Workflow & Automation · getcallback.aiCallback
Graded against 809 verified platforms, from its own policy text. Automated assessment against a published rubric — not legal advice.
No lens is bandable yet — banding requires fully verified documents with on-criteria findings. The gap is shown honestly, never estimated.
Partially verified: Privacy Policy assessed. Everything below comes only from what was read in full.
Watch: subprocessors data sharing
Start here. These are the highest-risk verified clauses AIRIN found in the platform's own policy text.
Defines 'DATA PROCESSORS (OR SERVICE PROVIDERS)' as persons who process data on behalf of the Data Controller, and discloses that the company may engage various such service providers, establishing the basis for subprocessor relationships.
Discloses that when a user visits or logs in to the website, online data partners or vendors may use cookies and similar technologies to associate the user's activities with other personal information those partners hold, including association with email or home address, revealing third-party data sharing via tracking technologies.
Obligates the platform to provide a list of categories of personal information sold and the category of any company it was sold to, or to inform the user that no such sale occurred.
How to read this page: Overall risk rates what Callback's own policy terms mean for your prompts, outputs, and data. The benchmark bands below grade those same verified terms relative to peers — a platform in a risky-by-default category can rate HIGH risk and still grade STRONG against its peer set. Both trace to the cited findings.
Partially verified — Privacy Policy — Verified (read in full, 100 findings). Findings below are from fully-read, verified documents only; remaining core documents are pending capture.
Terms not yet captured
AIRIN has not yet captured a gate-verified Terms of Service document for this platform.
- Privacy PolicyVerified - read in full - 100 citationsLast captured 2026-07-19
Only citation-backed plan differences are shown here; absent cells mean AIRIN has not verified a tier-specific claim.
Obligates the platform to disclose the business or commercial purpose for collecting or selling personal information in response to a user data access request.
" (iii) The business or commercial purpose for collecting or selling your personal information."
Permits the company to disclose user information to contractors, service providers, and other third parties used to support the business, establishing a subprocessor/vendor disclosure permission.
" (ii) to contractors, service providers, and other third parties we use to support our business;"
Discloses that personal data may be transferred if the company or its subsidiaries are involved in a merger, acquisition, or asset sale, informing users of a corporate-transaction-based disclosure scenario.
" (b) Business Transaction. If we or our subsidiaries are involved in a merger, acquisition or asset sale, your Personal Data may be transferred."
Obligates the platform to disclose categories of personal information shared for business purposes and the category of company with whom it was shared, in response to a data access request.
" (vii) A list of categories of personal information that we have disclosed for a business purpose, along with the category of any other company we shared it with."
States that payment card details will not be stored or collected by the company and that payment data is provided directly to third-party processors governed by their own Privacy Policy, restricting company retention of payment data and disclosing downstream data sharing — user-favorable restriction.
" We may provide paid products and/or services within Service. In that case, we use third-party services for payment processing (e.g. payment processors)."
Evidence appendix
Showing priority citations first. The full appendix is available for audit trails; not every citation is a severe risk.
" DATA PROCESSORS (OR SERVICE PROVIDERS) means any natural or legal person who processes the data on behalf of the Data Controller. We may use the services of various Service Providers in order to process your data more effectively."
Defines 'DATA PROCESSORS (OR SERVICE PROVIDERS)' as persons who process data on behalf of the Data Controller, and discloses that the company may engage various such service providers, establishing the basis for subprocessor relationships.
AI-generated interpretation, not legal advice.
" When you visit or log in to our website, cookies and similar technologies may be used by our online data partners or vendors to associate these activities with other personal information they or others have about you, including by association with your email or home address."
Discloses that when a user visits or logs in to the website, online data partners or vendors may use cookies and similar technologies to associate the user's activities with other personal information those partners hold, including association with email or home address, revealing third-party data sharing via tracking technologies.
AI-generated interpretation, not legal advice.
" Please note, you are entitled to ask us to provide you with this information up to two times in a rolling twelve-month period. When you make this request, the information provided may be limited to the personal information we collected about you in the previous 12 months."
Limits the frequency of data access requests to twice per rolling twelve-month period and limits the scope of information provided to data collected in the previous 12 months.
AI-generated interpretation, not legal advice.
" Please note, if you ask us to delete or stop selling your data, it may impact your experience with us, and you may not be able to participate in certain programs or membership services which require the usage of your personal information to function. But in no circumstances, we will discriminate against you for exercising your rights."
Limits the impact of rights exercise on service availability and restricts the platform from discriminating against users who exercise their data protection rights.
AI-generated interpretation, not legal advice.
" Our Services are not intended for use by children under the age of 18 (“ Child ” or “ Children ”)."
Restricts the Service from being intended for use by children under 18 and prohibits knowing collection of personally identifiable information from that age group — user-favorable restriction protecting minors.
AI-generated interpretation, not legal advice.
" (vi) A list of categories of personal information that we have sold, along with the category of any other company we sold it to. If we have not sold your personal information, we will inform you of that fact."
