CallSanta.Online is operated by:
Ringsdale BV
Van Hallstraat 623
1051HE Amsterdam
The Netherlands
Email: [email protected]
Telephone: +31 6 41 36 23 13
Ringsdale BV is the controller of your personal data for all processing described in this policy.
Family Oriented: CallSanta.Online is intended for families.
Parental Supervision: Children may only use the service under the supervision of a parent or legal guardian (18+).
Consent: We do not knowingly collect personal information from children without verifiable parental consent.
When you create an account, we process:
- Email address
- Login credentials (password or login token/magic link)
- Timestamp of account registration
- Account status (active/blocked)
- Optional: Name of parent or guardian
Purpose: To create and maintain your account, link call minutes, and manage settings.
We do NOT store: Plain-text passwords, sensitive personal data, or child data (except optional info in the child profile).
We use Mollie as our payment service provider.
We process: Purchase amount, type of bundle, transaction status, order number, and the link to your account.
Mollie processes independently: Payment method, name, payment details, and fraud prevention.
Note: We do not receive or store your bank or credit card details.
During a live conversation, we process the following data:
A. Audio & Voice
- **Voice Input:** Transmitted in real-time for speech recognition.
- **Processing:** Input is processed by our AI provider, OpenAI.
- **No Model Training:** We have configured our settings to opt-out of model training. Your audio/text data is not used to improve OpenAI's AI models.
- **Safety Retention:** OpenAI may securely retain encrypted transcripts for up to 30 days solely for abuse monitoring and safety verification purposes. After this period, the data is permanently deleted.
- **Microphone:** No access outside the active session.
B. Transcripts (Ephemeral)
- Temporary text conversion is performed to generate a response.
- We do not store transcripts after the session is complete.
C. Session Metadata
- Random session ID, timestamps, WebRTC connection info.
Parents may voluntarily enter:
- Child's first name
- Age
- Hobbies / Gift wishes
Purpose: This information is used only to personalize the conversation. It is optional and can be deleted by the parent at any time.
Collected only with consent for up to 6 months. Includes session duration and page interactions. We do not use advertising cookies, tracking cookies, device IDs, or fingerprinting.
To provide the service, including account management and call minutes.
Required for analytics and optional child profile information. Consent may be withdrawn at any time.
We store payment/invoice data as required by tax laws.
To maintain platform security and prevent fraud.
To ensure a responsible adult is authorizing the use of this Service, we verify your identity through a monetary transaction (the purchase of call minutes).
We accept only payment methods that provide a transaction notification to the account holder (e.g., Credit Card, Bank Transfer).
This purchase serves as Verifiable Parental Consent for us to collect and process the optional child profile data you subsequently provide.
We share data only with the following providers acting on our behalf (Processors) or independently (Controllers). They receive only the minimum necessary data.
If data is processed outside the EU/UK, we use Standard Contractual Clauses (SCCs), encryption, and data minimization to ensure security.
We apply HTTPS/TLS, WebRTC end-to-end encryption, AES-256 encrypted storage, least-privilege access, and strict logging/monitoring.
Account Data: Until account deletion.
Inactive Child Profiles: 24 Months. If your account is inactive for 24 months, we automatically delete all child profile data (name, interests) while keeping your parent account active.
Payment Data: 7 years (Legal tax obligation).
Real-time Audio: Not stored. Processed in-memory only during the session.
Transcripts: 30 Days. Securely held by OpenAI solely for abuse monitoring/safety verification, then permanently deleted.
Analytics: Max. 6 months.
You may request access, rectification, deletion, restriction, objection, or portability of your data. You may withdraw consent at any time.
Contact: Make requests via your account settings or email [email protected]. We may request additional information to confirm the correct account.
Functional Cookies: Strictly necessary for login and call minutes.
Analytic Cookies: Optional (only with consent).
No Tracking: We do not use advertising or tracking cookies.
No Collection Without Consent: CallSanta.Online does not knowingly collect personal information from children under 13 without verifiable parental consent.
Parental Control: All child-related data is entered voluntarily by the parent after the verification step (payment).
Review & Delete: Parents may review the personal information collected about their child, request its deletion, and refuse further collection by contacting [email protected].
No Ads: We do not use children's data for marketing, profiling, or advertising.
Residents of certain US states (CPRA, CPA, CTDPA, UCPA, VCDPA) have rights to know, access, correct, and delete their data. CallSanta.Online does not sell or share personal data for advertising.
Contact: [email protected] to exercise any of the above rights.
We may update this policy. The date above reflects the latest version. Significant changes will be notified via email or account notification.
Questions about this Privacy Policy?
Contact: [email protected]