Privacy Policy
Version 1.0.1. Effective October 29, 2026. Fingerprint d5069dfed803b82f
Here's the short version: I don't keep your voice. I only listen to people who said yes, I keep a few short notes you can read and delete, and I never sell anything about you.
The plain-words notes are there to help you read. If one ever differs from the formal text below it, the formal text applies.
Who is responsible
PullCall ("PullCall", "we", "us") is responsible for the personal data described in this Privacy Policy and is the controller of that data under laws such as the GDPR and UK GDPR. Privacy requests: support@pullcall.com (subject "Privacy").
This policy covers the PullCall Discord app, the website at pullcall.com, the web companion and the optional desktop companion app and in-game addon.
What we collect
In plain words: Your Discord basics, your server's settings and usage, your consent records, and only the game data you choose to connect.
We collect the following, depending on which parts of the Service you use:
- Discord sign-in (scopes identify and guilds): your Discord user ID, username, display name and avatar, and the list of servers you belong to with your permissions in each. We use the server list only to show servers you can manage and to check that you may change their settings. We do not store the full list.
- Bot data from Discord: the IDs, names and icons of servers that use PullCall, the voice channels it joins and the members who opt in. Audio is handled as described in Voice below.
- Server data: settings, plan and billing status, and usage counts (answers, voice seconds, AI tokens, cost, response time and which tool answered).
- Consent records: which document version you accepted, when, a fingerprint of the document text, and the IP address and browser the request came from. Each voice opt-in records a fresh 18+ confirmation for that server.
- Memory notes: short text notes about you as a player, as described in Memory below.
- Character data, if you connect it: the character profile you type in (region, realm, name, class, spec, level, game version and goals), a character link you paste with /link, or characters imported from the game publisher's official API with your permission.
- Companion uploads, if you install the optional companion: character state (quests, gear, professions, reputations, current zone and group roster), short combat summaries for each pull, and live state while you play.
- Billing: Stripe customer and subscription IDs, and records of top-up purchases and auto-reload charges. Card details stay with Stripe or Discord.
- Technical data: server logs (IP address, request path, errors) and, if enabled, scrubbed error reports.
- Website analytics, only if you accept analytics cookies, as described in Cookies below.
Voice
In plain words: I never keep your voice. I only listen to people who said yes, and only to answer them.
PullCall listens only to people who have opted in to voice for that server. Audio from anyone else is discarded before it is decrypted.
Audio from opted-in users is streamed to Google (Gemini API, paid tier) to understand the question and produce a spoken answer. PullCall never records or stores audio. Push-to-talk in the web companion works the same way: your browser streams audio to Google for the answer, and we do not store it.
Text you type to the bot or in the web companion is sent to Google to produce an answer. We do not store it, except as described in Help improve PullCall if you turn that on.
You can turn voice off at any time with /optout or on your account page. Processing stops immediately.
Memory and session summaries
In plain words: I keep up to about 20 short notes per player, like your goals and main. You can read them, delete them or turn memory off with /memory.
PullCall keeps short text notes for each opted-in player in each server, such as goals, preferences and progress, to personalize help. It keeps at most about 20 notes per player. Notes are never audio or transcripts.
You can see your notes with /memory show, delete one with /memory forget, delete all of them with /memory clear and stop new notes with /memory off. /optout and deleting your data also delete them.
During a voice session, PullCall keeps a running text summary of the conversation so it can keep context if the connection is renewed. The summary is discarded when the session ends.
Help improve PullCall (optional)
In plain words: This is off unless you turn it on. If you do, I keep the text of our conversations for up to 30 days so the PullCall team can check my answers and fix mistakes. Never audio, only your own words, and never used to train AI models. You can see and delete it any time.
"Help improve PullCall" is a separate, optional consent. It is off by default and is not part of the voice opt-in. You can turn it on or off with /improve on or /improve off in Discord, on your account page, or in the companion. We record each change with the version and a fingerprint of the text you agreed to.
While it is on, we store, for up to 30 days: the text transcript of what you said to PullCall and what PullCall said back (from the speech-to-text the voice model already produces), the tools PullCall used with their inputs and results (shortened), the combat analysis findings it used, timing, the AI model used, a link to the matching usage record, whether the relevance filter stayed silent and why, and errors. Web chat turns are stored the same way.
We never store audio for this purpose. In a voice channel with several people, we store only the words of people who turned this on. Anyone else's words are replaced with "[other speaker]", and when speech from several people overlaps in one turn and someone in it has not turned this on, that whole utterance is withheld.
