Legal

Privacy policy

1. Data controller

The controller of personal data processed in connection with callsea.app is SelectCentre spółka z ograniczoną odpowiedzialnością (SelectCentre sp. z o.o.), Wiertnicza 89, 02-952 Warsaw, Poland, entered in the register of entrepreneurs of the National Court Register kept by the District Court for the Capital City of Warsaw, 13th Commercial Division, under KRS 0000763236, VAT ID PL6793178172, REGON 382082000, share capital PLN 5,000 (the "Company", "we").

We have appointed a Data Protection Officer, who can be reached at iodo@selectcentre.pl or in writing at the Company's registered office.

2. What we process and why

Website callsea.app: we use Google Analytics 4 for visit statistics — only with your consent given in the cookie banner. Until you consent, Google Analytics runs in Consent Mode: without cookies or user identifiers — only anonymous, aggregate technical signals reach Google. Declining does not limit the site. After consent, Google Analytics sets cookies (including _ga, _ga_*) and collects visit data (pages, approximate location, device type). Your theme preference (light/dark) and your cookie decision are stored only locally in your browser. You can change your choice at any time: open cookie settings.

AI assistant (chat and voice): the site offers an AI assistant powered by ElevenLabs. It starts only after you click the "Ask AI" button — merely visiting the site opens no connection to ElevenLabs servers. During a conversation we process the chat content and, in voice mode, microphone audio (only with permission granted in your browser) and its transcript. Contact details you volunteer in the conversation (name, company, phone, business e-mail) are passed to our team so we can contact you about CallSea. The technology provider is ElevenLabs with EU data residency; conversation records are kept for up to 90 days for assistant quality control.

"Book a demo" form: we process the data you submit (name, company, phone, business e-mail) solely to contact you about a CallSea demo. The form is protected by the Cloudflare Turnstile anti-bot service, which processes technical request data (including IP address) to distinguish humans from bots.

E-mail correspondence: data you volunteer in a message (address, content) is processed to handle your enquiry.

Platform panel.callsea.app: user account data (e-mail, name, organization) and — as a processor acting for our B2B clients — campaign content: recordings in the course of processing, call transcripts and evaluation results. In this respect the Company acts as a processor on the client's (controller's) instructions; details are governed by the data processing agreement (DPA).

3. Legal bases

  • Art. 6(1)(a) GDPR — your consent: website visit statistics (Google Analytics); you may withdraw consent at any time without affecting prior processing;
  • Art. 6(1)(b) GDPR — conclusion and performance of the agreement for the use of the CallSea platform (user accounts, billing);
  • Art. 6(1)(f) GDPR — the Company's legitimate interest: handling enquiries and demo contact, website security (anti-bot protection), establishing, pursuing or defending claims;
  • Art. 6(1)(c) GDPR — compliance with legal obligations (e.g. tax and accounting);
  • Art. 28 GDPR — data entrusted to us by clients within the platform is processed solely on the controller's documented instructions, under the DPA.

4. Recipients and sub-processors

Data may be processed by service providers acting on our behalf — only to the extent and for the purposes described in this policy. For data entrusted within the platform we use the sub-processors named in the sub-processor list (speech-to-text, language models and infrastructure — all with EU-region processing). The callsea.app website is served via Cloudflare infrastructure, demo-form submissions are handled in our internal task-management tool, and visit statistics (with consent) are provided by Google Ireland Ltd. (Google Analytics). The on-site AI assistant (chat and voice) is powered by ElevenLabs — with EU-region processing (data residency). Data may also be shared with our legal, accounting and IT service providers and — where required by law — with competent authorities.

5. Transfers outside the EEA

Data entrusted to us within the platform (recordings, transcripts, evaluation results) is processed in the European Economic Area: platform servers are located in Germany, and transcription and AI models run in the EU region. If the use of operational tools (e.g. form-submission handling, CDN infrastructure, Google Analytics — provided by Google Ireland Ltd., with possible transfers to Google LLC in the USA; the AI assistant — powered by ElevenLabs with EU-region processing) were to involve a transfer outside the EEA, it takes place only under Chapter V GDPR mechanisms — an adequacy decision (EU-US Data Privacy Framework) or standard contractual clauses. See also our data architecture.

6. Retention

  • visit statistics (Google Analytics)_ga/_ga_* cookies up to 24 months; event data in Google Analytics 14 months;
  • AI assistant conversations — chat content, voice recordings and transcripts up to 90 days; contact details volunteered in a conversation — as for demo-form submissions;
  • demo-form submissions and correspondence — for the time needed to handle the enquiry and sales conversations, no longer than 12 months from the last contact, unless an agreement is concluded;
  • platform user account data — for the term of the client agreement, and afterwards for the period needed for settlements and securing claims (as a rule 3 years) and legal obligations (tax records — as a rule 5 years from the end of the calendar year);
  • data entrusted within the platform — per the client's (controller's) configuration and instructions and the DPA; audio recordings are not stored permanently, and upon termination data is returned or deleted, subject to backups removed per those systems' retention cycles.

7. Your rights

You have the right of access, rectification, erasure, restriction, portability, objection (to processing based on legitimate interest) and to lodge a complaint with a supervisory authority (in Poland: the President of the Personal Data Protection Office, PUODO). Providing data is voluntary but may be necessary to handle an enquiry or conclude an agreement. For data we process on a client's behalf (e.g. call transcripts), we act jointly with the controller — your employer or service provider. Your data is not subject to automated decision-making producing legal effects, including profiling for that purpose.

8. Contact

Data protection matters: iodo@selectcentre.pl (Data Protection Officer) or kontakt@callsea.app, or in writing at the Company's registered office.

Last updated: 15 July 2026.