What we collect, and what we never do.

What we collect

• Account details: your name, email address, and phone number.
• Case details: the company, the category, your description of what happened, and the outcome you want.
• Documents you choose to attach: receipts, statements, correspondence.
• Correspondence: the messages we send on your behalf and the replies we receive.
• Payment records: handled by our payment processor. We never see or store your full card number.

Why we collect it

Every item above exists to make your case credible to the company we write to. A complaint with dates, amounts, and documents gets answered; a vague one does not. We do not collect anything we do not use for your case.

What we never do

• We never sell your data.
• We never share it with advertisers or data brokers.
• We never ask for your Social Security number, passwords, or account PINs.
• We never send a document to a company unless you attached it for that purpose.

Verification

Before your first case is sent, you confirm your email by link and save a phone number on your account. We may confirm that phone by SMS or call (staff and/or an automated code when SMS verification is enabled). This is the reason companies take our messages seriously: every case behind them is tied to a real, reachable person. We use the phone number for verification, case notifications, and inclusion on tickets to the company as needed — not marketing.

Sensitive cases

Some complaints touch financial or medical matters. Share only what is needed to identify the transaction or appointment — a last four, a date, an invoice number. If a case needs a sensitive identifier, we will tell you how to reference it without disclosing it. Our staff tools flag cases that appear to contain this kind of data so it can be removed.

Documents and storage

Uploads are limited to PDF, JPG, and PNG at 10 MB each, and are stored privately, not on any public URL. Files are marked pending review on upload and are not forwarded to a company until a staff member has looked at the case. We do not currently run an automated malware scanner on uploads; we say so rather than implying protection we do not have.

Your control

You can request deletion of your account from your account settings. We remove your cases, documents, and profile, keeping only the payment records we are legally required to retain. You can also ask us for a copy of everything held on your account.

Reporting a problem

If you believe you have found a vulnerability or a data-handling mistake, write to support@callred.com with the subject line "Security". Please give us a description and steps to reproduce. We will acknowledge within one business day and will not pursue anyone who reports in good faith.

What we do not claim

We do not hold compliance certifications we have not earned and we do not display security badges as decoration. If you need a specific compliance posture for your use, ask us and we will answer plainly.