Legal
Privacy Policy
Last updated: September 2, 2026
This Privacy Policy explains how HelloPBX ("HelloPBX," "we," "us," or "our") collects, uses, and protects information in connection with our cloud PBX, SIP trunking, DID and toll-free numbers, call tracking, and wholesale voice services (the "Service"). By using the Service, you agree to the practices described in this policy.
1. Information we collect
We collect the following categories of information:
- Account information — name, email address, username, phone/WhatsApp number, and Telegram ID if you choose to provide it.
- Billing information — account balance, top-up history, and cryptocurrency transaction details (wallet addresses and on-chain transaction identifiers used to credit your account). We do not process card numbers or bank account details directly.
- Call data — call detail records (CDR) such as the numbers dialed or received, call duration, timestamps, cost, and call status. We do not access the content of your calls.
- Call recordings — only when you explicitly enable recording on a number or extension; recordings are stored securely and accessible only to your account.
- Technical & security data — IP address, browser/device information, and login activity (including failed login attempts), used to secure your account and prevent fraud.
- Support communications — information you provide when contacting support or sales.
2. How we use information
- To provide, maintain, and bill for the Service.
- To authenticate your account and protect it against unauthorized access and fraud.
- To monitor for abuse, spam, or activity that violates our Terms of Service.
- To respond to support requests and communicate service-related notices.
- To comply with legal obligations and respond to lawful requests from authorities.
- To improve the reliability and performance of the Service.
3. Cryptocurrency payments
When you fund your account with Bitcoin, USDT, or another supported cryptocurrency, the transaction is recorded on the relevant public blockchain, which is outside of HelloPBX's control and is inherently public and immutable. We store the wallet address and transaction identifier associated with your deposit solely to reconcile and credit your account balance.
4. Cookies & analytics
We use a small number of strictly necessary, encrypted, HTTP-only session cookies to keep you signed in — we do not use these cookies for advertising or third-party tracking. Our marketing site uses privacy-focused, cookie-less analytics to understand aggregate traffic to our pages; this data cannot be used to identify you individually.
5. How we share information
We share information only where necessary to operate the Service:
- With underlying telecom carriers and network partners, to the extent necessary to route and complete calls, messages, and number provisioning.
- With payment infrastructure providers, to process cryptocurrency deposits.
- With law enforcement or regulators, where required by a valid legal process.
- With service providers who support our operations (e.g., hosting), under confidentiality obligations.
We do not sell your personal information to third parties.
6. Data retention
We retain account and billing information for as long as your account is active and for a reasonable period afterward to comply with legal, tax, and fraud- prevention obligations. Call detail records and recordings are retained for operational and billing purposes and may be purged after an extended period of inactivity, consistent with applicable law.
7. Data security
We use industry-standard safeguards to protect your information, including encrypted storage of sensitive credentials (such as two-factor authentication secrets), rate-limiting and bot protection on login and account-creation flows, and access controls that restrict administrative access to customer data. No system is perfectly secure, and we cannot guarantee absolute security.
8. Your rights
Depending on your jurisdiction, you may have the right to access, correct, or request deletion of your personal information, or to object to certain processing. You can update most account information directly from your portal under Settings, or contact us using the details below for any other request.
9. Children's privacy
The Service is intended for business and adult personal use and is not directed to individuals under 18. We do not knowingly collect personal information from children.
10. International data transfers
Because telecommunications routing is inherently global, information may be processed or transmitted through infrastructure and carriers located in countries other than your own. We take reasonable steps to ensure information is handled consistently with this policy wherever it is processed.
11. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above.
12. Contact
Questions about this policy or your information can be sent to [email protected].
See also our Terms of Service.