Authorized PullCall staff review these records to check answer quality. An automated reviewer (an AI model run by our processor Google, see below) also reads them to flag likely mistakes, such as advice that is not supported by the tool results or that needs something you cannot get. It only produces notes for our staff and never changes anything automatically. Staff accounts can turn on more detailed logging for their own conversations; it still needs their own consent.
These records are used for quality review only. They are not used to train AI models, ours or anyone else's, and are not shared for advertising. Discord's Developer Policy does not allow using Discord data to train AI models; this is consented quality review, not training.
You can view and delete your stored conversations at any time under My conversations on your account page. Turning the setting off stops new records right away; deleting removes existing ones, including staff notes and automated review results about them. Deleting your account deletes them too. A server's admins can also turn transcript capture off for their whole server.
Raw combat logs (optional)
In plain words: Only if you tick "Share full combat logs for review" in the companion. Then I upload each pull's raw log, compressed, so the team can check my coaching. Deleted after 30 days.
The companion never uploads raw combat log lines unless you turn on "Share full combat logs for review" in the app. It is off by default and needs "Help improve PullCall" to be on.
When it is on, after each pull the companion uploads that pull's section of the game's combat log file, compressed, at most 5 MB per pull and 200 MB per month. A combat log contains what the game wrote: names of characters in your group and nearby, spells, damage, healing and timestamps. We store it encrypted in Amazon Web Services storage, link it to the pull's summary, and delete it after 30 days. Authorized PullCall staff use it only to check coaching quality.
You can see and delete your uploaded logs on your account page, and turn the option off in the companion at any time.
Characters and the companion
In plain words: Game data comes from official APIs or from the companion you install. Imported character data is deleted after 30 days at most.
If you import characters, we fetch public character and item data from the game publisher's official APIs. We cache that data for at most 30 days and then delete it, as the API terms require.
The optional companion uploads only what its preview shows: character state, a short summary of each boss pull (at most a few kilobytes; raw log lines only if you turn on “Share full combat logs for review”, see above) and live state while you play. Pull summaries can include the character names of other people in your group, as the game wrote them, and are deleted after 30 days. You can pause uploads, remove a character or unlink the companion at any time.
How we use data, and our legal bases
We use personal data to provide the Service (answers, voice, memory, coaching and the dashboard), to bill and enforce usage caps, to keep the Service secure and prevent abuse, to support you, and to understand and improve the Service.
Our legal bases under the GDPR and UK GDPR are: performance of our contract with you (the Service and billing); your consent (voice processing, the optional character connections and companion, Help improve PullCall and analytics cookies), which you can withdraw at any time; our legitimate interests in securing, supporting and improving the Service (logs, error reports and product statistics without content); and legal obligations (tax and accounting records, proof of consent).
We use data from Discord only to provide PullCall's features, as Discord's Developer Policy requires, and we do not build profiles of users across servers.
Who processes your data
In plain words: A short list of providers helps me run. Here's who they are and what they see.
We share personal data only with the service providers below, and only as needed to run the Service. Each processes data on our behalf under its own terms and data protection commitments, except where noted as an independent source.
| Provider | Purpose | Data involved | Location |
|---|---|---|---|
| Discord | Sign-in (identify, guilds), the bot, voice channels and in-app purchases | Discord IDs and profile, server membership, voice audio in transit, purchase entitlements | United States |
| Google (Gemini API, paid tier) | Generating text and voice answers | Audio and text of opted-in users' questions, relevant memory notes and game context. On the paid tier Google does not use prompts or responses to improve its products; it may keep them for up to 55 days to detect abuse | United States |
| Google (Gemini API, paid tier): automated quality review | Only for Help improve PullCall records: an AI model flags likely mistakes for our staff | Stored transcripts, tool results and findings of users who turned it on (never audio, never other speakers' words) | United States |
| Google Analytics 4 | Website analytics, only after you accept analytics cookies | Pages visited, a few product steps, cookie ID, browser and approximate location. No Discord ID, name or content | United States |
| Google Search Console | How the website appears in search | Aggregated search data only; nothing about you | United States |
| Stripe (including Stripe Tax) | Website payments, subscriptions, top-ups, auto-reload and tax calculation | Billing name, email, address, payment method and tax ID. We never see full card numbers | United States |
| Amazon Web Services | Hosting, database, file storage, logs, key management and website delivery | All data the Service stores | United States (us-east-1) |
| Sentry (if enabled) | Error reports | Error message, stack trace and app version, scrubbed of cookies, authorization headers, IP addresses, user names and message content | United States |
| Blizzard Entertainment (official game APIs) | Independent data source for public character and item data, only when you connect a character | Your character name and realm, and the account authorization you grant when importing | United States |
What we don't do
We do not sell personal data or share it for cross-context behavioral advertising. We do not run ads or work with data brokers. We do not use voice, transcripts or message content to train AI models.
