This is an English translation provided for convenience. The Swedish version is legally binding and prevails in the event of any discrepancy.
Last updated: 2026-10-09
CM Software Callmaker AB, Reg. No. 556999-9971, Stora Badhusgatan 18, 411 21 Göteborg (“Callmaker” or “we”) is the controller for the processing described in this privacy policy. Send questions about our processing of personal data and requests to exercise your rights to privacy@cmsoftware.se, or by post to the address above marked “Dataskydd” (data protection).
We provide Callmaker Dialer (the “Service”) to companies and organisations. Personal data that our customers process in the Service, for example call lists, calls, recordings, SMS and data about the customer’s users, is processed by us as a processor on the customer’s behalf under our data processing agreement. The customer is then the controller. If you have been contacted through the Service or work for one of our customers, you should therefore contact that company first. We help the customer respond to your request. How we handle certain data in the Service is described in sections 8 and 9.
This privacy policy covers the processing we carry out for our own purposes: when you visit our website, contact or call us, represent a customer or supplier, or when we protect the Service.
When you visit callmaker.se, we process technical data such as IP address, browser, operating system, pages visited and time in order to deliver the website and protect it against misuse. The legal basis is our legitimate interest in a functioning and secure website (Article 6(1)(f) GDPR). Cookies and similar technologies that are not necessary are used only with your consent; see our cookie policy.
When you use our contact form, book a demo or submit a support request, we process the information you provide, such as name, company, telephone number, email address and your message, in order to respond to and follow up on your enquiry. The legal basis is our legitimate interest in handling enquiries (Article 6(1)(f)). The data is kept for twelve (12) months after the last contact, unless you become a customer. Support cases and emails to support may also, after anonymisation as described in section 7, be used to develop and improve AI features in the Service. You can object as described in section 7.
We process the name, job title, email address, telephone number and correspondence of representatives and contact persons at our customers and suppliers, for example authorised signatories, contact persons for contract matters and incidents, and administrators of the Service. We do this in order to enter into and perform agreements, invoice, give notices and manage the customer relationship. The legal basis is our legitimate interest in performing the agreement with the company you represent (Article 6(1)(f)). Accounting records, for example invoices, are kept for seven years under the Swedish Bookkeeping Act (1999:1078) (legal obligation, Article 6(1)(c)). Other data is kept for the term of the agreement and twenty-four (24) months thereafter.
We send newsletters and offers by email to contact persons at existing customers and otherwise to those who have given their consent. You can unsubscribe at any time via the link in the email or by emailing us.
We process the name, job title, employer and work-related contact details of people in relevant roles at companies that may benefit from the Service, in order to contact them for business purposes. We obtain the data from company websites, public registers and providers of company information. The legal basis is our legitimate interest in marketing the Service to businesses (Article 6(1)(f)). We provide information about this no later than in our first contact. If you object, we stop contacting you and block your data from future contact. The data is kept for twelve (12) months after the last contact.
We process logs, IP addresses and data about how the Service is used to the extent necessary to protect the Service, detect and handle security incidents, prevent misuse and fraud, and investigate complaints about traffic from customers’ numbers. The legal basis is our legitimate interest in protecting the Service, our customers and others (Article 6(1)(f)) and, where required by law, legal obligation (Article 6(1)(c)). We may disclose such data to telecom operators and to the Swedish Post and Telecom Authority, the police or another authority when required by law or by a court or regulatory decision, or in the context of a criminal investigation or a supervisory matter. Logs are kept for one hundred and eighty (180) days, or longer if needed to investigate an incident. Logs generated by the Service’s AI features are kept to the extent and for the period required by the AI Act (EU) 2024/1689.
Calls to our number +46 31 313 22 00, including support, are recorded and automatically transcribed. This is announced at the start of the call. If you do not want to be recorded, you can contact support via support@callmaker.se or the support form on callmaker.se instead.
We process the recording and transcript in order to a) handle and document your matter, monitor quality and train our staff, b) in the case of support calls, develop and improve AI features in the Service, for example an assistant that answers Users’ questions, and c) establish, exercise or defend legal claims. In all cases, the legal basis is our legitimate interest in providing and improving our service, developing the Service and protecting our rights, respectively (Article 6(1)(f)). We do not make any automated decisions about you based on the calls.
We use only transcripts and case text, never audio recordings, and we do not use your voice to identify you. Before a transcript is used, it is anonymised. Names, telephone numbers, email addresses, company names, company registration and customer numbers, IP addresses, passwords, one-time codes, API keys and other information that could identify you, your company or other people are removed. Anonymisation is carried out with our own AI models and then reviewed manually by our staff before the material is used. Anonymised data is not personal data, and we do not attempt to re-identify anyone in it. A transcript or case is used no earlier than fourteen (14) days after the call or after the case was closed, and only calls recorded after we began announcing recording at the start of the call are used. If you mention other people in the call, for example people on your call lists, their data is treated in the same way and removed during anonymisation.
