Privacy policy
Last updated October 23, 2026
This policy explains how Wincall SpA processes personal data to provide its voice agents for sales, follow-up and collections, including information about people contacted by companies using the service.
1. Wincall and the company contacting you
Wincall SpA operates the platform at trywincall.com. It is responsible for the data it uses for accounts, billing, security, support and its obligations as a provider. For privacy questions, email [email protected].
The company using the service decides whom to contact, why, which offer or debt to discuss, and which campaign to use. The company is responsible for the lawfulness of the data and the contact. Wincall processes the data to perform the requested functions and remains responsible for its own obligations.
If you received a call, you can exercise your rights even without a Wincall account. The company that initiated contact must identify itself and provide its own privacy information.
2. Account, business and team data
We process names, email addresses, Google or Microsoft identifiers, notification phone numbers where provided or required by the role, memberships, permissions and sessions. We store team passwords in cryptographically protected form rather than as readable profile data.
Companies can enter business information, country, time zone, contact details, business hours, offers, negotiation rules, agent instructions and the people responsible for escalations. Plan, usage, purchase, payment and renewal data let us manage the commercial relationship.
We also process technical access and activity records and the messages you send to support. Card details for a purchase are provided to the payment provider in its own environment.
3. Data about people contacted
A company can supply data through files or integrations it configures, including names, Chilean tax IDs where provided, phone numbers, email addresses, commercial references, products of interest, debt information, amounts, due dates and other fields needed for the campaign.
We also generate contact statuses, opt-outs, requested hours, notes, tasks, agreements, sales and payment references. The company must keep this information accurate and current, rely on a valid legal basis, and disclose the source and purpose when required.
Uploading a file does not establish consent, that a debt can be enforced, or that a person can lawfully be contacted. The service must never be used to upload sensitive information or information unrelated to the purpose of the campaign.
4. AI agent, recordings and transcripts
Conversations handled by the agent are processed using voice AI. The service records both sides of the audio and produces transcripts and results such as summaries, objections, agreements or requests to speak to a person. These records let the company review and follow up on the call.
The company must disclose the purpose of the contact and the use of recording and AI and obtain any required authorizations before processing the data. This public policy and the campaign configuration do not replace any notice or consent required for a specific call.
Transcripts and assessments can contain errors. Check them before making decisions that affect the person. A claim that someone paid or a spoken response does not equal confirmation from the payment provider.
5. Purposes and legal basis
Processing requires consent where applicable or another valid legal basis. The presence of a phone number in a file or online does not itself authorize its use. The company must check applicable rules on contacting people, recording and sharing data for the country and campaign type.
We do not sell contact lists or recordings for other advertisers’ campaigns. Any marketing messages Wincall sends on its own behalf must be distinguishable from operational notices and allow recipients to opt out as required by law.
Run authorized sales, follow-up or collection campaigns and manage their results.
Honor recorded opt-outs and restrictions and assign cases requiring attention to team members.
Prepare agreements or payment links within the configured conditions and reconcile their results.
Manage accounts, permissions, plans, minutes, billing and support.
Protect the service, investigate failures and maintain a record of activity and complaints.
6. Asking to stop further contact
You can say during the call that you want contact to stop or tell the company directly. The service supports opt-outs by person or contact channel for the relevant company, as well as time restrictions and wrong-number records.
You can also email [email protected] with your phone number and, if known, the company, date and approximate time of the call. We will ask only for what is needed to locate the contact and verify your request. Please keep bank details, passwords and unnecessary full documents out of your message.
An opt-out does not erase all data or end a commercial obligation. The minimum information necessary to honor the opt-out and comply with legitimate obligations may be retained. The company must still honor stop-contact requests and applicable official mechanisms.
7. Providers and recipients
Depending on the feature, we use Twilio for telephony and audio transport, Google/Gemini for voice conversations and transcription, OpenAI for results analysis, Amazon S3 for files, Google or Microsoft for sign-in, Mercado Pago for payments, and infrastructure and email providers.
Providers receive the context needed for their work. This can include the destination number, campaign information, audio, transcripts, messages or payment references. Their terms and configuration affect processing and retention. Third parties may retain some information.
Authorized company users access data according to their permissions. When a company connects its own systems, those systems can receive data and events about its operation. We may also respond to legally enforceable requests from competent authorities.
8. International processing and merchant payments
Infrastructure and providers can process data outside Chile. We do not offer exclusive data residency in a single country. Transfers must follow applicable laws and safeguards. You can request information about providers relevant to your case.
Wincall subscription payments are separate from a person’s payment to a company for a sale or an agreement. Those payments use the merchant’s Mercado Pago account. Wincall uses payment references, amounts and statuses to record the result.
Credentials a merchant configures for the integration allow it to carry out authorized functions. Keep these credentials out of support messages, agent instructions and campaign files.
9. Retention and account closure
Data is retained to manage campaigns, agreements, payments, support, opt-outs, security and complaints while a valid basis and purpose exist. The law may require some records to be kept. This does not authorize indefinite retention of all data or reuse for incompatible purposes.
Canceling a plan, pausing a campaign or closing a company does not erase its records. The Delete account feature revokes access and schedules the purge described below.
The service does not automatically delete all recordings and contacts after a fixed number of days. Erasure requests require review of the data and files, the minimum opt-out records that must be kept, and retention obligations. We will explain what was erased and any grounds for retention or blocking.
Account deletion and the free trial
When you request account deletion, access is closed and a request is recorded to purge linked data and files. If an operation is in progress or storage fails, deletion remains pending and is retried. Closing access does not complete the purge. If the email address already received a free trial, we retain it only to prevent another trial, together with the previous ID and dates, for six calendar months after effective deletion. We then delete the address. We do not use it for marketing or to restore the account. You can object and request review through the privacy contact.
Financial records and essential references are separated from operational content, and the linked profile is de-identified. The technical policy limits retention of these records to six years from effective deletion, subject to applicable obligations. Backups, data published to external services and other companies’ content are handled separately. Closing the account does not establish that those records were erased.
10. Rights and how to exercise them
You can request information about your data, its source, recipients and purposes, and ask for correction, erasure or blocking where appropriate. You can also object, withdraw consent or exercise other rights available under applicable law.
Contact the company that decided to contact you or email [email protected]. Identify the account or phone number contacted and explain your request. We may verify your identity or authority using the minimum information needed and will never ask for your password.
Wincall will meet its own obligations and coordinate with the responsible company where appropriate. We will respond with reasons within the legal time limits. You can make privacy requests or contact competent authorities even after account closure or subscription expiration.
12. Applicable law and changes
In Chile, Law No. 19,628 applies in its current form. Law No. 21,719 takes effect on December 1, 2026. Its rights and obligations apply from that date. Consumer protection, telecommunications and mandatory rules in the contacted person’s country may also apply.
We publish changes with their effective date. Changes to this page do not retroactively authorize recordings, campaigns or new purposes that require consent or additional notice.