SangaHub

CallPilot Privacy Policy

Effective date: May 25, 2026

This Privacy Policy explains how CallPilot by SangaHub collects, uses, stores, and shares information when you use the CallPilot web or mobile application. CallPilot provides LiveKit project management, WebRTC calling, SIP calling, call logs, analytics, and related administration features.

Information we collect

  • Account information such as name, username, email address, role, account status, and authentication data.
  • LiveKit project information that you provide, including LiveKit URL, API key, API secret, project name, and selected project settings.
  • Calling and telephony data, including room names, participant identity, call status, call direction, phone numbers used for SIP calling, timestamps, duration, and related call metadata.
  • Voice and microphone access is used only when you start or join a WebRTC or SIP call. Audio is routed through your configured LiveKit and telephony services.
  • Chat and transcript data may be displayed during calls when transcription is enabled by your configured services.
  • Technical data such as app version, device/platform information, logs, API errors, and diagnostic information needed to operate and secure the service.

How we use information

  • To provide account access, project management, LiveKit calling, SIP calling, call history, analytics, and admin features.
  • To test and save LiveKit credentials, connect to selected LiveKit projects, create call tokens, and manage call-related resources.
  • To protect the service, debug issues, prevent misuse, and improve reliability and performance.
  • To comply with legal, security, and operational requirements.

Sharing and third-party services

  • CallPilot uses LiveKit and your configured telephony providers to provide realtime audio, WebRTC, SIP, and related call features.
  • We do not sell personal information.
  • Information may be shared with infrastructure providers, analytics/logging systems, LiveKit, telephony providers, and service vendors only as needed to operate the app.
  • Your use of LiveKit and telephony services may also be governed by those providers' own privacy policies and terms.

Credential handling

  • LiveKit credentials are used to access the LiveKit project selected by you or your organization.
  • For logged-in users, project credentials are stored by the service so they can be selected and reused in the app.
  • For stateless web use, credentials may be stored locally in the browser and sent in request headers when calling backend APIs.
  • You should only add LiveKit credentials that you own or are authorized to use.

Data retention and deletion

  • We retain account, project, call log, and operational data for as long as needed to provide the service, meet legal obligations, resolve disputes, and maintain security.
  • You can delete your account from the app settings. Admin users may also deactivate or delete users where allowed by the application.
  • Deleting an account disables access and removes or deactivates account-linked application records according to our operational requirements.
  • Some records may be retained for backup, legal, fraud prevention, security, or audit purposes.

Security

  • We use reasonable technical and organizational measures to protect information, including authenticated API access and encrypted transport where supported.
  • No internet service can guarantee absolute security. Keep your account password and LiveKit credentials confidential.

Children's privacy

  • CallPilot is intended for business and developer use and is not directed to children under 13.
  • We do not knowingly collect personal information from children under 13.

Changes to this policy

  • We may update this Privacy Policy from time to time. The updated policy will be posted on this page with a revised effective date.

Contact

  • For privacy questions or deletion requests, contact SangaHub through the support contact listed on the Google Play Store listing or at support@sangahub.com.