Privacy Policy

This Privacy Policy explains how M.S. Project Zeus CY Limited, a company registered in the Republic of Cyprus and trading as Call Crew ("Call Crew", "we", "us" or "our"), collects, uses, shares and protects personal data. It applies to callcrewhq.com (the "Site") and to the Call Crew service (the "Service").

1. Who we are and how to reach us

The data controller responsible for your personal data is M.S. Project Zeus CY Limited, registered in the Republic of Cyprus, company number HE 430641.

• Email: hello@callcrewhq.com
• Registered office: Margarita Court 5, Tafoi ton Vasileon 118, 8015 Paphos, Cyprus

2. When we are a controller and when we are a processor

This distinction matters because it changes who you contact about your data.

• As a controller. When you visit the Site, contact us, book a demo or deal with us as a customer or prospect, we decide how and why your data is used. This policy governs that activity.
• As a processor. When the Service answers calls, texts and messages on behalf of a business customer, that customer is the controller of their callers' data and we process it on their instructions under our agreement with them. If you are a caller or customer of a business that uses Call Crew, please direct privacy requests to that business; we will assist them as required.

3. Information we collect

Information you give us

• Contact and enquiry details — your name, email address, phone number, business or trade, and the contents of any message you send through our contact form, demo request or by email.
• Customer and billing details — if you become a customer, the information needed to set up, support and bill for the Service.

Information we collect automatically

• Technical and usage data — IP address, device and browser type, pages viewed, referring page and timestamps, gathered through server logs and, with your consent, cookies. See our Cookie Policy.

Information we process for customers (as a processor)

• Call and message data — when operating the Service for a business customer we process caller phone numbers, the audio of calls, call recordings and transcripts, and message content, strictly to deliver the Service to that customer.

4. How we use personal data and our legal bases

Where the EU or UK GDPR applies, we rely on the legal bases noted below.

• To respond to you and provide what you ask for — to answer enquiries, run demos and provide the Service. Basis: performance of a contract, or our legitimate interest in responding to you.
• To run, secure and improve the Site and Service — basis: our legitimate interests in operating a safe, reliable business, balanced against your rights.
• For analytics and any non-essential cookies — basis: your consent, which you can withdraw at any time.
• To send service or, where permitted, marketing messages — basis: consent or legitimate interest, and you can opt out at any time.
• To comply with law and enforce our terms — basis: legal obligation and legitimate interests.

5. Automated and AI processing

The Service uses artificial intelligence to understand callers and generate spoken and written responses. This handling of calls is automated by design. It does not make legal or similarly significant decisions about you. Calls can be escalated to a human, and a human reviews the system's performance. AI can make mistakes, so important matters are confirmed with you or your provider.

6. Call recording

The Service may record and transcribe calls on behalf of business customers. Recording laws vary by country and, in the United States, by state — some require the consent of all parties. Where we act as a processor, the business customer is responsible for providing any required notice and obtaining consent. Where we record our own calls with you, we will tell you at the start of the call.

7. How we share data

We do not sell your personal data. We share it only as follows:

• Service providers (sub-processors) who process data on our instructions under contract, in these categories:

Category	Purpose
Cloud hosting and content delivery	Serving this website and running its backend functions.
Email delivery	Sending and receiving the messages you submit to us.
Telephony and voice infrastructure	Carrying, recording and transcribing calls for the service.
AI and language-model providers	Understanding callers and generating the responses the front desk speaks.
Analytics	Measuring website traffic in aggregate, only where you have consented.

• Business customers, when we process their callers' data on their behalf.
• Legal, safety and corporate reasons — to comply with law, enforce our terms, protect rights and safety, or in connection with a merger, acquisition or sale of assets.

8. International data transfers

We are based in the Republic of Cyprus and use service providers that may be located outside your country, including in the United States. Where we transfer personal data out of the European Economic Area or the United Kingdom, we rely on a lawful transfer mechanism such as the European Commission's Standard Contractual Clauses (and the UK Addendum) or an adequacy decision. You can request more detail using the contact above.

9. How long we keep data

We keep personal data only as long as needed for the purposes above, to meet legal, tax and accounting obligations, and to resolve disputes. Enquiry data is kept while we are in contact and for a reasonable period afterwards. Data processed for customers is kept according to our agreement with that customer and deleted or returned when it ends.

10. How we protect data

We use technical and organisational measures appropriate to the risk, including encryption in transit, access controls and trusted infrastructure providers. No method of transmission or storage is completely secure, but we work to protect your data and to notify you and regulators of a breach where the law requires it.

11. Your privacy rights

Depending on where you live, you have some or all of the rights below. To exercise any of them, email hello@callcrewhq.com. We will verify your request and respond within the time the law allows. You will not be treated less favourably for exercising your rights.

European Economic Area and United Kingdom (GDPR / UK GDPR)

You have the right to access, rectify, erase, restrict and port your data, to object to processing based on legitimate interests or to direct marketing, and to withdraw consent at any time without affecting prior processing. You may lodge a complaint with your supervisory authority — in Cyprus, the Office of the Commissioner for Personal Data Protection; in the UK, the Information Commissioner's Office (ICO); or the authority in your country.

United States — California and other states

If you are a California resident, you have the right to know what personal information we collect and how we use and disclose it, to access and delete it, to correct it, and to opt out of any "sale" or "sharing" of it and to limit use of sensitive personal information. We do not sell or share personal information as those terms are defined under the California Consumer Privacy Act. Residents of other US states with privacy laws have comparable rights and may exercise them using the contact above.

Canada (PIPEDA)

You may request access to and correction of your personal information and withdraw consent, subject to legal and contractual limits. You may complain to the Office of the Privacy Commissioner of Canada.

Australia (Privacy Act 1988 / Australian Privacy Principles)

You may request access to and correction of your personal information and complain about how we handle it. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC).

New Zealand (Privacy Act 2020)

You may request access to and correction of your personal information. If you are not satisfied with our response, you may contact the Office of the New Zealand Privacy Commissioner.

12. Children

The Site and Service are intended for businesses and adults. We do not knowingly collect personal data from children. If you believe a child has given us data, contact us and we will delete it.

13. Third-party links

The Site may link to third-party sites we do not control. This policy does not apply to them; please read their own privacy notices.

14. Changes to this policy

We may update this policy from time to time. We will post the new version here and update the date above. Significant changes will be highlighted where appropriate.

15. Contact us

For any privacy question or to exercise your rights, email hello@callcrewhq.com and we will help.