Privacy policy

• Your sign-in: your name, email address and role on your company's account, a password hash (never the password), and if you turn it on, your authenticator's secret, encrypted.
• Single sign-on and Google: when you sign in with your company's identity provider or with Google, we receive your name, your email address and an identifier for your account there (for Google, the account's ID; we ask for the openid, email and profile scopes and nothing else). We use them only to recognise you and sign you in. We do not read your mail, contacts, files or anything else in your Google account, and we never receive your Google password.
• Calls: call records (who called whom, when, for how long, how it was answered), call-quality measurements, voicemail, and recordings where your company has turned recording on. These are your company's records and are kept for it.
• Devices: the phones and apps connected to your lines, their addresses and registration state, so calls reach them.
• Billing and support: what your company buys, invoices, and what you tell us when you ask for help.
• Security logs: sign-ins, failed sign-ins and changes made in the portal, with the address they came from, to protect your account.

Only what is needed to deliver calls and the service: the telephone carriers that connect calls to and from the public network, emergency-services providers (your registered 911 address, when a 911 call is made), and the hosting provider our servers run on. We do not sell personal information, and we do not use it for advertising.

For as long as your company's account is open, and then for as long as law or a dispute requires. Your company decides how long recordings and voicemail are kept. Sign-in links to Google or a single sign-on provider are removed when you disconnect them, or when your login is removed from the account.

• Disconnect Google from your login at any time under Settings in the portal, or remove the app's access from your Google account's security settings.
• Ask your company's administrator, or us, to correct or delete what we hold about you.
• Write to support@witech.vi with any question about your information.

Every connection is encrypted. Each company's data is kept apart from every other's by the database itself, not only by the application. Secrets such as SIP passwords and authenticator keys are stored encrypted, and passwords only as hashes.