Privacy Policy - SIPCREW

At SIPCREW, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our Voice over Internet Protocol (VoIP) services and related products. By using our services, you consent to the data practices described in this policy.

Your Privacy Rights: We are committed to transparency and compliance with GDPR, CCPA, and other privacy regulations. You have the right to access, correct, delete, and control your personal data.

1. Information We Collect

1.1 Information You Provide

When you register for our services, we collect:

Account Information: Name, email address, phone number, business name
Business Information: Company details, tax ID, business type, industry
Identity Verification: Government-issued ID, proof of address (for KYC compliance)
Billing Information: Payment details, billing address, purchase history
Technical Requirements: Number of ports, agents, dialer version

1.2 Information Automatically Collected

Call Data Records (CDRs): Call duration, timestamps, source/destination numbers, call quality metrics
Usage Data: Service usage patterns, feature utilization, bandwidth consumption
Device Information: IP address, device type, operating system, browser type
Log Data: Server logs, error reports, system diagnostics
Location Data: Geographic location based on IP address (for service routing)

1.3 Call Content and Recordings

If you enable call recording features:

Call recordings are stored encrypted on our secure servers
You are responsible for obtaining consent from call participants as required by law
Recordings are retained according to your settings and our data retention policy
We do not access call content except for technical support or legal compliance

2. How We Use Your Information

We use your information for the following purposes:

2.1 Service Provision

Provide, maintain, and improve our VoIP services
Route calls and manage network infrastructure
Process billing and payments
Provide customer support and technical assistance
Send service notifications and updates

2.2 Compliance and Security

Verify identity and prevent fraud (KYC/AML compliance)
Detect and prevent unauthorized use or abuse
Comply with legal obligations and law enforcement requests
Maintain network security and prevent service disruption
Monitor for compliance with our Acceptable Use Policy

2.3 Analytics and Improvement

Analyze usage patterns to improve service quality
Develop new features and services
Generate aggregate statistics and reports
Optimize network performance and call quality

2.4 Marketing (With Your Consent)

Send promotional materials about our services
Provide information about new features
Conduct surveys and request feedback

You can opt out of marketing communications at any time.

3. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

3.1 Service Providers

Payment Processors: To process transactions securely
Telecommunications Carriers: To route calls and provide connectivity
Cloud Service Providers: For data storage and hosting
Analytics Services: For service improvement (with anonymized data)

All service providers are bound by confidentiality agreements and data protection obligations.

3.2 Legal Requirements

Comply with legal processes (subpoenas, court orders)
Enforce our Terms of Service
Protect our rights, property, and safety
Prevent fraud or security threats
Respond to emergency situations

3.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity. We will notify you of any such change.

3.4 With Your Consent

We may share information for any other purpose with your explicit consent.

4. Data Security

We implement industry-standard security measures to protect your information:

Encryption: TLS/SSL encryption for data in transit, AES-256 encryption for data at rest
Access Controls: Role-based access with multi-factor authentication
Network Security: Firewalls, intrusion detection, and regular security audits
Compliance Certifications: SOC 2 Type II, ISO 27001 compliance
Regular Testing: Penetration testing and vulnerability assessments
Incident Response: 24/7 monitoring and incident response procedures

Important: No method of transmission over the Internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

5. Data Retention

We retain your information for as long as necessary to provide services and comply with legal obligations:

Account Information: Duration of active account plus 7 years
Call Detail Records: 2 years (or as required by law)
Call Recordings: According to your retention settings (maximum 7 years)
Billing Records: 7 years for tax and accounting purposes
System Logs: 90 days for security and troubleshooting

After retention periods expire, we securely delete or anonymize your data.

6. Your Privacy Rights

Depending on your location, you may have the following rights:

GDPR Rights (EU/EEA)

Right to Access: Request a copy of your personal data
Right to Rectification: Correct inaccurate or incomplete data
Right to Erasure: Request deletion of your data ("right to be forgotten")
Right to Restriction: Limit how we use your data
Right to Portability: Receive your data in a structured format
Right to Object: Object to certain data processing activities
Right to Withdraw Consent: Withdraw consent at any time

CCPA Rights (California)

Right to Know: What personal information we collect and how we use it
Right to Delete: Request deletion of personal information
Right to Opt-Out: Opt out of sale of personal information (we don't sell data)
Right to Non-Discrimination: Equal service regardless of privacy choices

To Exercise Your Rights:

Email us at privacy@sipcrew.com

We will respond within 30 days of receiving your request.

7. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure adequate protection through:

EU-US Data Privacy Framework compliance
Standard Contractual Clauses (SCCs)
Binding Corporate Rules
Adequacy decisions by relevant authorities

8. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately.

9. Cookies and Tracking Technologies

We use cookies and similar technologies to:

Maintain your session and remember preferences
Analyze site usage and performance
Provide personalized content
Ensure security and prevent fraud

You can control cookies through your browser settings. Note that disabling cookies may affect service functionality.

10. Third-Party Links and Services

Our services may contain links to third-party websites or integrate with third-party services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

Posting the updated policy with a new "Last Updated" date
Sending email notification to your registered email
Displaying a notice in our service dashboard

Your continued use of our services after changes take effect constitutes acceptance of the updated policy.

12. Contact Information

For privacy-related questions, concerns, or to exercise your rights, contact us:

SIPCREW Privacy Team

Email: privacy@sipcrew.com

Data Protection Officer: dpo@sipcrew.com

Phone: +1 (234) 567-890

Address: [Your Business Address]