Privacy policy

What we collect

• Signup and account: company name, your name, email address, and the users, extensions, devices and settings you create in the Control panel.
• Payments: Stripe processes card payments. We receive the payment amount, status and a Stripe reference; we never see or store full card numbers.
• Calls: call detail records (calling and called numbers, time, duration, cost), voicemail messages and any call recordings you enable, and the IP addresses and device details of phones that register to our service.
• Website and Control panel: standard server logs (IP address, time, pages requested). The marketing site uses no tracking or advertising cookies; the Control panel uses session storage to keep you signed in.
• Email: messages we send you (sign-in links, low-balance alerts, top-up links) and their delivery status.

How we use it

To provide and bill the service (routing calls, charging per-minute usage against your credit, showing your balance and call history), to send service email, to prevent fraud and abuse, to support you, and to meet legal obligations. We do not sell personal information or use it for advertising.

Who we share it with

Only service providers needed to run Topaz: Stripe (payments), VoIP.ms (call carriage and phone numbers — it receives the numbers and timing of calls it carries), Resend (email delivery), Vercel (hosting of the marketing site), and the providers of the server we operate. We may disclose information when required by law or to protect the service and its users.

Where it is stored and for how long

Account and call data are stored on a server we operate. We keep call detail records and billing records as long as needed for billing, tax and legal reasons, voicemail until you or your users delete it, and account data while your account is open and for a limited period after it closes. Server logs are kept for a short period for security and troubleshooting.

Your choices and rights

You can view and change most account data in the Control panel. You can ask us to access, correct or delete your personal information, or to close your account (support@mail.topaz.tel). Depending on where you live (for example under PIPEDA in Canada or state laws in the US) you may have further rights, including complaining to a regulator.

Security

Access to the Control panel and API uses HTTPS. Passwords are not stored in plain text. SIP traffic is currently unencrypted (no TLS/SRTP yet). No system is perfectly secure; tell us (support@mail.topaz.tel) if you suspect a problem.

Changes

We will email account administrators about material changes before they take effect.