Privacy policy

Last updated: October 2026

This privacy policy is tailored to the LiloCall AI service but is still a template. Placeholders in [brackets] must be completed (company data, service providers, retention periods), and the text should be reviewed by a legal professional before going live.

1. Controller

PR Management Consulting LLC
390 NE 191st St STE 72437
Miami, FL 33179
USA
Email: prmgm@protonmail.com
Data protection officer (if appointed): [name / contact]

2. What LiloCall AI does

LiloCall AI lets streamers, creators, models, AI models and agencies ("Partners") offer paid voice conversations with their fans. An AI voice talks to fans on the Partner's behalf around the clock via a personal web page under the Partner's artist name. Fans talk directly in the browser, without an app and without a phone number, and pay per call minute with prepaid credits. Partners earn a share per billable minute and see calls, statistics and payouts in a dashboard.

Depending on how you use the service, we process data of three groups of people: website visitors and leads, Partners and Fans.

3. Website visits and hosting

This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. On every visit, technical data (IP address, date and time, browser, operating system, pages accessed, referrer) is processed in server logs to deliver the site and keep it secure. Legal basis: Art. 6(1)(f) GDPR. Transfers to the USA are based on the EU-US Data Privacy Framework and/or standard contractual clauses.

Fonts are loaded from Google Fonts (Google Ireland Ltd., Dublin). Your IP address is transmitted to Google in the process. Legal basis: Art. 6(1)(f) GDPR. [Recommended: host fonts locally and remove this paragraph.]

We store your language choice (German/English) in your browser's local storage. It never leaves your device. We do not use tracking, analytics or marketing cookies. [Update this section if analytics or ad pixels are added later.]

4. Demo call requests (leads)

If you request a demo call, we process: name, email, phone number, your role (streamer, model/creator, faceless creator, AI model, agency), community size, your answer on willingness to invest, and your consent to be called.

AI callback: Our AI calls you immediately after you submit the form. The caller is an AI and identifies itself as such. During the call, what you say is processed to answer your questions and to assess whether the service fits you. [State whether calls are recorded and/or transcribed, by which provider, and for how long.] If it is a fit, a team member contacts you for a personal consultation.

Legal basis: Art. 6(1)(a) GDPR (consent to the call) and Art. 6(1)(b) GDPR (pre-contractual steps). You can withdraw your consent at any time. Lead data is deleted after [e.g. 12 months] if no contract is concluded.

5. Partners (creators, models, agencies)

To provide the service to Partners, we process:

Account and contract data: legal name, artist name, contact details, agency affiliation, contract documents.
Voice data: if the AI voice is built from your voice sample, we process your recordings to create a synthetic voice model. The voice model is used exclusively for your LiloCall AI page and is not used for other customers or to train general models. [Name the voice/AI provider and confirm their contractual guarantees.] You can request deletion of the voice model when the contract ends.
Persona settings: personality, style, topics and other instructions you define for your AI voice.
Page data: your artist name, profile picture, bio and social links shown on your public page. Your real name is not published.
Payout and tax data: bank or payout details, tax information and earnings statements.
Usage and statistics: call minutes, earnings and conversation statistics shown in your dashboard.

Legal basis: Art. 6(1)(b) GDPR (contract), Art. 6(1)(c) GDPR (tax and accounting obligations). Retention: for the duration of the contract and afterwards as required by statutory retention periods (up to 10 years for accounting records). Voice samples and the voice model are deleted [e.g. within 30 days] after the contract ends unless you request earlier deletion.

6. Fans (people who talk to an AI voice)

Transparency: every conversation is clearly identified as a conversation with an AI. Fans do not talk to the Partner in person.

When you use a Partner's page, we process:

Account data (if you create one): [e.g. email, username, password hash, age confirmation].
Payment data: credit purchases are processed by [payment provider, e.g. Stripe]. We do not store full card numbers; we receive transaction data such as amount, date, credit balance and the last digits of the card.
Conversation data: your speech is converted to text and processed in real time so the AI voice can answer. [State whether audio/transcripts are stored, where, and for how long.]
Memory feature: to make conversations personal, the AI voice remembers information you share, such as your name, interests and topics of previous conversations. This information is stored per Partner page and linked to your account. You can ask us to view or delete it at any time.
Usage data: call duration, billed minutes, language and technical connection data.

What the Partner sees: [Specify, e.g. aggregated statistics and minutes only / or also first names and conversation summaries.]

Sensitive content: conversations may touch on personal topics. Please do not share information you do not want processed. We do not use conversation content for advertising.

Age: the service is only available to users aged 18 or over. Pages marked "18+" may require age verification by [age verification provider].

Legal basis: Art. 6(1)(b) GDPR (providing the paid conversations), Art. 6(1)(a) GDPR (memory feature, if based on consent), Art. 6(1)(c) GDPR (statutory obligations). Retention: [e.g. conversation data 90 days, memory until account deletion, payment records 10 years].

7. AI processing

We use AI systems for speech recognition, language generation and speech synthesis. [Name the providers (e.g. speech-to-text, LLM, text-to-speech) and their location.] These providers act as processors under data processing agreements and may not use your data to train their own models. [Confirm per provider.] There is no automated decision with legal effect within the meaning of Art. 22 GDPR.

8. Recipients and processors

We share data only where necessary with: hosting (Vercel), telephony for the demo callback ([provider]), AI providers (see section 7), payment processing ([provider]), CRM/email ([provider]), tax advisors and authorities where legally required. All processors are bound by data processing agreements under Art. 28 GDPR.

9. Transfers outside the EU

Where providers are located outside the EU/EEA, transfers are based on an adequacy decision (e.g. EU-US Data Privacy Framework) or standard contractual clauses.

10. Your rights

You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and to object (Art. 21 GDPR), and to withdraw any consent with effect for the future. You may lodge a complaint with a supervisory authority. To exercise your rights, including deletion of your conversation memory or voice model, email [privacy@…].

11. Security

Data is transmitted encrypted (TLS). Access to conversation data, voice models and payout data is restricted to authorized personnel.