Privacy Policy

1. Data we collect

Website and account data: name, email address, company name, and messages you submit through our forms; account credentials; and payment references (we do not store full card numbers — payment card processing is handled by our payment providers).

Service data: call detail records (numbers, timestamps, duration, routing), usage and billing records, and — where you enable it — call recordings and transcripts.

Technical data: IP addresses, browser information, and analytics events collected via Google Analytics and Vercel Analytics.

2. How we use data

We use personal data to provide and bill the Services, respond to inquiries, secure the platform (including fraud detection), comply with legal obligations applicable to communications providers, and improve our website and products.

We do not sell personal data. We do not use the content of your calls or recordings for advertising.

3. Legal bases

Where GDPR applies, we process data on the bases of contract performance (providing the Services), legitimate interests (security, fraud prevention, product improvement), legal obligation (telecom and tax record-keeping), and consent (marketing communications, optional analytics).

4. Sharing

We share data with service providers who help us operate — cloud hosting (Google Cloud, Vercel), carrier partners who terminate calls, payment processors, email delivery providers, and analytics providers — each bound to process data only for the services they provide to us.

We may disclose data where required by law, regulation, or valid legal process.

5. Retention

Call detail and billing records are retained as required by applicable telecom and tax regulations. Call recordings are retained per your account's configured retention period and then deleted. Website lead data is retained while relevant to our relationship and deleted upon verified request where no legal obligation requires retention.

6. Security

Data is encrypted in transit, core systems run in private networks not exposed to the public internet, and access is restricted and logged. No system is perfectly secure; we ask you to protect your account credentials and API keys.

7. Your rights

Depending on your jurisdiction, you may have rights to access, correct, export, restrict, or delete your personal data, and to object to certain processing. Submit requests via our contact page; we verify and respond within the timelines required by applicable law. See our GDPR page for EU/EEA-specific details.

8. International transfers and children

Our infrastructure is primarily located in the United States. Where data is transferred from the EU/EEA or UK, we rely on appropriate safeguards such as standard contractual clauses.

The Services are not directed to children under 16 and we do not knowingly collect their data.

9. Changes

We will post updates to this policy on this page and update the effective date. Material changes will be highlighted via the Services or email.