How long we keep data
In plain words: Audio: never. Most other things: until you delete them. Game and log data: 30 days at most.
We keep personal data only as long as we need it for the purposes above. The table shows the main categories. When you delete your data, we remove or anonymize these records unless the table says otherwise.
| Data | How long |
|---|---|
| Voice audio | Not recorded or stored by PullCall. Streamed to Google only to produce the answer |
| Voice session summary | Until the voice session ends |
| Memory notes (about 20 per player) | Until you delete them with /memory, opt out or delete your data |
| Help improve PullCall records (optional): transcripts, tool calls, findings, staff notes and automated review results | Up to 30 days, or sooner if you delete them or turn it off and delete |
| Raw combat logs (optional, companion) | 30 days, or sooner if you delete them |
| Companion pull summaries | 30 days |
| Companion character state and live state | Until replaced by a newer upload, or until you remove the character, unlink the companion or delete your data |
| Characters imported from official game APIs | At most 30 days |
| Character profile you typed in, and /link links | Until you remove them or delete your data |
| Account (Discord ID, username, avatar) | Until you delete your data. We then keep only your Discord ID as a deleted marker so blocks and consent records stay valid |
| Voice opt-ins | Until you opt out or delete your data |
| Consent records | Kept after deletion as proof of consent, for as long as the law requires or allows |
| Usage counts | For as long as the server uses PullCall and as financial records require. Your user ID is removed when you delete your data |
| Billing records | As long as tax and accounting law requires |
| Server settings | While the server uses PullCall, or until a server owner asks us to delete them |
| Server logs | 14 days |
| Database backups | 7 days |
| Session cookie | 7 days, or until you sign out |
Your choices and rights
In plain words: You can see what I keep, take a copy and delete it. Most of it is one command or one button away.
Stop voice: /optout in Discord or the voice switch on your account page. Memory: /memory. Character data and the companion: your account page and the Link page.
Delete everything: use Delete my data on your account page. Voice processing, memory, character links and companion data stop and are removed immediately. Your request then enters a deletion queue, which removes or anonymizes the rest within 30 days. We keep only what the Retention table says we keep.
Depending on where you live (for example under the GDPR, UK GDPR or US state laws such as the CCPA), you may have the right to access, correct, delete or receive a copy of your personal data, to restrict or object to processing, to withdraw consent and to not be discriminated against for using these rights. To use them, or to ask for a copy of your data, write to support@pullcall.com (subject "Privacy"). We may need to confirm that the request comes from the account holder, and we respond within 30 days.
If you are in the EEA or the UK, you can also complain to your local data protection authority.
Under 18
The Service is for people 18 and older. We do not knowingly collect personal data from anyone under 18. If you tell us you are under 18, on your account page or with /optout reason:under18, or a server admin blocks you as under 18, we delete your data and keep only a note that you must not be processed. If you believe someone under 18 is using PullCall, contact us.
International transfers
We host the Service in the United States. If you use it from outside the United States, your data is transferred to and processed in the United States. Where the law requires, we rely on appropriate safeguards for these transfers, such as the European Commission's Standard Contractual Clauses or a provider's certification under the EU-U.S. Data Privacy Framework.
Security
Data is encrypted in transit and at rest. Secrets that servers provide are encrypted with a separate key for each secret, wrapped by AWS Key Management Service, and are never shown back in full. Access to production systems is limited to the people who run the Service. No system is perfectly secure, but we take care to protect your data and will notify you and the authorities of a breach where the law requires.
Changes to this policy
Each version of this policy has a version number and an effective date, shown at the top of this page. When we make a material change, we will announce it on the website or in Discord and ask you to review and accept the new version before you keep using voice, the web companion or paid features.
Contact
Privacy questions and requests: support@pullcall.com (subject "Privacy"). Everything else: support@pullcall.com.
See also Terms of Service and Acceptable Use Policy.
World of Warcraft and Blizzard Entertainment are trademarks or registered trademarks of Blizzard Entertainment, Inc. PullCall is an independent product and is not affiliated with or endorsed by Blizzard Entertainment.