This page summarizes Callout.world's GDPR-oriented controls. The Privacy Policy provides the fuller description of processing.
Data minimization
Customer-demand input is designed to become market-preference data rather than a customer profile. A submitted sentence is held privately in a manual-review queue and is not public until Callout.world explicitly approves it. Obvious identifying information is blocked where detected, review tokens are time-limited and single-use, and approved records are pruned after the configured retention period.
Purpose limitation
Participant information is used to operate paid challenge placements, verify payment, reconcile disputes, provide support, prevent abuse, and meet legal obligations. Public handles, proof links, arena, rank and cumulative challenge values are published by design; contact and payment data remain private.
Legal bases
Depending on the processing activity, Callout.world may rely on contract, legitimate interests, legal obligations, or explicit consent where optional consent-based processing is introduced.
Processors
Production processing may involve PayPal for payments, Cloudflare Turnstile for abuse prevention, the configured SMTP provider for private review/transactional mail, and optional AI processing for aggregate briefs after manual approval. Compatinova is implemented as Callout.world's server-validated compatibility fallback around Turnstile.
Your rights
You may request access, correction, deletion, portability, restriction or objection where those rights apply. Use the dedicated Data Rights form. Callout.world may request verification before disclosing or changing records.
No hidden marketing profile at launch
The launch experience uses first-party, pseudonymous aggregate presence telemetry rather than precise location tracking. If optional marketing or third-party analytics technology is added later, consent requirements should be assessed before activation.