Privacy Policy

01 Who We Are

VoipLiv ("we," "us," or "our") is a telecommunications and VoIP solutions provider headquartered at 6878 Sire Ave, Frisco, TX 75036-9244, United States. We operate the website voipliv.com and provide VoIP, 3CX, DID, Toll-Free, SIP trunking, and wholesale telecom services.

For privacy inquiries, contact us at: info@voipliv.com

02 Information We Collect

We collect information you give us directly and information generated through your use of our services.

Information you provide:

• Name, business name, email address, phone number
• Billing and payment information (processed securely by our payment processors)
• Account credentials (username and password)
• Service configuration details (SIP endpoints, DID routing preferences)
• Support communications, chat transcripts, and emails
• Information submitted through our contact or quote request form

Information collected automatically:

• IP address, browser type, operating system, referring URLs
• Pages visited, time spent, click patterns (via analytics)
• Call Detail Records (CDRs) — including call timestamps, durations, originating and terminating numbers, and call quality metrics
• Device identifiers when using our portal or apps

Information from third parties:

• Business credit or identity verification services
• Payment processors (Stripe, PayPal, or similar) — we receive transaction confirmation but not full card details

03 How We Use Your Data

We use collected information for the following purposes:

• Service delivery — provisioning VoIP accounts, DID numbers, SIP trunks, and 3CX systems
• Billing and invoicing — processing payments, generating invoices, and managing accounts receivable
• Customer support — responding to inquiries, troubleshooting technical issues, and managing support tickets
• Fraud prevention and compliance — detecting misuse, STIR/SHAKEN compliance, TCPA compliance, and regulatory obligations
• Service improvement — analyzing usage patterns to improve call quality, routing, and platform features
• Marketing communications — sending service announcements or promotional emails (you can opt out at any time)
• Legal obligations — complying with FCC regulations, subpoenas, court orders, and lawful law enforcement requests

We do not sell your personal information to third parties for advertising or marketing purposes.

04 Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA) or United Kingdom, we process your personal data under the following legal bases:

• Contract performance — processing necessary to deliver our services under a signed agreement or service order
• Legitimate interests — fraud prevention, network security, and service optimization
• Legal obligation — compliance with telecommunications regulations, tax laws, and lawful requests
• Consent — for marketing communications where required; you may withdraw consent at any time

05 Sharing Your Data

We do not sell, rent, or trade your personal information. We may share data only in these limited circumstances:

• Service providers: Payment processors, cloud infrastructure providers (e.g., AWS, Google Cloud), analytics providers, and customer support tools — all bound by data processing agreements
• Carrier interconnects: To complete calls, limited call routing data (originating/terminating number, timestamp) is passed to upstream carriers under strict confidentiality agreements
• Law enforcement: Where required by valid legal process (subpoena, court order, or lawful FCC/FBI/DOJ request). We will notify you where legally permitted to do so
• Business transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred — you will be notified in advance
• With your consent: Any other sharing will only occur with your explicit permission

06 Call Data & Call Detail Records (CDRs)

As a telecommunications provider, we are required by the FCC to retain certain call data. CDRs may include:

• Originating and terminating telephone numbers
• Date, time, and duration of calls
• Call disposition (answered, busy, failed)
• Trunk and routing information

CDRs are retained for a minimum of 18 months as required by federal telecommunications regulations. These records are used for billing, fraud detection, regulatory compliance, and dispute resolution.

07 Cookies & Tracking Technologies

Our website uses the following types of cookies:

• Essential cookies: Required for the website to function (session management, form security). Cannot be disabled.
• Analytics cookies: Google Analytics or similar tools to understand how visitors use our site. Anonymized data only.
• Preference cookies: Remember your settings and preferences across visits.

You can control cookies through your browser settings. Disabling analytics cookies will not affect your ability to use our website or services.

We do not use advertising or tracking cookies for third-party ad targeting.

08 Data Retention

• Account data: Retained for the duration of your account plus 7 years after closure (for billing and tax compliance)
• CDRs: Minimum 18 months per FCC regulations; up to 7 years for billing dispute purposes
• Support communications: 3 years from the date of last interaction
• Marketing consent records: Until you withdraw consent plus 3 years
• Website analytics: 26 months (Google Analytics default)
• Payment records: 7 years per IRS and financial compliance requirements

After applicable retention periods, data is securely deleted or anonymized.

09 Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Right to access — request a copy of the personal data we hold about you
• Right to rectification — request correction of inaccurate or incomplete data
• Right to erasure — request deletion of your personal data (subject to legal retention obligations)
• Right to restrict processing — request that we limit how we use your data
• Right to data portability — receive your data in a structured, machine-readable format
• Right to object — object to processing based on legitimate interests or for direct marketing
• Right to withdraw consent — where processing is based on consent, withdraw it at any time without affecting prior processing
• Right to lodge a complaint — with your local data protection authority (e.g., the FTC in the US)

To exercise any right, email us at info@voipliv.com. We will respond within 30 days.

10 California Privacy Rights (CCPA / CPRA)

California residents have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• Right to know — categories and specific pieces of personal information we collect, use, disclose, or sell
• Right to delete — request deletion of personal information (with certain exceptions)
• Right to opt-out of sale — we do not sell personal information; no opt-out is needed
• Right to non-discrimination — we will not discriminate against you for exercising your privacy rights
• Right to correct — request correction of inaccurate personal information
• Right to limit use of sensitive information — you may limit our use of sensitive personal data

To submit a CCPA request, email info@voipliv.com with the subject line "CCPA Request."

We do not sell or share personal information with third parties for cross-context behavioral advertising.

11 Data Security

We implement industry-standard security measures to protect your data:

• TLS 1.2+ encryption for all data in transit
• AES-256 encryption for data at rest where applicable
• Role-based access control — only authorized personnel can access customer data
• Regular security audits and vulnerability assessments
• Multi-factor authentication (MFA) for all internal systems
• Incident response plan with 72-hour breach notification capability

Despite our best efforts, no security system is impenetrable. In the event of a data breach affecting your personal information, we will notify you as required by applicable law.

12 Children's Privacy

Our services are intended for business customers and individuals aged 18 and older. We do not knowingly collect personal information from children under 13. If we learn that we have collected data from a child under 13, we will delete it promptly. If you believe we may have such data, contact us immediately at info@voipliv.com.

13 Third-Party Links

Our website may contain links to third-party websites (e.g., Microsoft Teams, partner portals). We are not responsible for the privacy practices or content of those sites. We encourage you to review the privacy policies of any third-party sites you visit.

14 International Data Transfers

VoipLiv is based in the United States. If you access our services from outside the US, your data may be transferred to and processed in the United States, where data protection laws may differ from your country.

For transfers from the EEA or UK, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission to ensure adequate protection of your data.

15 Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page. For material changes, we will notify active customers by email at least 30 days before the change takes effect.

Continued use of our services after the effective date of any update constitutes your acceptance of the revised policy.

16 Contact Us

We aim to respond to all privacy-related inquiries within 5 business days, and to complete any data rights requests within 30 days.