Obligates the platform to provide a list of categories of personal information sold and the category of any company it was sold to, or to inform the user that no such sale occurred.
AI-generated interpretation, not legal advice.
" (c) To stop selling your personal information . We do not sell your personal information for monetary consideration. However, under some circumstances, a transfer of personal information to a third party, or within our family of companies, without monetary consideration may be considered a “sale” under California law."
States that the platform does not sell personal information for monetary consideration but acknowledges that certain transfers to third parties or affiliated companies without monetary consideration may constitute a 'sale' under applicable law — a qualified disclaimer about data sharing practices.
AI-generated interpretation, not legal advice.
" If you submit a request to stop selling your personal information, we will stop making such transfers. If you are a California resident, to opt-out of the sale of your personal information, click “Do Not Sell My Personal Information” at the bottom of our home page to submit your request."
Obligates the platform to cease making transfers of personal information upon receipt of an opt-out request, and provides the procedure for California residents to submit such a request.
AI-generated interpretation, not legal advice.
" These third parties have access to your Personal Data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose."
Restricts third-party Service Providers to accessing Personal Data solely to perform tasks on the company's behalf and obligates them not to disclose or use it for any other purpose — user-favorable restriction on subprocessor data use.
AI-generated interpretation, not legal advice.
" We may provide paid products and/or services within Service. In that case, we use third-party services for payment processing (e.g. payment processors)."
States that payment card details will not be stored or collected by the company and that payment data is provided directly to third-party processors governed by their own Privacy Policy, restricting company retention of payment data and disclosing downstream data sharing — user-favorable restriction.
AI-generated interpretation, not legal advice.
" COOKIES are small files stored on your device (computer or mobile device)."
Defines 'COOKIES' as small files stored on the user's device, establishing the meaning of this term as used throughout the policy.
AI-generated interpretation, not legal advice.
" (g) to detect, prevent and address technical issues;"
Permits the company to use collected data to detect, prevent, and address technical issues, establishing a lawful basis for security-related data use.
AI-generated interpretation, not legal advice.
" (h) to fulfill any other purpose for which you provide it;"
Permits the company to use collected data for any other purpose for which the user provides it, establishing an open-ended permission tied to the context of collection.
AI-generated interpretation, not legal advice.
" (i) to carry out our obligations and enforce our rights arising from any contracts entered into between you and us, including for billing and collection;"
Permits the company to use collected data to carry out its obligations and enforce its rights under contracts with the user, including for billing and collection purposes.
AI-generated interpretation, not legal advice.
" (j) to provide you with notices about your account and/or subscription, including expiration and renewal notices, email-instructions, etc.;"
Permits the company to use collected data to provide notices about the user's account or subscription, including expiration, renewal, and email instructions.
AI-generated interpretation, not legal advice.
" Our Privacy Policy governs your visit to https://getcallback.ai and the Callback web application, and explains how we collect, safeguard and disclose information that results from your use of our Service."
Describes the scope and purpose of the Privacy Policy — governing visits to the service and explaining how information is collected, safeguarded, and disclosed — thereby incorporating these practices as binding terms applicable to users.
AI-generated interpretation, not legal advice.
" We use your data to provide and improve Service. By using Service, you agree to the collection and use of information in accordance with this policy. Unless otherwise defined in this Privacy Policy, the terms used in this Privacy Policy have the same meanings as in our Terms and Conditions."
States that user data is used to provide and improve the Service, and that by using the Service the user agrees to collection and use of information under this policy; also cross-references the Terms and Conditions for any undefined terms, establishing consent as the legal basis for data use.
AI-generated interpretation, not legal advice.
" PERSONAL DATA means data about a living individual who can be identified from those data (or from those and other information either in our possession or likely to come into our possession)."
Defines 'PERSONAL DATA' as data relating to a living identifiable individual, including data in the company's possession or likely to come into its possession, setting the scope of personal data protections throughout the policy.
AI-generated interpretation, not legal advice.
Clause detail — protections, your obligations, and coverage
Every clause below is a verbatim quote from Callback's own published policy, read in full and linked to its exact location. Protections and user obligations are reported separately from risk because they are different kinds of clause — an obligation on you is not a risk to your data. Informational only, not legal advice.
✅ Protections found
0 verified clausesClauses in Callback's policies that work in your favour — commitments the platform made to you.
No protective clause has been verified in Callback's published policies yet. That means we did not find one in the documents we read — not that the platform offers nothing.
📋 Rules you must follow
0 verified clausesWhat Callback requires of YOU. These are your obligations, not risks to your data or IP, so they are cited here and excluded from this platform's risk rating.
No user-conduct rule has been verified in Callback's published policies yet.
What the policies actually cover
0 topicsNone of Callback's verified clauses has been assigned a topic yet. The clause-trust review has not reached this platform's findings.