Audio recordings and transcripts are kept for twelve (12) months and then deleted. Anonymised transcripts and the models trained on them are kept without a time limit, as they do not contain personal data. Transcription, anonymisation and training take place on AI models that we operate ourselves at our processors; see section 10. We do not provide recordings or non-anonymised transcripts or cases to third-party AI services, and we do not sell them. Anonymised excerpts may, however, form part of the knowledge base sent to our language model provider when the assistant in the Service answers a question; see section 10.
You can object at any time to your support call or support case being used to develop AI features by emailing privacy@cmsoftware.se. State the telephone number you called from and approximately when you called, or the case number or the email address you wrote from. We will then exclude the call from training. If you object within fourteen (14) days of the call, the transcript has not yet been used. Transcripts that have already been anonymised and used cannot be linked to you and therefore cannot be removed from trained models.
If a customer has enabled transcription or Call Coaching in the Service, we anonymise, on the customer’s instruction, transcripts, AI-generated results and associated metadata, and use the anonymised data to develop and improve the Service’s AI features. Audio files and data from calendar integrations are not used. Anonymisation is carried out using our own AI models and removes the same kinds of information as listed in section 7. The same applies to Users’ questions to and answers from the Service’s assistant features, which are stored without any link to the user or customer and are anonymised before they are used. Until anonymisation, the customer is the controller. To the extent we would be considered the controller for the anonymisation, it takes place on the basis of our legitimate interest in developing the Service (Article 6(1)(f)), and you can object under section 12.
Customers can let their Users connect a Google or Microsoft account to the Service to book meetings. The Service then reads calendar events, shows them to authorised Users in the customer’s organisation and creates or changes events in the connected calendar. The data is processed only to provide the calendar feature, on the customer’s behalf, and is stored and deleted in accordance with the customer’s settings in the Service and our data processing agreement. You can remove the Service’s access at any time in the settings for your Google or Microsoft account, and the Service will then not retrieve any new data.
Callmaker’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Data from Google Workspace APIs and Microsoft accounts is not used for advertising or to develop, improve or train AI or machine learning models, whether in original, aggregated, anonymised or derived form, and is not transferred to third parties for such purposes.
Google’s required disclosure: Callmaker’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Data from Google Workspace APIs is not used to develop, improve or train generalized AI or ML models.
We share personal data with suppliers that process it on our behalf as processors, for example providers of web hosting, email, finance and invoicing systems, telephony, and operations and cloud services. For operations and AI processing we use Amazon Web Services EMEA SARL (Ireland) and Akamai Technologies International AG (Sweden, Germany and Italy) and, for the language models behind the Service’s assistant features, OpenAI Ireland Ltd. (EU/EEA and Switzerland). For SMS we use LEKAB Communication Systems AB (Sweden). With your consent, we share data with the analytics and advertising services listed in our cookie policy. We also disclose data to telecom operators and authorities under section 6 and, in the event of a transfer of all or part of the business, to buyers and their advisers. We do not sell personal data.
Except for analytics and advertising services under the cookie policy, we process personal data within the EU/EEA. The language models behind the Service’s assistant features may also process data in Switzerland, which the European Commission has found to provide an adequate level of protection. Some suppliers have group companies in the USA or India that may have remote access, for example for support. Such transfers take place on the basis of the European Commission’s standard contractual clauses (Decision (EU) 2021/914) or the EU–US Data Privacy Framework where the recipient is certified. Contact us if you would like a copy of the safeguards.
We do not keep personal data longer than stated in this privacy policy. If the law requires longer storage, or the data is needed to establish, exercise or defend a legal claim, it is kept for as long as necessary for that purpose. We protect personal data with technical and organisational measures, including encryption in transit and at rest, access control and logging of access.
You have the right to request access to your personal data and rectification, erasure and restriction of processing. You have the right to receive data that you have provided yourself and that we process on the basis of consent or contract in a structured, machine-readable format. If you have given consent, you can withdraw it at any time, without affecting processing that has already taken place.
Send your request to privacy@cmsoftware.se. We respond within one month. It is free of charge, unless the request is manifestly unfounded or excessive. We may need to verify your identity. If the request concerns data we process on behalf of a customer, we forward it to the customer.
We do not make decisions based solely on automated processing that have legal effects for you or similarly significantly affect you. You have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY), www.imy.se.
You have the right to object at any time, on grounds relating to your particular situation, to processing based on our legitimate interest. We will then stop the processing, unless we can demonstrate compelling legitimate grounds that override your interests or need the data for a legal claim. If you object to direct marketing, we always stop. How to object to your support call being used for AI development is described in section 7.
Information about cookies and how to change your consent can be found in our cookie policy.
We may update this privacy policy. The date of the most recent change is shown at the top. If a change means that we start processing personal data for a new purpose, we will inform you before the processing begins, on the website and, where possible, directly to those affected.
