Privacy Policy

Last updated: October 17, 2026

CallbackGenie ("we", "us") is based in British Columbia, Canada. This policy explains how we collect, use, disclose, store and protect personal information, in line with British Columbia's Personal Information Protection Act (PIPA) and, where it applies, Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).

1. Our privacy officer

Our privacy officer is responsible for how we handle personal information and for answering questions and complaints:

Daniel Kim, Privacy Officer
Email: callbackgenie@gmail.com

2. Information we collect

From our customers (account holders):

• Business name, email address and mobile phone number.
• Your password, which we store only in scrambled (hashed) form. We cannot see it.
• Subscription and billing details such as your plan, payment status and invoices. Card details are collected and stored by our payment processor, Stripe. We do not receive or store your full card number.
• Messages you send us, for example through our contact form or by email.

About people who call our customers ("callers"): when someone calls a CallbackGenie number, we process their phone number, the time of the call, the text messages exchanged, their chosen callback time and call records. We handle this information on behalf of our customer, the business they called, only to provide the service.

When you visit our website: basic technical information such as IP address, browser type and pages requested, which our hosting provider uses for security and to deliver the site.

3. How we use it

• To create and manage your account and let you sign in.
• To provide the service: sending callback texts, notifying you, and connecting calls.
• To process payments, send receipts and manage your subscription.
• To send service messages, such as password-reset emails, billing notices and important changes.
• To provide support, prevent fraud and abuse, and keep the service secure.
• To meet legal, tax and accounting obligations.

We do not sell personal information, and we do not use callers' information for our own marketing.

4. Consent

By creating an account and using the service, you consent to our collecting, using and disclosing your information for the purposes above. You may withdraw consent at any time, subject to legal or contractual restrictions, but we may then be unable to provide the service. Customers are responsible for any notice or consent their callers and customers require for the messages sent on their behalf.

5. Who we share it with

We share personal information only with service providers who help us run CallbackGenie, and only as needed for them to do so:

• Stripe: payment processing and billing.
• Twilio: phone numbers, calls and text messages.
• Cloudflare: website hosting and our account database.
• Resend: delivery of account emails such as password resets.
• FormSubmit: delivery of messages sent through our website contact form.

We require these providers to protect personal information and use it only for the services they provide to us. We may also disclose information where required or permitted by law, for example in response to a valid legal request.

6. Where information is stored

Some of our service providers store or process information outside Canada, including in the United States. While there, it may be subject to the laws of those countries and accessible to their authorities.

7. How long we keep it

We keep account information while your account is active and for a reasonable period afterward in case you return or a question arises, then delete or anonymize it. Billing and transaction records are kept as long as tax law requires, generally six years. Caller information is kept only as long as needed to provide the service to our customer, and we delete it when they close their account unless the law requires us to keep it.

8. How we protect it

We use reasonable security safeguards, including encrypted connections (HTTPS), hashed passwords, secure sign-in sessions, limits on repeated sign-in attempts, and restricted access to systems containing personal information. No system is perfectly secure, but we work to protect your information and review our practices regularly. If a privacy breach creates a real risk of significant harm, we will notify affected individuals and the appropriate authorities as required by law.

9. Cookies

We use a single essential cookie to keep you signed in to your account. We do not use advertising or tracking cookies. Our pages load fonts from Google Fonts, which means your browser connects to Google's servers.

10. Your rights: access and correction

You may ask to see the personal information we hold about you, ask how it has been used and disclosed, and ask us to correct it. Send your request to our privacy officer. We will respond within the time required by law, generally 30 days. You can update most account details yourself under Manage billing in your account.

11. Questions and complaints

Please contact our privacy officer first, and we will do our best to resolve your concern. If you are not satisfied, you may contact the Office of the Information and Privacy Commissioner for British Columbia or, where PIPEDA applies, the Office of the Privacy Commissioner of Canada.

12. Changes to this policy

We may update this policy. If we make significant changes, we will notify customers by email or in their account before the changes take effect.