Cross-clause notes
Verified retention clauses point in different directions: the Privacy Policy, Privacy Policy › “Retention of Data” describes broad or open-ended retention, while the Privacy Policy, Privacy Policy › “Your Data Protection Rights under the California Consumer Privacy Act (CCPA)” describes deletion or erasure. Which clause controls in a given situation is not resolved by the documents' text alone — this is surfaced as an ambiguity, treated as Caution.
Automated cross-reference against the published rubric — not legal advice.
Clause intelligence
Canonical clauses and stance patterns extracted from the same gate-verified citations shown on this page.
The clause permits sale of personal data or information.
“(c) To stop selling your personal information . We do not sell your personal information for monetary consideration. However, under some circumstances, a transfer of personal information to a third party, or within our family of companies, without monetary consideration may be considered a “sale” under California law.”Open source citation
The clause permits sale of personal data or information.
“(vi) A list of categories of personal information that we have sold, along with the category of any other company we sold it to. If we have not sold your personal information, we will inform you of that fact.”Open source citation
The clause permits sale of personal data or information.
“If you submit a request to stop selling your personal information, we will stop making such transfers. If you are a California resident, to opt-out of the sale of your personal information, click “Do Not Sell My Personal Information” at the bottom of our home page to submit your request.”Open source citation
The clause permits disclosure or sharing with third parties, affiliates, vendors, or subprocessors.
“DATA PROCESSORS (OR SERVICE PROVIDERS) means any natural or legal person who processes the data on behalf of the Data Controller. We may use the services of various Service Providers in order to process your data more effectively.”Open source citation
The clause permits disclosure or sharing with third parties, affiliates, vendors, or subprocessors.
“When you visit or log in to our website, cookies and similar technologies may be used by our online data partners or vendors to associate these activities with other personal information they or others have about you, including by association with your email or home address.”Open source citation
Tier matrix
Plan-level conditions detected from citation-backed clauses. Empty tiers mean AIRIN has not captured decisive tier language yet.
| Tier | Surface | Verdict | Risk | Citations |
|---|---|---|---|---|
| All applicable tiers | subprocessors data sharing | worsens | HIGH | 6 |
Policy evolution
Open full timelineBefore/after stance changes across captured policy versions. When no material delta exists yet, AIRIN shows the latest citation-backed stance events instead.
Latest stance: third party or vendor sharing on subprocessors data sharing
“DATA PROCESSORS (OR SERVICE PROVIDERS) means any natural or legal person who processes the data on behalf of the Data Controller. We may use the services of various Service Providers in order to process your data more effectively.”Open timeline citation
Latest stance: third party or vendor sharing on subprocessors data sharing
“When you visit or log in to our website, cookies and similar technologies may be used by our online data partners or vendors to associate these activities with other personal information they or others have about you, including by association with your email or home address.”Open timeline citation
Latest stance: sale or sell on subprocessors data sharing
“(vi) A list of categories of personal information that we have sold, along with the category of any other company we sold it to. If we have not sold your personal information, we will inform you of that fact.”Open timeline citation
Latest stance: sale or sell on subprocessors data sharing
“(c) To stop selling your personal information . We do not sell your personal information for monetary consideration. However, under some circumstances, a transfer of personal information to a third party, or within our family of companies, without monetary consideration may be considered a “sale” under California law.”Open timeline citation
Latest stance: third party or vendor sharing on subprocessors data sharing
“(c) To stop selling your personal information . We do not sell your personal information for monetary consideration. However, under some circumstances, a transfer of personal information to a third party, or within our family of companies, without monetary consideration may be considered a “sale” under California law.”Open timeline citation
Latest stance: sale or sell on subprocessors data sharing
“If you submit a request to stop selling your personal information, we will stop making such transfers. If you are a California resident, to opt-out of the sale of your personal information, click “Do Not Sell My Personal Information” at the bottom of our home page to submit your request.”Open timeline citation
Capture recency
- Privacy Policy:Last captured 2026-07-19· verified 2026-07-19verified once — not yet re-verified
Dates state when our pipeline captured and verified each document — not when the vendor last changed it. Documents are re-scanned on a recurring cadence; a document verified once says so until a re-scan confirms it again.
105 findings first captured First scan: July 2026.
Compare and stack are saved in your browser. Open compare · View your stack. A correction triggers an automated re-read of Callback's policies — no human edits the data.
Need this for procurement or legal diligence?
Free shows today's risk. A Stack Audit gives you a citable, verbatim-sourced PDF across your whole AI stack — and flags the moment a vendor's terms change.
Know where the missing document lives?
We haven't yet verified Callback's Terms of Service. Point us at the official page and our pipeline will attempt to capture and read it in full. Submissions are candidates only — nothing is published until it passes the same verification gates as every other document on this site.
Every finding above is a verbatim quote from Callback's own published policy, captured to an immutable snapshot and read in full through a two-gate verification pipeline. Confidence labels and any analysis are AI-generated and informational only — not legal advice.
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.