ExpertCall

1. Introduction

ExpertCall ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform. Please read this policy carefully. By using ExpertCall, you consent to the data practices described in this policy.

2. Information We Collect

We collect information you provide directly and information collected automatically:

Account Information: Name, email address, profile photo, and login credentials provided through our OAuth authentication system.

Expert Profile Data: Professional title, specialty, biography, years of experience, hourly rate, jurisdiction, license information, and social media links.

Contact Information: Phone number (if provided for SMS notifications) and email address.

Payment Information: We use Stripe to process payments. We store only your Stripe customer ID, last four digits of your card, and card brand. Full payment card details are handled exclusively by Stripe and never stored on our servers.

Session Data: Session duration, timestamps, ratings, reviews, messages exchanged during sessions, and session recordings (when recording is enabled by participants).

Usage Data: Browser type, device information, IP address, pages visited, and interaction patterns collected automatically through standard web technologies.

3. How We Use Your Information

We use collected information to: (a) provide, maintain, and improve the Platform; (b) process transactions and send related information including billing confirmations and receipts; (c) send notifications about sessions, bookings, and account activity via email, SMS, or in-app notifications based on your preferences; (d) match users with relevant experts through our search and recommendation features; (e) facilitate video calls, screen sharing, and session recordings; (f) respond to customer service requests and support needs; (g) monitor and analyze usage trends to improve user experience; and (h) detect, prevent, and address fraud, abuse, and technical issues.

4. Session Recordings

When the recording feature is activated during a session, both participants are notified. Recordings are stored securely using encrypted cloud storage and are accessible only to the participants of that session. Recordings may be deleted by participants at any time. We do not access, review, or use session recordings for any purpose other than providing the playback service to participants, unless required by law.

5. Screen Sharing

Screen sharing is a real-time feature that transmits your screen content directly to the other session participant through our video infrastructure provider (Daily.co). Screen content is not stored or recorded by ExpertCall separately from session recordings. Users are responsible for closing sensitive applications or documents before initiating screen sharing.

6. Information Sharing and Disclosure

We do not sell your personal information. We may share information with: (a) Service Providers — third-party companies that help us operate the Platform, including Stripe (payments), Daily.co (video infrastructure), and cloud storage providers; (b) Other Users — your public profile information (name, specialty, ratings, reviews) is visible to other users of the Platform; (c) Legal Requirements — when required by law, subpoena, or government request; and (d) Business Transfers — in connection with a merger, acquisition, or sale of assets.

7. Notification Preferences

You can control how we communicate with you. Through your account settings, you can enable or disable: email notifications, SMS notifications (requires providing a phone number and explicit consent), and in-app notifications. Transactional communications related to your account security and payment confirmations may still be sent regardless of your notification preferences.

8. Data Security

We implement industry-standard security measures to protect your information, including encrypted data transmission (TLS/SSL), secure authentication, and access controls. Payment processing is handled by Stripe, which is PCI DSS Level 1 certified. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

9. Data Retention

We retain your account information for as long as your account is active. Session data and transaction records are retained for a minimum of 3 years for legal and financial compliance purposes. Session recordings are retained until deleted by participants or for a maximum of 12 months, whichever comes first. You may request deletion of your account and associated data at any time by contacting us.

10. Your Rights

Depending on your jurisdiction, you may have the right to: (a) access the personal information we hold about you; (b) request correction of inaccurate information; (c) request deletion of your personal information; (d) object to or restrict certain processing of your data; (e) request portability of your data; and (f) withdraw consent where processing is based on consent. To exercise these rights, contact us at the email address below.

11. California Privacy Rights (CCPA)

California residents have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected, the right to delete personal information, and the right to opt out of the sale of personal information. As stated above, we do not sell personal information. To make a CCPA request, contact us at the email address below.

12. Children's Privacy

ExpertCall is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected information from a child under 18, we will take steps to delete that information promptly.

13. Cookies and Tracking

We use essential cookies to maintain your session and authentication state. We may use analytics tools to understand how users interact with the Platform. You can control cookie settings through your browser preferences. Disabling essential cookies may prevent you from using certain features of the Platform.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on the Platform and updating the "Last updated" date. Your continued use of the Platform after changes are posted constitutes acceptance of the revised policy.

15. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at [email protected].