Callconnect and Namely AI Navigate Complex Data Terrain While Prioritizing Privacy
In today's digital age, the handling of personal information has become increasingly complex, particularly for companies that operate across multiple jurisdictions and process extensive amounts of user data. This article examines the data collection, sharing, and processing practices of two companies, Callconnect and Namely AI, focusing on their privacy policies and compliance with relevant data protection regulations. Through an analysis of their data management processes, including user consent requirements, third-party relationships, and AI-driven data analysis, we will explore how these companies balance the need for data-driven innovation with robust privacy protections.
Callconnect collects detailed Usage Data and Payment Data, processing both with specific legal bases. Usage Data includes technical information like URLs, cookie data, IP addresses, device information, and network performance metrics - all collected with user permission for customized Services settings, posting timing, and technical support.
When it comes to Payment Data, the company collects name, date of birth, credit card information (handled by a third-party provider), bank details, and mobile phone numbers. These details are processed based on contract agreements and the company's legitimate interest in improving their Services.
The company shares data based on user instructions and third-party relationships. Data can be shared with vendors who assist in Service operations, though these partners must adhere to strict privacy policies. Usage Data can be converted into aggregated or anonymized forms (De-Identified Data) for internal use or potential sale, while Payment Data is shared only as necessary for Service operations.
Callconnect has established robust protocols for data protection and user rights. The company processes data through various technologies including cookies and web beacons, always requiring explicit consent for new data collection purposes. For registered users, significant privacy rights include access to their data, correction of errors, and deletion requests - all handled through a strict two-factor authentication process to verify user identity.
Callconnect processes Registration Data from various sources including Facebook, Google, Microsoft/Bing, and Apple, collecting information such as email addresses and usernames during the contract term for Service provision. This Data may be shared with service providers but never includes user names or passwords without explicit permission.
Engagement Data encompasses all recorded information from Service use, combining customer and third-party Data while preserving proprietary usage details. This comprehensive Data set includes personally identifiable information, which requires explicit customer consent before processing. All rights in De-identified Data remain with Callconnect, allowing for unrestricted use of aggregated or anonymized information.
The company upholds strict identity verification protocols for all data access and deletion requests, employing two-factor authentication measures to ensure user privacy. Data retention practices are designed to protect customer information while maintaining operational needs, with policies allowing for indefinite storage unless explicitly requested by the customer for deletion.
Namely AI processes data through sophisticated AI algorithms employing machine learning and deep learning techniques to analyze customer data and generate highly accurate predictions and recommendations. The company's technology suite includes NAN LU (NamelyAI Natural Language Understanding) and NAG (NamelyAI Genius), instrumental in transforming sales methodologies across various business functions including prospecting, lead nurturing, and customer service.
Data processing for AI development creates both identifiable and de-identified datasets. Identifiable data includes detailed customer interactions and personal information from third-party platforms like Facebook, Google, Microsoft/Bing, and Apple, while de-identified data is converted from usage information through aggregation and anonymization processes. This dual approach allows Namely AI to create comprehensive customer profiles while maintaining privacy through robust data protection protocols.
Engagement Data, which captures all input and recorded information from Service use, serves as a foundation for AI development. This dataset includes personally identifiable information, requiring express customer consent for processing. Namely AI retains ownership and intellectual property rights to anything developed under their subscription programs, with third-party technology integration governed by specific license agreements. The company processes data continuously to improve Services and provide customers with valuable insights and automated sales support through a 24/7 operation that handles high call volumes without human intervention.
With a focus on transforming customer interactions through AI, Namely AI demonstrates significant progress in sales technology. The platform automates sales calls and responses while offering customization for product/service pitches, objection handling, and customer needs insights. These capabilities enable consistent operation without human breaks, offering an alternative to traditional sales approaches that require commission structures and healthcare benefits.
Callconnect works with various third parties for service enhancement, advertising, and data processing, maintaining specific protocols to protect user data.
The company allows other companies to offer products and services through their platform, either via co-branded pages or email. These third parties are only authorized to use specific information upon explicit user consent. Users are notified when their data is shared with these partners, and Callconnect maintains no liability for their actions or inactions.
Callconnect uses aggregated, statistical information for Service descriptions and business relationships. Personal or profile information is used for targeted advertisements, but the company does not provide this information to advertisers without explicit disclosure. Advertisers determine their own targeting criteria based on ad displays, and their privacy policies govern their practices.
Third-party service providers may offer specific services on behalf of Callconnect. These providers are granted access to limited personal information, including names and email addresses, but financial information processing is handled through separate third-party providers. All third parties must maintain strict confidentiality and are prohibited from using the information for any purpose outside their contractual agreement.
ISPs may receive certain Data (email address, name) for advertising purposes. This information is maintained confidentially and used solely for targeting or discontinuing ad exposure. ISPS are required to maintain the information in a secure, confidential manner to protect user privacy.
Information about users may be transferred in connection with business transitions or asset sales. These transfers typically occur without requiring user consent, but the company maintains the right to protect its rights and property through appropriate legal disclosures. Data may also be disclosed under legal requirements, including compliance with judicial proceedings or investigative requests.
The company processes data through multiple technologies including cookies, web beacons, and device identifiers while adhering to strict user consent requirements. They maintain comprehensive data protection rights with users, offering a wide range of privacy options including data access, correction, deletion, and objection rights. All third-party technology integrations are governed by specific license agreements to ensure proper data handling and security standards.
The company's data processing practices are governed by specific legal bases that vary based on the context. For general processing, it is based on specific consent or contractual agreement. Consent-based processing allows Data subjects to withdraw consent at any time, which may result in limited Service access but does not affect future use of De-Identified Data for business purposes. Contract-based processing requires Data subjects to fulfill contract terms before consent withdrawal takes effect, and processing continues until obligations are fulfilled and Data retention ceases.
The Services are primarily intended for users 18 years of age or older, or children 13 years and older with parental/guardian consent. Data processing is limited to users 13 years and older unless specifically required for Service provision. For Data from users under 13, the company will attempt to delete it as soon as possible, subject to legal obligations. Users can report any processing of underage Data to privacy@callconnect.com.
The company processes Registration Data, which includes name, email address, street address, identity-authentication information, contact details, and other information provided through the Services. This includes registration and profile information from third-party platforms like Facebook, Google, Microsoft/Bing, and Apple.
EU/UK residents have the right to obtain confirmation from Callconnect about maintaining their personal information in the United States. Upon request, Callconnect provides access to the data they hold about EU residents. UK residents have rights under both GDPR and UK GDPR, with UK GDPR applying if different from GDPR.
Callconnect complies with GDPR requirements as a Processor, while customers act as Controllers. The company complies with CCPA and CPRA requirements as applicable. The California Privacy Rights Act (CPRA) took effect January 1, 2022. Callconnect complies with all applicable data protection and privacy laws in applicable jurisdictions, with practices fully disclosed throughout this Privacy Policy.
The company maintains comprehensive data protection rights with users, offering a wide range of privacy options including data access, correction, deletion, and objection rights. All third-party technology integrations are governed by specific license agreements to ensure proper data handling and security standards. Data security is maintained through technical, contractual, administrative, and physical measures, with access limited to necessary staff.
Users can limit use, disclosure, and restrict sensitive personal information as defined by the CPRA. The company verifies user identity before revealing or deleting data using two-factor authentication measures. For EU residents, the company processes data in the United States and complies with GDPR requirements. All data sharing must be expressly requested or agreed to by the user, with no sharing of user names or passwords without permission.