MYSTICALL · LEGAL
Effective and last updated: August 22, 2026
1. Who we are
MystiCall is operated by CALLSY, a French simplified joint-stock company (société par actions simplifiée) with share capital of €100, registered with the Paris Trade and Companies Register under number 989 559 596.
Registered office: 58 rue de Monceau, 75008 Paris, France. Postal address: 58 rue de Monceau, CS 48756, 75380 Paris Cedex 08, France. SIRET: 989 559 596 00022. Email: hello@mysticall.ai.
CALLSY is the data controller for the personal data described in this policy.
2. Scope of this policy
This policy covers the public MystiCall website, the MystiCall Journal, and the launch waitlist.
It does not cover the future MystiCall mobile application, user accounts, paid subscriptions, in-app purchases, or voice conversations. Separate privacy information will be provided before those services become publicly available.
3. Data we collect
Waitlist information. When you join the waitlist, we collect your email address, your consent to receive MystiCall launch updates, and information needed to demonstrate and manage that consent, such as the submission date and technical delivery records.
Messages you send us. If you contact us, we receive the information you choose to include in your message and the contact details needed to reply.
Technical and security information. Our hosting and form providers may process limited technical information needed to deliver the website, protect forms from abuse, maintain security, and diagnose errors. Depending on the request, this may include an IP address, browser or device information, timestamps, and security signals. CALLSY does not use this information to build advertising profiles.
Audience measurement. The website uses Framer’s built-in, cookie-free analytics. Framer calculates aggregated website statistics without persistent identifiers and does not provide CALLSY with information that identifies individual visitors.
The website does not currently use Google Analytics, advertising pixels, cross-site tracking, or behavioral advertising cookies. It does not collect payment details, precise location, microphone recordings, voice conversations, address-book data, or mobile-app account information.
4. Why we use personal data
• Launch updates: to notify you about the release and early availability of MystiCall. The legal basis is your consent.
• Support and correspondence: to read and respond to messages you send us. The legal basis is our legitimate interest in communicating with visitors and, where relevant, taking steps at your request before providing a service.
• Security and abuse prevention: to protect the website and forms, prevent spam, investigate technical problems, and maintain service integrity. The legal basis is our legitimate interest in operating a secure website.
• Legal compliance and claims: where necessary to comply with law, respond to lawful requests, or establish, exercise, or defend legal claims.
We do not use website data for automated decision-making or profiling that produces legal or similarly significant effects.
5. Who receives the data
Access is limited to authorized members of CALLSY and providers that need the information for the purposes described here: Framer B.V. for website hosting and native form submissions; CALLSY’s email-hosting provider for waitlist notifications and support messages; security or anti-abuse providers used by Framer where necessary; and public authorities or professional advisers where disclosure is legally required or necessary to protect legal rights.
We do not sell personal data or share it for cross-context behavioral advertising.
6. International transfers
Some technical providers may process data outside the European Economic Area. When the GDPR requires safeguards, we rely on an adequacy decision, the EU–US Data Privacy Framework where applicable, the European Commission’s Standard Contractual Clauses, or another lawful transfer mechanism.
Framer’s processing on behalf of CALLSY is governed by its data-processing terms, including its stated transfer safeguards.
7. How long we keep data
• Waitlist data: until you withdraw consent or, at the latest, three years after collection or your last meaningful contact with CALLSY, whichever occurs first, unless a shorter period is appropriate.
• Consent and suppression records: limited information may be retained for as long as reasonably necessary to demonstrate consent or ensure that a withdrawal request is respected.
• Support messages: for up to three years after the request is closed, unless a longer period is necessary for an ongoing dispute or legal obligation.
• Security records: only for the period reasonably necessary for security, fraud prevention, and incident investigation, subject to provider retention settings.
When data is no longer required, it is deleted or anonymized.
8. Your rights
Depending on the circumstances, you may have the right to access your personal data; correct inaccurate or incomplete data; request deletion; restrict processing; object to processing based on legitimate interests; receive data you provided in a portable format where the legal conditions are met; and withdraw consent at any time without affecting processing carried out before withdrawal.
To exercise a right or leave the waitlist, email hello@mysticall.ai. We may need to verify your identity before completing a request.
You may also lodge a complaint with the French data-protection authority, the Commission Nationale de l’Informatique et des Libertés (CNIL), at cnil.fr.
9. Children
MystiCall is intended for adults. We do not knowingly collect waitlist information from anyone under 18. If you believe a minor has submitted personal data, contact us so we can delete it.
10. Cookies and similar technologies
The website does not currently place non-essential advertising or behavioral-tracking cookies. Framer’s built-in analytics are cookie-free and use no persistent visitor identifier.
Strictly necessary or short-lived technologies may be used to deliver the website, protect forms, remember a user-requested setting, or prevent abuse. These technologies are not used for advertising.
If we later add a service that requires consent, we will update this policy and provide an appropriate consent mechanism before that service is activated.
11. Security
We use reasonable technical and organizational measures designed to protect personal data. No internet service can guarantee absolute security, but we limit access and use providers that offer contractual and technical safeguards.
12. Changes to this policy
We may update this policy when the website, providers, or legal requirements change. The date at the top shows the latest revision. Material changes will be presented clearly on the website or, where appropriate, communicated by email.
13. Contact
For privacy questions, rights requests, or to leave the waitlist: hello@mysticall.ai.