portable formatEU, UK
Object — object to processing based on legitimate interestsEU, UK
Opt-out of sale — we do not sell data, but you may request confirmationCalifornia (CCPA), US States
Withdraw consent — at any time where processing is consent-basedAll jurisdictions

To exercise any right, email info@claustaff.com with the subject line "Privacy Rights Request". We will respond within 30 days (or sooner where required by law).

If you are in the EU/UK and believe we have not adequately addressed your concern, you have the right to lodge a complaint with your local supervisory authority.

8. Cookies & Tracking

We use cookies and similar tracking technologies on our website for the following purposes:

  • Essential cookies: required for the website to function (session management, security)
  • Analytics cookies: help us understand how visitors use our site (e.g. Cloudflare Analytics)
  • Third-party cookies: PayPal and Calendly may set their own cookies when you interact with their embedded components

You can control cookies through your browser settings. Note that disabling certain cookies may affect website functionality. For EU/UK users, we obtain consent for non-essential cookies in accordance with applicable law.

9. AI Calling & Call Recording

Claustaff is an AI voice agent platform. When you use our calling features:

  • Calls made by your AI agents may be recorded and transcribed for quality assurance and platform improvement
  • You are responsible for ensuring that all parties to calls receive any legally required notice or consent regarding AI-generated calls and call recording, in compliance with applicable laws including the TCPA (US), PIPEDA (Canada), UK ICO guidelines, GDPR (EU), and Australian Privacy Act
  • Voice cloning features require your explicit consent and are tied to your verified account
  • Claustaff provides tools to include compliant disclosures at the start of calls — it is your responsibility to use them

See our TCPA Compliance Policy for detailed requirements for US-based calling.

10. International Data Transfers

Claustaff operates globally. Your data may be transferred to and processed in countries outside your own, including the United States. Where required by law (e.g. EU GDPR), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission, or equivalent mechanisms.

For UK users: we comply with the UK GDPR and the UK International Data Transfer Agreement (IDTA) where applicable.

For Australian users: transfers are conducted in accordance with Australian Privacy Principle 8.

11. Children's Privacy

Claustaff is a business-to-business platform intended for users aged 18 and over. We do not knowingly collect personal data from children under 13 (or under 16 in the EU/UK). If you believe a child has provided us with personal data, please contact info@claustaff.com and we will promptly delete it.

12. Security

We implement industry-standard security measures to protect your data, including SSL/TLS encryption for data in transit, access controls, and regular security reviews. However, no method of transmission over the internet is 100% secure. In the event of a data breach that affects your rights and freedoms, we will notify affected users and relevant authorities as required by applicable law.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page and, where changes are material, notify you by email or by a prominent notice on our website. Your continued use of the Service after any changes constitutes acceptance of the updated policy.

14. Contact Us

For any privacy-related questions, requests, or complaints:

Claustaff
Email: info@claustaff.com
Website: claustaff.com
Response time: within 30 days

EU/UK users may also contact your local data protection authority if you are unsatisfied with our response.

© 2026 Claustaff. All rights reserved.

Privacy Policy Terms of Service TCPA Compliance