Legal center

Legal, privacy, and compliance

The agreements that govern Callfora, how we protect personal data, and how we approach telecom, messaging, recording, and AI regulation in the places our customers operate.

Operated by: Vedatra Scalable Stacks Private Limited
Registered in: Bengaluru, Karnataka, India
Data hosted in: India (Oracle Cloud Infrastructure)
Governing law: India; courts at the registered office

Version 2026.10 · Last updated 3 October 2026 · Draft pending counsel review

Agreements

The contract between you and us, and the rules for using the service.

Terms of serviceThe agreement that governs your workspace, numbers, and use of the service.Read →Acceptable use policyWhat you may and may not do with calling, messaging, recording, and AI.Read →AI agents termsHow AI voice and chat agents work, what you must disclose, and where humans stay in charge.Read →Billing, cancellation, and refundsPricing, taxes, renewals, AI minute overage, and how to cancel.Read →

Privacy and data

How personal data is collected, protected, shared, kept, and returned.

Privacy policyWhat we collect on the website and in the service, why, and your rights.Read →Data processing addendumProcessor terms, transfer mechanisms, security measures, and audit rights.Read →SubprocessorsWho processes data for us, for what purpose, and where.Read →Data retention and deletionHow long each kind of data is kept and how to delete or export it.Read →Privacy requests and grievancesHow to exercise your rights and reach our Grievance Officer.Read →Government and law-enforcement requestsHow we respond to legal process for customer data.Read →Cookie noticeCookies on the website and in the service.Read →

Communications compliance

Rules for recording, texting, calling, and emergency services.

Call recording and monitoringConsent, notice, and retention rules for recording calls and meetings.Read →Business messaging complianceConsent, registration, and opt-out rules for SMS and MMS worldwide.Read →Outbound calling and caller IDDo-not-call, autodialer, AI voice, and caller ID authentication rules.Read →Emergency calling noticeLimits of emergency calling over the internet, by country.Read →

Global compliance

How we approach the laws of each region, and what stays your responsibility.

Compliance overviewOur approach, the shared-responsibility model, and a region-by-region matrix.Read →

Security

How we protect the service and how to report a problem.

Trust and securitySecurity controls, data location, and how to reach our security team.Read →Vulnerability disclosureSafe-harbor rules for reporting security issues.Read →

Compliance by region

A plain-language guide to data protection, recording, messaging, calling, and AI rules in each region, and who is responsible for what.

IndiaIndia United StatesUnited States and its territories European Economic Area and SwitzerlandEU member states, Iceland, Liechtenstein, Norway, Switzerland United KingdomEngland, Scotland, Wales, Northern Ireland CanadaCanada Australia and New ZealandAustralia, New Zealand Asia-PacificSingapore, Japan, South Korea, Hong Kong, Malaysia, Indonesia, Philippines, Thailand Middle EastUnited Arab Emirates, Saudi Arabia, Qatar, Bahrain Latin AmericaBrazil, Mexico, Argentina, Colombia, Chile AfricaSouth Africa, Nigeria, Kenya, Egypt

Need a signed copy or a compliance review?

Ask for a countersigned DPA, a security questionnaire response, or help mapping the service to your regulatory requirements.