Privacy.
What we keep. What we don’t.

Who is responsible

The controller for personal data processed through Call State is:

Denis Sowa
Kleine Düwelstr. 6
30171 Hannover
Germany
Email: info@callstate.app

See also the Imprint.

What we store about your account

When you create a Call State account, we store the data needed to run the service:

• Email address — your login identity and the address for service messages (registration, password reset, email change).
• Password hash — a one-way hash of your password. We do not store your password in plain text.
• Account timestamps — for example when the account was created and when you last signed in interactively.
• Plan and entitlement data — free or paid status, trial windows and related billing state needed to enforce the product rules.
• Technical account identifiers — such as your internal account id, your customer number (CS-XXXX-XXXX-XXXX) and, when you subscribe, identifiers that link your account to the payment provider.

We process this data to provide the account, authenticate you, apply free and paid features, send required service emails and keep the service secure.

Live meeting status

Call State reads meeting controls and status from the devices you connect (for example the desktop app). It does not join your calls, record audio or produce transcripts.

Live meeting status is relayed between clients signed in to your account so your lights, decks and scripts can react. We do not keep a server-side history of your live status for later analysis or profiling.

Payments (Stripe)

If you choose a paid plan, payment is handled by Stripe. Card and payment details are collected and processed by Stripe. Call State does not store your full card number on its own servers.

We receive from Stripe only what we need to run your subscription — for example payment status, customer or subscription identifiers and refund or cancellation events — so we can update your plan.

Stripe processes payment data under its own terms and privacy policy as an independent payment provider. You can review Stripe’s information at stripe.com/privacy.

Public cancel and withdrawal forms

You can cancel a paid subscription or declare your statutory withdrawal without signing in. Those forms ask only for your account email and your customer number. We use them only to match the account, carry out the cancel or the withdrawal and send you the confirmation email.

We also process the requesting IP address for a short time to rate-limit those public forms against abuse (Article 6 (1)(f) GDPR). No password or card data is collected there, and the forms do not build a separate profile of you.

We do not sell or pass on your data

We do not sell personal data. We do not share your account data with third parties for their own marketing.

We only involve processors or providers when they are needed to operate Call State — for example hosting, email delivery or Stripe for payments — and only for that purpose.

Product and website statistics

We create aggregate statistics to understand usage and improve Call State (for example totals and trends).

Those statistics are built so that we cannot track or assign them back to an individual user. They are not a personal profile of your activity.

The public website and the account area use self-hosted analytics (Umami) on infrastructure we operate. It is cookie-free — we set no tracking cookies and we do not track you across other websites. Your IP address is used only to estimate a rough region and is truncated and anonymised before it is stored. We keep only aggregate counts such as page views, device type and country.

Where data is processed

Call State is self-hosted. Account and service data are processed on infrastructure we operate (currently in the European Union). Payment processing by Stripe may involve transfers outside the EU under Stripe’s own safeguards and contracts.

How long we keep data

• Active accounts — we keep account data for as long as the account exists and is needed to provide the service.
• 30 days without use — an account that is not used for 30 days is closed. We announce that by email five days before it happens. Closing means the account stops working immediately and the stored password is removed.
• Deletion by you — you can delete your account yourself in the account area, at any time, by confirming your email address. The same step happens: access ends immediately and the stored password is removed. What stays: the account row with its email address, customer number, paid orders and invoices (statutory bookkeeping) and the security audit trail of account events. What goes: the ability to sign in and the password. Your email address becomes free again for a new registration. Deleting an account is final — it cannot be undone or restored.
• Service emails — we log that a transactional email was sent (type, recipient, time, delivery result). The message content itself, including the short-lived link it carried, is deleted after 14 days; only the delivery record stays.
• Live status — not stored as a lasting status history on our servers.

Legal bases (GDPR)

Depending on the processing, we rely on:

• Article 6 (1)(b) GDPR — performance of the contract (account, authentication, delivering the product features you use).
• Article 6 (1)(c) GDPR — legal obligations where they apply (for example tax or commercial record-keeping for paid orders).
• Article 6 (1)(f) GDPR — legitimate interests for securing the service and producing non-attributable aggregate product and website statistics, balanced against your rights.

Your rights

Under the GDPR you may have the right to access, rectification, erasure, restriction of processing, data portability and objection, where the legal conditions are met. You may also lodge a complaint with a supervisory authority. In Germany that is typically your state data protection authority; for Lower Saxony, the LfD Niedersachsen.

Portability. We hand over what we hold about your account in a common, machine-readable format (JSON): your email address, customer number, account and licence dates, and your paid orders. Ask for it by email and we will send it to the address on the account.

Access and correction. Your profile page shows your email address, customer number and plan, and lets you change the password and the email address yourself.

Erasure. Deleting your account yourself (see How long we keep data) removes the login and the password. What remains is the minimum we must or may keep: the account row with the email address, the paid orders and invoices for the statutory bookkeeping period, and the account-event audit trail. If you also want those removed, write to us — we then check what still has to stay under Article 17 (3) GDPR.

To exercise your rights, contact info@callstate.app.

Website and local software

The public marketing site is a static site and uses self-hosted, cookie-free analytics for aggregate visitor statistics (see Statistics). It does not require an account. The desktop app and account area process data as described above once you sign in.

The desktop app may need local system permissions (for example accessibility on macOS) to read Teams meeting controls on your computer. That sensing stays on your device; it is not a recording of the call content.

Changes

We may update this notice when the product or the law changes. The current version is always published at this URL.

Last updated: 22 September 2026.