Privacy policy
Last updated: 27 October 2026
CalledBack ("we") is run by an individual based in Turkey. Contact: support@calledback.app.
What we collect
- Your email address, from the checkout. It is your login and the inbox we forward to.
- Your handle and, once you connect it, your Telegram chat id.
- Payment status from Creem, our payment provider and merchant of record: plan, paid-until date, Creem customer and subscription ids. We never see or store card details.
- For each email sent to your address: the date, the sender's domain (not the full address), the +tag, a redacted subject, the category we assigned, our confidence, what we did (forwarded, notified), and the short redacted note. Nothing else.
- Monthly counters of emails handled and notes sent, to apply plan limits.
What we never store
The raw email, its full text, attachments or the full sender address. Each email is processed in memory and then discarded once it has been forwarded.
How email is processed
- The email arrives at Cloudflare Email Routing and is passed to our Worker.
- Personal data (phone numbers, email addresses, links, codes, account and card numbers, street addresses, secrets) is replaced with placeholders such as
[PHONE]. - The redacted text is sent to TypeSafe (Jev) to pick a category, and to Cloudflare Workers AI to write a one- or two-line note. Neither receives unredacted text.
- The original email is forwarded to your inbox. For interview emails, a phone number found in the email may be shown in your Telegram note; it is taken from memory, not storage.
Processors
- Cloudflare (hosting, database, email routing and sending, AI)
- TypeSafe (email classification, redacted text only)
- Telegram (delivering notes to you)
- Creem (payments, merchant of record)
Retention
Message metadata is kept for 90 days, then deleted. After a plan ends we keep your account for 30 days so mail can still be forwarded, then delete the message data. You can delete your account at any time from Settings: this removes your user record, message data, sessions and the forwarding destination immediately. Creem keeps its own payment records as required by law.
Your rights
You can ask for a copy of your data, its correction or deletion at support@calledback.app. We answer within 30 days.
Cookies
One strictly necessary cookie, __Host-session, keeps you signed in. No analytics or advertising cookies.