in2pbx Privacy Policy Agreement

Last updated: Sept. 5, 2018

Privacy Policy Agreement

Your continued use of in2pbx means you are herein consenting to the following data procedures expressed within this agreement.

This policy only describes how in2tel treats your information, not how other organizations treat your information. If you are using in2tel services in a workplace or on a device or account issued to you by your employer or another organization, that company or organization likely has its own policies regarding storage, access, modification, deletion, and retention of communications and content which may apply to your use of any in2tel service. Content that would otherwise be considered private to you or to a limited group of people may, in some cases, be accessible by your administrator. Please check with your employer or administrator about the policies it has in place regarding your communications.

Nature and purposes of processing

in2pbx provides cloud-based communication and collaboration services for Customers. in2pbx processes the personal data of the individuals who participate in these communications.

Information we collect

Through your usage of in2pbx, in2tel processes different kinds of information. Some of it is personally identifiable and some are non-identifying or aggregated. Here are the types of information we collect or receive:

• Personal Information – This includes all the information associated with your Extension. It includes names and full contact details for the individual or business that created the account. This is vital for PBX administrative purposes and basic call functions.
• Trunk – This is the telephone numbers of the trunks you created and used by the system for basic call functions.
• LDAP – This includes name, email address, telephone number, office number, home number, department information of contacts stored in the LDAP address book. This feature is disabled by default and is opt-in only.
• Call Detail Records (CDRs) – This is a record of the communication that has traversed the in2pbx. It typically includes source/destination name, source/destination number, source/destination IP, and other metrics. CDRs allow you to check call detail records.
• Call Recordings – Call recordings are disabled by default and are opt-in only. The stored information includes phone numbers of the call parties, IP addresses, and all the recorded conversations. The system also supports uploading custom prompt to notify both parties that the call is being recorded. What’s more, call parties can stop/interrupt a recorded call to protect personal data from being stored.
• Voicemail – This includes the called party’s name, phone number, and all data left in the voicemail. This feature can be disabled if you do not want the system to store the above voicemail data. The system also supports uploading custom prompt to notify the party who left the voicemail about the personal data processing.
• Conferencing – This includes the name and phone number of all participants in the conference call. If Call Recording is enabled and opted-in, all recorded conversations will also be included.
• System Log – When Debug log is enabled, System Log will capture the call, party’s name, and number for debugging purposes. Debug log is disabled by default.
• Remote Management – Remote Management feature is disabled by default and is opt-in only and password protected. It includes access to all the above PBX-level personal data and non-personal data including PBX Concurrent Calls, PBX extension numbers, etc.
• Instant Messaging Service – Instant Messaging Service (IM Service) is disabled by default. It includes messages, graphics, documents, or any other materials submitted by using this IM Service. All information is the sole responsibility of the person from whom such Data originated. You are wholly responsible for all download, uploaded or otherwise transmitted via the IM Service. in2tel neither stores nor is responsible for the Data that you submit to the IM Service.

How we use your information (process your data)

in2tel uses your information for the following:

• Provide communication services – To deliver telephony and communication services, the processing of Personal Data constitutes a natural part of in2tel.
• Email messages – in2tel may send you notifications and administrative emails, such as when you forgot your password, etc.

Data Retention

• LDAP Data – If enabled Customers are in control of LDAP data which can be removed permanently via the Web portal.
• Call Recordings – If enabled Customers are in control of Call Recordings data which can be deleted permanently via the Web portal.
• Call Detail Records (CDRs) – CDRs can be deleted permanently via the Web portal.
• Voicemail – Voicemails can be deleted permanently via the Web portal.

Sharing and Disclosure

There are times when communications and related content and other user information may be shared by in2tel. With consent, to comply with legal process, or to protect in2tel and our users. When we have your consent or if we believe that disclosure is reasonably necessary to comply with a law, regulation or legal request; to protect the safety, rights, or property of the public, any person, or in2tel; or to detect, prevent, or otherwise address fraud, security or technical issues. If we receive law enforcement or other third-party requests for information we will provide prior notice to the subject of the request where we are legally permitted to do so.

Security

in2tel takes reasonable steps to protect the information you provide to us as part of your use of the in2tel service from loss, misuse, and unauthorized access or disclosure. These steps take into account the sensitivity of the information we collect, process and store and the current state of technology. When you enter sensitive information (such as sign-in credentials) we encrypt the transmission of that information using secure socket layer technology (SSL) and encrypt all data at rest. We follow generally accepted standards to protect the personal data submitted to us, both during transmission and once we receive it.

Changes to this Privacy Policy

in2tel may change this policy from time to time. If you continue to use in2tel after those changes are in effect, you agree to the revised policy. If the changes are material, we may provide more prominent notice or seek your consent to the new policy.