Privacy policy

Account information includes your name, email address, account identifier, password hash, sign-in sessions and security settings. If you enable two-factor authentication, we store the secret needed to verify codes and hashes of your backup codes.

Calling information includes the numbers you call from and to, timestamps, call status, duration, quoted rates and charges. Twilio processes call audio to connect calls. When recording is enabled, Twilio stores recordings and Berryphone stores recording references and related billing information.

You can enter or import contacts, phone numbers, notes, tasks and call lists. We store that information in your personal account or the organization you select. The mobile app does not import your device address book or request access to GPS location, photos or camera.

Payment information includes wallet balances, purchase history and payment-provider identifiers. Stripe processes card information; Berryphone does not store full card numbers. The mobile app has no purchase flow.

Operational data may include IP addresses, approximate country inferred from IP, device and network information, request logs, errors and call-quality diagnostics. We use IP country checks to enforce regional service restrictions. These checks do not use GPS.

SMS is unavailable at launch. If you previously used messaging, any stored message content and metadata are covered by this policy and the same deletion process.

We use information to create and secure your account, connect and bill calls, manage numbers and workspaces, provide the features you request, handle support and refunds, prevent abuse and meet applicable legal obligations. Where data-protection law requires a legal basis, these activities rely on performing our contract, legitimate interests in security and reliable operation, legal obligations, or consent where required.

Optional recordings require you to comply with the laws that apply to every participant. Obtain any required consent before recording. Turning off recording prevents new recordings; it does not erase existing recordings.

We do not sell your personal information or use it for advertising tracking. An analytics preference does not disable essential security, billing or telecom-provider logs.

Convex hosts the application database and authentication service. Cloudflare delivers the website and handles network requests. Twilio connects calls, manages phone numbers and processes telecom records and recordings. Stripe processes payments made on the website. AWS SES handles transactional email when those email features are enabled. Our website also loads fonts from Google Fonts.

These providers receive the information needed to perform their services. Information may be processed outside your country. Applicable provider contracts and legal safeguards govern international transfers; we do not promise that all data stays in a particular country.

Organization members can access shared contacts and resources according to their roles. Administrators can see organization activity and billing. Do not place personal information in a shared workspace if you do not want its members to access it.

We may disclose information when legally required, to address fraud or security incidents, or to protect rights. If the service changes ownership, any transfer of information remains subject to applicable law and this policy.

We use authenticated access controls, password hashing and encrypted network connections. The mobile app stores session credentials in the operating system's protected storage. You are responsible for keeping your password and two-factor backup codes safe. No system can guarantee absolute security.

The website stores authentication and interface preferences in browser storage and cookies. The app stores credentials and local settings on your device. Signing out removes the active app credentials from local storage.

Account data remains while you use the account, unless you remove it or a feature has a shorter retention period. You can start permanent deletion from Account in the mobile app, Settings on the website, or berryphone.net/delete-account. You must sign in and complete two-factor verification if enabled.

Deletion closes account access immediately and removes your personal profile, contacts, activity, recordings, credit balance, authentication records and preferences from Berryphone's live database. Personal rented numbers are released. Cleanup runs automatically and retries provider failures until it completes. There is no account-recovery period.

If you are the last organization member, deletion also removes its data and credit and releases its numbers. Organizations with remaining members keep shared data, credit and numbers. Your membership is removed, responsibilities are transferred, and your profile is deleted. Shared business records may retain the content of your work and an account identifier without an associated profile.

Deletion requests are sent to providers for resources we control. Providers may retain backup copies, payment history or telecom records under their own retention schedules or legal obligations. Twilio documents up to 40 days of deleted-recording metadata and up to 30 days of message backups; the recording media itself cannot be recovered after provider deletion. Deleting a Stripe customer does not erase historical payment records. Data held independently by other call participants is outside our control.

Request any eligible refund before deleting your account. Deletion removes remaining credit and payment references from your account; it does not itself initiate a refund. Any mandatory statutory rights remain unaffected.

Depending on your location, you may have rights to access, correct, export or erase personal information, restrict or object to processing, withdraw consent, and complain to your data-protection authority. You can edit your profile and contacts, manage recording preferences and delete your account in the service. For other requests, contact support@berryphone.net. We may need to verify your identity and the scope of an organization request.

Berryphone is intended for adults aged 18 and over. If you believe a child has supplied information, contact us so we can address it.

For privacy questions or requests, contact support@berryphone.net. We will update the effective date when this policy changes and provide additional notice for material changes where required by law.