1. Who this policy covers
This policy applies to three groups of people: (1) Clients, the businesses that subscribe to voipcom's services and their authorised staff who use our dashboards and apps; (2) call recipients, the customers and contacts a Client calls, messages, or is called by through the Service; and (3) website visitors browsing voipcomsystem.com. voipcom acts as the operator of the platform in all cases, and, for calls and messages a Client sends through the Service, the Client is the party responsible for how it collects consent from and communicates with its own customers (see Section 8 and our Terms & Conditions).
2. Data we collect
Depending on how the Service is used, we collect:
- Account & billing data: business name, contact name, email, phone number, address, and payment/billing details provided when a Client signs up or is invoiced.
- Call & messaging metadata: numbers dialled or received, call duration, timestamps, extension routing, IVR selections, queue times, and delivery status of WhatsApp or SMS messages sent through the Service.
- Call recordings & transcripts: where recording is enabled by the Client, as described in Section 4.
- Usage & device data: login activity, IP address, browser or app version, and actions taken within voipcom dashboards and mobile/desktop apps, used for security and support.
- Support communications: messages sent to our sales or support team, including via WhatsApp or the contact form.
- Website analytics: standard web analytics data (pages viewed, referrer, approximate location from IP) collected when you browse voipcomsystem.com, as described in Section 10.
3. How we use data
We use the data described above to: provision and operate the Service (numbers, extensions, IVR, dialer, automation workflows); bill Clients accurately; provide customer support and respond to enquiries; monitor and improve platform reliability and security; detect and prevent fraud, abuse, or violations of our Terms & Conditions; and meet legal or regulatory obligations, including requests from the Pakistan Telecommunication Authority (PTA) or law enforcement made through lawful process.
We do not sell Client or call-recipient personal data to third parties.
4. Call recordings & transcripts
voipcom's platform can record calls when a Client turns this feature on for their account. Recording is configured and controlled by the Client, not by voipcom on its own initiative. Where recording is enabled, voipcom stores the resulting audio (and any AI-generated transcript) on behalf of the Client, and access to it is limited to the Client's authorised users and voipcom staff who need it to provide support or resolve a technical issue.
As set out in our Terms, it is the Client's responsibility to inform call recipients that a call may be recorded where required by law, and to handle recordings in line with applicable data-protection rules for their own business and industry.
5. Sharing with third parties
We share data only where necessary to operate the Service or as required by law, including with:
- PTA-licensed carrier and operator partners, who deliver the underlying voice, SMS and number services;
- Infrastructure and hosting providers who store platform data and recordings on our behalf, under confidentiality and security obligations;
- Payment processors, to process billing and subscription payments;
- AI voice/automation platforms (for example Retell, Vapi, Bland, or a Client's own CRM/WhatsApp integration), but only to the extent the Client has configured such an integration for their own account; and
- Regulators or law enforcement, where we are legally required to disclose information, such as under a valid PTA or court order.
6. Storage & security
Data collected through the Service is stored on servers operated by us or our infrastructure providers, with access controls, encryption in transit, and role-based permissions limiting who inside voipcom can view Client data. No system is completely secure, and we work to apply reasonable technical and organisational safeguards appropriate to the sensitivity of the data involved, including call recordings and billing details.
7. Data retention
We retain account, billing and call-metadata records for as long as a Client's subscription is active and for a reasonable period afterward, as needed for accounting, legal, tax and dispute-resolution purposes. Call recordings and transcripts are retained according to the Client's account configuration and applicable regulatory requirements; a Client may request deletion of their recordings subject to any legal retention obligation we or they are under. On request, we will delete or anonymise personal data we no longer need to retain, unless we are required to keep it by law.
8. Client obligations to callers & staff
Clients using the Service to contact their own customers, leads, or staff are themselves a data controller for that activity. Clients are responsible for having a lawful basis to contact people, honoring opt-out and Do Not Call Registry (DNCR) requests, and providing their own customers with appropriate notice about recording or automated calling, consistent with our Terms & Conditions. voipcom is not responsible for a Client's compliance with these obligations toward the Client's own contacts.
9. Your choices & rights
Clients can access, update, or request export of their account and billing data by contacting us or through their dashboard where available. A call recipient who wants a copy of, or the deletion of, a recording or personal data held about them should contact the Client who made the call, as the Client controls that data; voipcom will assist a Client in fulfilling such a request where technically possible. Anyone can request that we correct inaccurate account data we hold directly about them by emailing us using the details in Section 13.
10. Cookies & website analytics
voipcomsystem.com may use essential cookies needed for the site to function, and standard analytics tools to understand how visitors use the site (pages viewed, general location, referring site). This data is used in aggregate to improve the site and is not used to individually track visitors across other websites for advertising purposes.
11. Children's data
The Service is intended for business use by adults and organisations. We do not knowingly collect personal data from children, and the Service is not directed at them.
12. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our Service, our data practices, or applicable law. We will update the "Last updated" date at the top of this page when changes are made. Material changes will be communicated to active Clients where appropriate.
Questions about this Privacy Policy, or requests relating to your data, can be sent to sales@voipcomsystem.com, or via our contact page.