Privacy Policy

Last updated: January 1, 2025

PipePhone, a service operated by CloudCraftr LLP ("we," "our," or "us"), respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services.

1. Information We Collect

Information You Provide

  • Account Information: Name, email address, and password when you create an account
  • Payment Information: Credit card details and billing address (processed securely by Stripe)
  • Call Data: Phone numbers you call, call duration, and call timestamps
  • Communications: Information you provide when contacting our support team

Information Collected Automatically

  • Device Information: Browser type, operating system, device type
  • Usage Data: Features used, time spent, pages visited
  • IP Address: For security and fraud prevention
  • Cookies: See our Cookie Policy for details

Information We Do NOT Collect

  • Call Recordings: We do not record or store any audio from your calls
  • Call Content: We have no access to the content of your conversations

2. How We Use Information

We use the information we collect to:

  • Provide, maintain, and improve our calling services
  • Process payments and prevent fraud
  • Send account-related communications (e.g., receipts, alerts)
  • Respond to your inquiries and support requests
  • Analyze usage patterns to improve user experience
  • Comply with legal obligations
  • Enforce our Terms of Service

3. Information Sharing

We do not sell your personal information. We may share your information with:

  • Service Providers: Third parties that help us operate our services (see Section 4)
  • Legal Requirements: When required by law, court order, or governmental request
  • Business Transfers: In connection with a merger, acquisition, or sale of assets
  • With Your Consent: When you explicitly agree to sharing

4. Third-Party Services

We use the following third-party services to operate PipePhone:

Twilio

Provides our voice calling infrastructure. Twilio processes call data (phone numbers, duration) to route calls.

Twilio Privacy Policy →

Stripe

Handles payment processing. Stripe stores and processes your payment information securely. We never see your full card details.

Stripe Privacy Policy →

Clerk

Manages user authentication and accounts. Clerk stores your login credentials and session information securely.

Clerk Privacy Policy →

5. Data Retention

We retain your information for as long as necessary to provide our services and fulfill the purposes described in this policy:

  • Account Data: Retained while your account is active and for 30 days after deletion request
  • Call Records: Retained for 90 days for billing and support purposes
  • Payment Records: Retained as required by financial regulations (typically 7 years)
  • Support Communications: Retained for 2 years

6. Data Security

We implement industry-standard security measures to protect your data:

  • HTTPS encryption for all data in transit
  • Encrypted storage for sensitive data at rest
  • Regular security audits and vulnerability assessments
  • Access controls and authentication for our systems
  • PCI-DSS compliant payment processing through Stripe

While we strive to protect your information, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

For All Users

  • Access: Request a copy of your personal data
  • Correction: Update or correct inaccurate information
  • Deletion: Request deletion of your account and associated data
  • Export: Receive your data in a portable format

For EU/EEA Users (GDPR)

  • Right to restrict processing
  • Right to object to processing
  • Right to withdraw consent
  • Right to lodge a complaint with a supervisory authority

For California Users (CCPA)

  • Right to know what personal information is collected
  • Right to know if personal information is sold or disclosed
  • Right to opt-out of sale of personal information
  • Right to non-discrimination for exercising these rights

To exercise any of these rights, please contact us at privacy@pipephone.com.

8. International Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. We ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission, for transfers outside the EU/EEA.

9. Children's Privacy

PipePhone is not intended for children under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

11. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

By using PipePhone, you acknowledge that you have read and understood this Privacy Policy.