1. Scope
This Policy describes how [Company Legal Name] handles personal information in connection with TrustCall's websites, apps and cloud PBX / VoIP services. Our role depends on the processing: we manage some information for our own service operations and may process customer communications on a business customer's instructions. Separate contractual data-processing terms may apply.
2. Information We Collect
Information comes from you, your organization's administrators, use of the Services and providers involved in delivering or verifying service. We seek information relevant to the stated purposes. Not every category below is collected for every feature or user.
3. Account Information
Account details may include your name, email address, phone number, organization, login identifiers, preferences and support communications. If you use an external sign-in provider, we receive the profile or identity information needed for that sign-in, not your provider password.
4. Business/KYC Information
Depending on country, service and number requirements, we may process identity or business documents, address evidence, authorized-contact details and verification results. These may be shared with the relevant telecom or verification provider. Do not send documents unrelated to an actual request.
5. Calling Information
We process information needed to establish, route, manage and account for calls, such as calling and called numbers, extensions, direction, timestamps, connection status and network information. Contacts or device permissions used by optional app features are subject to your device controls; permission is not a blanket authorization for unrelated uses.
6. Call Detail Records (CDRs)
CDRs may contain call identifiers, caller and destination numbers, start and end times, duration, billable seconds, status, direction, account/tenant associations and billing information. CDRs are communication metadata, not by themselves an audio recording. We use them for service delivery, usage reporting, billing, troubleshooting, fraud prevention and applicable telecom obligations.
7. Call Recordings
Recording functionality may be available when enabled for a service. Recordings can include voices and information discussed during a call. Customers must provide legally required notices, obtain required consent and comply with relevant recording laws. Access, retention and sharing must follow the customer's lawful instructions and applicable obligations.
8. Technical Information
We may process IP addresses, device and operating-system information, app version, push-notification identifiers, authentication events, diagnostic logs and errors. Error reporting may include request context and account identifiers. Limit sensitive information in support submissions; diagnostic information is used for operation, security and troubleshooting.
9. Payment Information
We process pricing, wallet transactions, payment status, invoices and payment-provider references. Payment processors or app stores handle payment credentials under their own policies. The information shared depends on the payment method; do not send full card numbers or payment passwords to support.
10. How We Use Information
We use information to provide requested services, authenticate users, manage numbers and calls, verify eligibility, administer payments, provide support, communicate service updates, improve reliability and protect users. Depending on applicable law and our role, processing may rely on a contract, legal obligation, legitimate interests or consent. Optional marketing is subject to applicable choices and consent requirements.
11. Telecom Compliance
Processing may be necessary for applicable telecommunications, numbering, KYC, anti-fraud, privacy, data protection and communications requirements. Obligations vary by jurisdiction, service and carrier. This Policy does not claim any unverified license, certification or regulator approval.
12. KYC and Identity Verification
We and relevant providers may review submitted information to confirm identity, business details, number eligibility and permitted use. Additional information may be requested when requirements change. A verification request or upload does not itself establish approval.
13. Fraud and Abuse Prevention
Account, technical, billing and calling metadata may be used to investigate suspicious access, artificial traffic, scams and service misuse. Reviews are for security, compliance, fraud prevention and service protection; this is not a claim that every conversation is monitored or that all abuse can be detected.
14. Data Sharing
TrustCall does not sell customer personal information as a commercial product. We share information as needed to provide and protect the Services, comply with law, follow authorized instructions or carry out a legally permitted business transaction with appropriate protections. Your organization's authorized administrators may have access consistent with their role.
15. Telecom/SIP Providers
Carriers and communications providers receive routing information, phone numbers, relevant CDRs and verification information necessary to allocate numbers, connect calls, meet carrier rules and fulfill applicable regulatory obligations. Interconnected networks may process data under their own legal responsibilities.
16. Cloud Infrastructure Providers
Hosting, storage, delivery and operational providers may process information needed to run and maintain the platform. Processing locations depend on the applicable provider and service configuration; contact [Privacy Email] for information relevant to your account.
17. Payment Processors
Payment providers and app stores receive the information needed to authorize, settle, verify and investigate payments, prevent fraud and meet their obligations. Their independent processing is governed by their notices and applicable law.
18. Security/Fraud Providers
Security, diagnostic and fraud-prevention providers may receive relevant technical events and account context. The current application integrates Sentry for error reporting; this is distinct from advertising-cookie tracking. Provider use and configuration can change as described in updated notices.
19. Legal and Regulatory Disclosure
We may preserve or disclose relevant information when required by valid legal process or applicable law, or where otherwise lawfully necessary to protect rights, investigate fraud or address security threats. We assess requests in light of our legal obligations and any applicable restrictions on notice.
20. Data Security
TrustCall uses reasonable technical and organizational safeguards appropriate to the Services and the information processed. No system is completely secure. See Data Security for scope, customer responsibilities and limitations; no certification or end-to-end encryption guarantee is implied.
21. Data Retention
Retention depends on the purpose, data category, customer instructions and applicable obligations. Some records may be retained after account closure for telecom compliance, fraud prevention, security, billing, accounting, disputes or other legal requirements. Retained data should be limited to those purposes. Contact [Privacy Email] for applicable retention information; this Policy does not promise a uniform deletion period.
22. International Data Processing
Service delivery and providers may involve processing outside your location. Where applicable law requires transfer safeguards, the relevant arrangements must be used. Ask [Privacy Email] about processing locations and safeguards for your service; we do not promise that all information remains in one country.
24. Customer Responsibilities
Business customers must have a lawful basis to provide personal information and use calling, contact and recording functions. Provide appropriate notices, manage authorized access and honor applicable requests from callers, employees and other individuals whose information you control.
25. Children's Privacy
TrustCall is intended for business communications, not for children below the age required by applicable law to use the service. If you believe a child has provided information inappropriately, contact [Privacy Email] so the circumstances can be reviewed.
26. Your Privacy Rights
Depending on your location, applicable law and our role, you may have rights to access, correct, delete, restrict, object, obtain portable data or withdraw consent. See Your Rights for how to request assistance, identity verification and legal exceptions.
27. Changes to Privacy Policy
We may update this Policy to reflect service, provider or legal changes. The effective and last-updated dates identify the version. We will provide additional notice or request consent where required by applicable law.
28. Contact
Privacy requests: [Privacy Email]. Service support: [Support Email]. Provider: [Company Legal Name], [Company Address]. Website: https://sip.trustcallpbx.com.