Privacy Policy
Last updated: September 29, 2026
1. Who we are
CallSketch (“we”, “us”) provides a browser-based tool for designing and documenting phone system call flows at callsketch.com. Questions about this policy: support@callsketch.com.
2. Your call flows stay on your device
The editor runs entirely in your web browser. Everything you put in a call flow (names, phone numbers, extensions, prompt wording, schedules, notes and any other content) is processed on your device and is not transmitted to us. There is no feature, API endpoint or storage on our servers for call flow content.
- Files you save are written to the location you choose on your own device or network.
- PDF and image exports are generated in your browser.
- Autosave keeps the open flow in your browser's local storage on your device so an accidentally closed tab doesn't lose work. It never leaves your device. You can turn it off and clear it at any time from the account menu.
3. Information we collect
| Information | Why we need it |
|---|---|
| Your email address | To create your account and send sign-in and invitation links. |
| Sign-in sessions: a one-way hash of the session identifier, plus when it was created, last used and expires | To keep you signed in and to limit each account to one active device at a time. |
| One-time sign-in links, stored only as one-way hashes | To sign you in. Standard links expire after 15 minutes; invitation links after 7 days. Each works once. |
| Account dates (created, trial end) and access type (trial, subscription, or complimentary/beta access) | To know whether your account is active. |
| Whether your email has a subscription or tester access on our sister product NetworkSketch (we run both; each checks the other by email) | So one subscription or tester invite gives you both products. |
| Subscription status, plan, renewal date and a Stripe customer identifier | To connect your account to your subscription. |
| Where you came from when you signed up: campaign tags (such as utm_source), an ad click ID, or the name of the website that linked to us | To learn which ads and posts bring customers. We may upload ad click IDs of signups to that ad network (for example Google Ads) to measure our campaigns. |
| Referrals: if you signed up through someone's referral link, which account referred you and when. If you're a beta tester, your referral code | To credit the person who referred you. They see only totals (how many people signed up, are on a trial, or pay), never your email address. |
| Messages you send to support@callsketch.com, and feedback you send from the editor's Feedback button (your message, and your browser and screen size only if you leave that box ticked) | To answer you and improve the product. Feedback never includes your call flows: the editor has no way to attach one. |
| Whether you've unsubscribed from trial emails | So we don't send welcome, trial-reminder or trial-ended emails you've opted out of. |
We do not collect or store payment card details; payments are handled by Stripe (see below). We do not use analytics scripts, tracking pixels or advertising cookies, and we do not keep application logs of your requests.
4. Service providers
We use a small number of providers to run CallSketch. They process information only to provide their service to us:
- Cloudflare hosts the website and our account database, provides domain and security services, and routes incoming support email. Like any website host, Cloudflare necessarily processes technical information such as IP addresses to deliver and protect the site.
- Resend sends sign-in and invitation emails. It receives your email address and the link being sent.
- Stripe processes subscription payments. Card and billing details are entered on Stripe-hosted pages and handled under Stripe's privacy policy. Stripe may act as the reseller (merchant of record) for your purchase.
- Google hosts the inbox that receives email sent to support@callsketch.com.
5. Cookies and browser storage
We use a strictly necessary cookie (cfd_session) to keep you signed in. It lasts up to 30 days and can't be
read by page scripts. If you arrive through a referral link, a second cookie (cfd_ref) holds that link's code for up
to 60 days so the referrer is credited if you sign up; it is removed once you do. If you arrive from an ad, a tagged link or another
website, a third cookie (cfd_src) holds where you came from (the campaign tags or ad click ID in the link, or the other
website's name) for up to 60 days, so we know which campaigns bring customers; it is saved with your account when you sign up and then
removed. We don't use advertising cookies, tracking pixels or analytics scripts. The app also uses your browser's local storage, on your
device only, for autosave, preferences (such as paper size) and a cached copy of your license status so the editor keeps working
briefly if you lose your connection.
6. How we use information
Only to provide and secure the service: signing you in, managing your subscription, preventing abuse, responding to you, and sending essential service messages. We do not sell or share your personal information for advertising, and we don't use it to train AI models.
7. Retention and deletion
- Sign-in links are deleted once used or expired. Sessions expire after 30 days or when you sign out.
- Account and subscription information is kept while your account exists.
- To delete your account, email support@callsketch.com from your account's address. We'll delete your account information, except records we're required to keep (for example, for tax or accounting).
8. Your rights
Depending on where you live, you may have the right to access, correct, delete or export your personal information, and to object to or restrict certain processing. Contact support@callsketch.com and we'll respond within 30 days. You may also have the right to complain to your local data protection authority.
9. Security
All traffic is encrypted with HTTPS. Sign-in links and sessions are stored only as one-way hashes. A strict Content Security Policy prevents the app from sending data to any other website. See our Security page for details.
10. International processing
We and our providers are based in the United States, and account information may be processed there and wherever our providers operate.
11. Children
CallSketch is a business tool and isn't intended for anyone under 16. We don't knowingly collect their information.
12. Changes
If we change this policy, we'll update the date above. For material changes, we'll give notice by email or in the app before they take effect.