Callist answers phone calls and website chats on behalf of local service businesses. That means real people's voices and messages pass through our systems. This page explains exactly what happens to that information — what we keep, what we never keep, and which companies see what.
Callist is a service of AIR DUCT TAMIR LLC, a Florida limited liability company based in Tampa, Florida. For anything in this policy, reach us at aisolutions@callist.ai.
This policy covers the callist.ai website and the AI phone and chat assistants we provide to business clients.
This distinction matters, so it's worth being plain about it.
If you're a caller and you want your information corrected or deleted, contact the business you reached out to. They'll pass the request to us, and we'll act on it. See “Deleting information” below.
Only what someone chooses to tell the assistant, and only what the business needs to call them back: name, phone number, a description of what they need, and how urgent it is. We add a timestamp, which business it was for, whether it came by phone or chat, and which language was used.
If you fill in our contact form: your name, email address and message.
Your IP address, which we use to limit how many requests any one source can make. This protects the service from abuse. We don't use cookies for advertising, and we don't run third-party analytics or ad trackers on this site.
To answer a call in real time, the assistant depends on a handful of specialist companies. This is the complete list. Each one receives only what it needs to do its job.
| Company | What they receive | Why |
|---|---|---|
| Twilio | The caller's phone number and call metadata. Not the conversation. | Connects the phone call. Privacy policy → |
| Deepgram | Live call audio, streamed as the caller speaks. Not stored. | Turns speech into text.Opted out of model training Privacy policy → |
| Anthropic | The text of the conversation. | Generates the assistant's replies.API data is not used for training Privacy policy → |
| ElevenLabs | Only the words the assistant is about to say. Never the caller's audio. | Turns the reply into speech.Logging disabled on every request Privacy policy → |
| Render | Hosts our servers and the disk the lead records sit on. | Hosting and storage. Privacy policy → |
| Only messages sent through the contact form on this website. | Delivers our own email notifications. Privacy policy → |
All of these companies are based in the United States, and information is processed there. We don't transfer anyone's information outside the United States.
| What | How long |
|---|---|
| Lead records | For as long as the business is a Callist client, plus 30 days after they leave. They're the business's records, so they stay available for as long as the business is with us. |
| Contact form messages | 24 months. |
| Server logs | 7 days, then deleted automatically by our host. |
Being straight with you: our servers write operational logs, and those logs include the text of what was said during a conversation. We use them to check that the assistant is behaving correctly. They are not searchable records, they're not part of any product, and our host deletes them automatically after 7 days. We don't copy them anywhere else.
The assistant says so itself, at the start of every conversation, before anyone has told it anything. On the phone it opens with a line stating the call is being handled by an automated assistant. In website chat, the first message says the same. There is no point at which someone could give us information while believing they were talking to a person.
Contact the business you called or chatted with. The information is theirs, and they'll pass the request to us. We complete deletion requests within 30 days of receiving them.
Email aisolutions@callist.ai and we'll delete individual records or your entire lead history within 30 days. When you stop being a client, we delete your lead records within 30 days automatically — so please export anything you want to keep before then.
Traffic to and from our servers is encrypted in transit. Our credentials are held as environment variables, never in our code. Our source code repository is private. We rate-limit requests to block automated abuse. Each client's dashboard is reachable only with a unique access key.
A note for clients: your dashboard key travels in the dashboard's web address, which means the link itself is the credential. Treat it like a password — don't post it publicly or share it with anyone who shouldn't see your leads.
No system is perfectly secure, and we won't claim otherwise. If you believe you've found a security problem, please tell us at aisolutions@callist.ai.
Callist is built for communication between businesses and their adult customers. It isn't directed at children, and we don't knowingly collect information from anyone under 13. If you believe we have, contact us and we'll delete it.
If we change how we handle information, we'll update this page and change the date at the top. For changes that meaningfully affect our clients, we'll email them directly rather than expecting anyone to notice a new date.
Questions about anything on this page:
aisolutions@callist.ai