Privacy Policy

This Privacy Policy explains how Estelo (“Estelo”, “we”, “us”), operated by Estelo LLC, handles information across our website, our applications and the AI agents we run for businesses. It describes what we collect, what we deliberately do not do with it, how it is used and shared, and the choices you have.

Three groups of people are covered: visitors to our website and people we invite; customers who hold an Estelo account and the staff they add to it; and the people an Estelo agent talks to on a customer’s behalf — their callers, customers, candidates and contacts. For that third group we act as the customer’s service provider: the business you dealt with decides why your data is processed, and we process it on their instructions.

An Estelo agent is set up for a job in a business and trained on that business’s trade, prices and tone. To do the job it answers and places calls, reads and sends messages and email, books and moves appointments, fills in forms and keeps records in the tools the business connects — its calendar, CRM, booking system, accounting and the like. Calls can be recorded, transcribed and summarised so the business can read what was said and the agent can learn from every conversation.

The agent speaks the caller’s language and works around the clock. Anything that needs a person is passed to the business with the conversation written down. What the agent learns about one business stays with that business.

• Website visitors. Standard server logs (IP address, browser, pages visited, time) and, on the Pricing page, your country as detected from your connection so that your country’s rate is shown first. We use only the cookies the site needs to work; we do not run advertising trackers.
• Invitations and contact. Estelo is invitation only. We may receive your name and business contact details from a member who invites you or from public business listings, and use them to contact you about an invitation. If you write to us through the contact form, we receive your name, email address and message.
• Account and billing. When a business opens an account: the business’s name, country, address and tax details, the names and email addresses of the people on the account, sign-in credentials, and payment details, which are handled by our payment processor; we keep what is needed to show your statement.
• Usage and metering. Minutes spoken, actions taken, phone-line charges, approvals you give, balance and top-ups, and technical logs that keep the agent running and let us investigate a problem.
• Agent configuration. The instructions, knowledge base, greetings, disclosures, rules and connected tools you set up for your agent.
• Business Data. What the agent handles for you: call audio, transcripts and summaries; messages and email; contacts, calendars and bookings; forms, documents and records in the connected tools; and the information people give the agent during a conversation. This data belongs to the business and is processed on its instructions.
• Support. If you contact us for help, we receive what you send us and the account details needed to answer.

We designed Estelo so that we do not:

• sell personal information, or share it for advertising;
• use one business’s Business Data to build or train agents for another business;
• listen to, read or review your calls and messages, except when you ask us to (for example to fix a problem during onboarding), when security or the law requires it, or in aggregate, de-identified form to keep the Service working;
• store full payment card numbers on our own systems; or
• use the agent to contact people on our own behalf using a customer’s contacts.

If you spoke with an Estelo agent, you were dealing with a business that uses Estelo. That business decides what the agent asks, whether the call is recorded, and how long your information is kept; we process it as their service provider and do not use it for our own purposes. Recording, disclosure and consent rules differ by country, and the business is responsible for following the ones that apply to its calls; we provide the tools it needs to do so.

To access, correct or delete what was collected about you, or to stop being called, contact the business you dealt with. If you cannot reach them, write to us through our contact page and we will pass your request on and help where we can.

• to run the agent for your business and keep its configuration and knowledge current;
• to meter usage, keep your balance funded as you set it, and produce your statement;
• to onboard you, answer support requests and tell you about changes to the Service;
• to send and act on invitations, and to stop contacting you when you ask;
• to secure the Service, prevent fraud and abuse of the phone network, and investigate problems;
• to understand aggregate performance and reliability, in de-identified form; and
• to comply with legal obligations, including those of the carriers we use.

We do not sell personal information. We share data only as needed to run the Service, with providers who process it on our behalf under contract:

• cloud hosting and content delivery (Cloudflare);
• database and storage (Supabase);
• telephone carriers and messaging providers that connect the agent’s calls and texts;
• AI model providers that process conversation text and audio so the agent can respond;
• payment processing for your balance and top-ups; and
• email and support tooling used to answer you.

We also share Business Data with the third-party tools you connect to your agent, on your instructions; with a partner who introduced you, only to the extent you agreed when the account was opened; with a successor if Estelo is sold or merged; and where required by law or to protect the rights, safety and security of our users, the people the agent calls, and the Service.

• Account, billing and statement records: kept while your account is open and afterwards for as long as tax, accounting and dispute rules require.
• Business Data, including call recordings and transcripts: kept while your account is open, subject to any shorter period you set in your agent’s configuration, and available for export for a period after closure, after which it is deleted or de-identified.
• Invitation and contact details: kept until you accept an invitation, decline one, or ask us to stop; then deleted or kept only on a do-not-contact list.
• Technical logs and support records: kept for a limited period and then deleted or de-identified.

• Account holders can see, correct and export their account information and Business Data, and can close the account at any time.
• Account holders control recording, greetings and disclosures in the agent’s configuration, within the rules that apply in their country.
• Anyone we contacted about an invitation can tell us to stop, and we will.
• People who dealt with an Estelo agent should contact the business they dealt with; we will help route the request if they cannot reach it.

Depending on where you live, you may have additional rights under laws such as the GDPR (EU/UK), the CCPA/CPRA (California) or the data-protection law of your country, including the right to complain to a supervisory authority. To exercise any right, contact us using the details below; we may ask you to verify who you are first.

We use industry-standard safeguards, including encryption in transit and at rest, scoped access to systems, secret management and logging, to protect information. Credentials for the tools you connect are stored in a managed vault and read only by the systems that need them. No method of transmission or storage is perfectly secure; if a breach affects your data we will notify you as the law requires.

Estelo launches in 60 countries and the agents speak 54 languages. We process data in the United States and in the countries where our providers operate, which may be outside your own. Where required, we rely on appropriate safeguards for such transfers, such as standard contractual clauses, and the business you deal with remains responsible for the local rules that apply to its calls.

Estelo is a service for businesses and is not directed to children under 16. We do not knowingly collect personal information from them for our own purposes. A business may use its agent to talk to its own customers, including minors, under its own responsibility and the rules that apply to it. If you believe a child has provided us information directly, contact us and we will delete it.

We may update this policy from time to time. We will change the “Last updated” date above and, for material changes, give account holders notice through the Service or by email. This policy forms part of our Terms of Service.

Questions about this policy or your data? Write to us through our contact page; a human replies within one business day.