VanceTel privacy policy.
This policy explains what data VanceTel collects, how we use it to run the softphone, SMS and voice API, who we share it with, and the rights you have over it.
What we collect and why.
We collect only what is needed to provide VanceTel and meet our legal and telecom obligations. The categories below cover everything we process.
Account information
Name, work email, company, billing details and the phone numbers you provision. Collected when you sign up, book a demo or contact sales.
Usage data
API requests, dashboard activity, device and app version, IP address and diagnostic logs. Used to operate, secure and improve the service.
Message & call metadata
Sender and recipient numbers, timestamps, direction, delivery status and call duration — processed to route, deliver and report on the communications you send through us.
Message & call content
SMS/MMS bodies, media attachments and voicemail are processed to deliver them and surface them in your softphone inbox. We do not sell content or use it to train models.
Essential first, analytics on consent.
Essential cookies keep you signed in, secure your session and remember basic preferences — these are required for VanceTel to function. Optional analytics cookies measure how the site and product are used and load only after you consent. You can withdraw analytics consent at any time, and doing so does not affect the service.
Who processes data on our behalf.
To deliver calls and texts, VanceTel relies on a short list of sub-processors, each bound by a data processing agreement. They may only process data to provide their part of the service.
Telecom carriers
Regulated carrier partners that originate and terminate the SMS, MMS and voice traffic you send. They receive the metadata required to route each message or call.
Cloud hosting
Cloud infrastructure providers that host the application, API and databases in access-controlled, encrypted environments.
Operational tooling
Vetted vendors for analytics, error monitoring, payments and support, each under a data processing agreement limiting use to providing the service.
Rights over your data.
Depending on where you live, you have rights over the personal data VanceTel holds. We honor verified requests within the timeframes required by applicable law, including the GDPR and CCPA.
- Access — request a copy of the personal data we hold about you.
- Correction — ask us to fix inaccurate or incomplete data.
- Deletion — request erasure, subject to legal and telecom record-keeping duties.
- Portability — receive your data in a structured, machine-readable format.
- Objection & restriction — limit or object to certain processing.
- Withdraw consent — turn off optional analytics cookies at any time.
How we protect data.
Security is built into the platform. VanceTel applies technical and organizational measures appropriate to the sensitivity of phone-system data.
- Encryption in transit (TLS) and at rest for stored data.
- HMAC-SHA256 signing on outbound webhooks so your endpoint can verify origin.
- Role-based access controls and least-privilege internal access.
- Audit logging, monitoring and a documented incident response process.
Business Associate Agreement.
For HIPAA-eligible Enterprise workloads, VanceTel can sign a Business Associate Agreement (BAA) before any protected health information is processed. A BAA defines how PHI is handled, safeguarded and reported. Contact sales to put one in place and confirm the eligible configuration for your account.
How long we keep data.
Account data is retained for the life of your account and a limited period afterward for legal, tax and dispute purposes. Message and call metadata is kept as required for telecom record-keeping and billing, then deleted or anonymized. You may request earlier deletion, which we honor except where law requires us to retain a record.
Reach the privacy team.
Questions about this policy or a data request? Reach the VanceTel privacy team through the contact options on this site or your account dashboard. We respond to verified requests within the timeframes required by law.
Privacy questions, answered.
Need a BAA or a security review before you build? Talk to us.
Does VanceTel sell my data?
No. VanceTel does not sell personal data, message content or call content. Data is processed only to operate the service you asked for, meet legal obligations, and — where you opt in — measure product usage.
Is a BAA available for HIPAA workloads?
Yes. For HIPAA-eligible Enterprise workloads, VanceTel can sign a Business Associate Agreement (BAA) before any protected health information is processed. Contact sales to put a BAA in place and confirm the eligible configuration for your account.
How long is data retained?
Account data is kept for the life of your account and a limited period afterward for legal, tax and dispute purposes. Message and call metadata is retained as required for telecom record-keeping and billing, then deleted or anonymized. You can request earlier deletion subject to those obligations.
Who can I contact about privacy?
Reach the VanceTel privacy team through the contact options on this site or your account dashboard. We respond to verified data subject requests within the timeframes required by applicable law.
Build on a platform that respects data.
See how VanceTel handles message, call and contact data in practice — and put a BAA in place for HIPAA workloads.