Privacy Policy

Scope and controller

This policy covers the Calltropic marketing website and the personal data handled when you browse it or send us an enquiry. It does not govern a Calltropic application, customer account or telephony service; those products have their own contractual and data-processing terms.

"Calltropic" Ltd., UIC 208917857, operates this website and is the controller of the data described here under Regulation (EU) 2016/679 (GDPR). Its full registered identity and contact details are published on our company details page. Use those details for privacy questions or rights requests. We have not appointed a data protection officer.

Data we handle

Enquiries. The contact form requires your name, company and email address. You may also provide your city or service area, active vehicles, monthly call volume, existing dispatch system and a message. Your selected product is included. If you enquire from the pricing calculator, its inputs may accompany the enquiry as context, not a binding quotation. We use this information to understand your taxi operation, reply and arrange a demonstration.

Security and delivery data. Our hosting infrastructure processes standard request information such as IP address, browser details, requested page and time of access. The form also uses a hidden anti-spam field and a short-lived submission limit. Where configured, Cloudflare Turnstile processes browser and interaction signals to decide whether a contact-form or demo-session request is likely to be automated.

Consent and language choices. The browser stores your cookie-consent decision, its identifier and update time. If you deliberately switch language, it also remembers that choice. The consent record is shared across calltropic.com and its subdomains; it does not contain your enquiry.

Live AI Demo. The optional Live AI Demo starts only when you explicitly start the voice demo. A specialist voice-technology provider acts as our processor and processes microphone audio, transcripts, technical and session identifiers, and connection metadata to deliver the interactive demonstration, prevent abuse and maintain service reliability. Do not share sensitive or confidential information in the demo.

Optional analytics. Vercel Web Analytics and Vercel Speed Insights do not load before you enable Analytics. Once enabled, they collect limited page-view, device and performance data for aggregated website and reliability measurements. Vercel states that Web Analytics does not use cookies and does not retain a cross-site or multi-day visitor identifier. We do not currently use advertising or remarketing tools on this website.

Purposes and legal bases

We process this data on the basis of our legitimate interest under Article 6(1)(f) GDPR, namely responding to business enquiries and pursuing a possible commercial relationship. You may object to this processing under Article 21 GDPR.

Website delivery, security logs, rate limiting and anti-abuse checks rely on our legitimate interest in keeping the site secure and available. The consent record is necessary to remember and demonstrate your choice, including a refusal.

Optional analytics and marketing processing is based on your consent under Article 6(1)(a) GDPR. Optional preference processing uses the same basis where it involves personal data. No optional script loads before the relevant opt-in, and you can withdraw consent at any time.

The Live AI Demo begins only on your explicit activation and is a requested functionality. We rely on our legitimate interests under Article 6(1)(f) GDPR in explaining and demonstrating our services, responding to visitor requests and protecting the demo from abuse. It does not require analytics or marketing cookie consent, and no demo connection starts before activation.

There is no legal or contractual duty to submit an enquiry. Name, company and email are required to submit the website form so we can identify and respond to the business enquiry. The other fields are optional.

Recipients and international transfers

We do not sell personal data or share it for advertising. Access is limited to Calltropic staff handling the website and enquiries, and the suppliers needed to run those functions:

• Vercel Inc. — hosting, content delivery and, only with Analytics consent, website analytics and performance measurements.
• Resend / Plus Five Five, Inc. — sending the contact-form email to our business inbox.
• Cloudflare, Inc. — the Turnstile anti-abuse check, only where it is configured.
• Our voice-technology provider — processes Live AI Demo sessions on our behalf. This processing may involve international transfers.
• Our business email provider — receiving and storing the enquiry after delivery.

We may also disclose information when required by law or to establish, exercise or defend legal claims.

Some suppliers process data in the United States. Transfers outside the EEA are made on the basis of the European Commission's adequacy decision for the EU–U.S. Data Privacy Framework, where the recipient is certified under it, and/or on the basis of the European Commission's Standard Contractual Clauses. You may request information about the applicable safeguard from us.

Retention

We keep enquiry data for 12 months after our last contact with you, unless a commercial relationship begins, in which case it is kept for the duration of that relationship and any statutory retention period.

Security and server logs are kept according to the limited operational retention periods of our infrastructure providers. The consent record is retained for up to one year from the latest decision. Its local history is capped at 20 valid decisions and uses the same one-year validity limit. Analytics data is retained according to Vercel's service settings and is used in aggregated form.

Voice-audio saving is disabled. The voice-demo service is configured for scheduled deletion of conversation data with zero-day retention where supported. This does not rule out transient processing needed to deliver the demo and does not promise instantaneous deletion. Simulated booking details are held in the page's memory and reset between sessions. The illustrative map does not access your location or any live fleet.

Your rights

Depending on the circumstances, you may request access, correction, erasure, restriction or portability of your personal data. You may object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it without affecting earlier lawful processing.

Use Cookie preferences in the footer to change or withdraw optional cookie consent. For any other request, use the contact details on the company details page. We may need to verify your identity and will respond within the period required by the GDPR.

You may also complain to the Bulgarian supervisory authority:

Комисия за защита на личните данни (КЗЛД), гр. София 1592, бул. „Проф. Цветан Лазаров" № 2, kzld@cpdp.bg, cpdp.bg

Automated decisions

We do not make decisions about you based solely on automated processing and do not profile you. Turnstile assesses whether a contact-form or demo-session request is automated; it does not produce a legal or similarly significant effect for you.

Changes

We may update this policy when the website or its suppliers change. The date above identifies the current version. Material changes to how the website handles personal data will be reflected here before the new processing begins.