Privacy Notice

Information we process

• Account and relationship information, such as name, business contact details, subscription, support communications, and billing status.
• Twilio configuration and business-line information, including account and resource identifiers, selected phone number, dedicated API-key information, and encrypted dedicated key secret.
• Device and security information, including installation identifiers, device names, session and revocation timestamps, push tokens, App Attest metadata, hashed security values, and abuse-prevention signals.
• Communications information processed for customers, including originating and destination numbers, encrypted text-message content, direction and delivery status, call identifiers and status, voicemail metadata and encrypted transcript, and Twilio-hosted recording identifiers.
• Diagnostics and usage information, including error codes, call-quality grades and normalized signals, timestamps, request references, and aggregated operational metrics.

Information we intentionally do not collect or retain

• The customer's Twilio master Auth Token; it travels directly from the iPhone to Twilio during setup.
• Advertising identifiers or information used for cross-app tracking or targeted advertising.
• A customer's full device contact list. Contacts, favorites, recent calls, notes, and local do-not-call entries remain in device-only storage unless a user chooses information for a communication.
• Persistent copies of voicemail audio. Audio remains hosted by Twilio and is streamed when an authenticated user requests playback.
• Call recordings for outbound or live calls. Any future recording feature requires revised notices, documented consent controls, retention and deletion controls, and a security and release review before activation.

How we use information

• Provide calling, messaging, incoming-call, voicemail, device-recovery, support, and account-management functions.
• Authenticate devices, protect customer Twilio connections, prevent abuse, enforce limits, and investigate security events.
• Diagnose failures, provide privacy-safe call-quality information, operate and improve reliability, and respond to support.
• Administer subscriptions, communicate service notices, comply with law, enforce agreements, and protect rights and safety.
• Create aggregated or de-identified operational information that does not reasonably identify a customer, user, or communication recipient.

How we disclose information

• Twilio, to provide communications, numbers, recordings, transcriptions, and related account functions under the customer's Twilio relationship.
• Cloudflare, for network delivery, application hosting, security services, and database storage.
• Apple, for application distribution, device attestation, and push notifications.
• Professional advisers, insurers, auditors, and transaction counterparties under appropriate confidentiality obligations.
• Government authorities or others where required by law or reasonably necessary to protect rights, security, users, or the public.

Sale, sharing, advertising, and tracking

We do not sell personal information, share it for cross-context behavioral advertising, or use it for targeted advertising. Secure Dialer does not use cross-app tracking. If our practices change, we will update this notice and provide legally required choices before the change applies.

Retention and deletion

Messages, voicemail database records, and actionable call diagnostics are currently retained for up to 30 days; transient rate-limit counters for up to two days; and connection, account, and device records while needed to provide the account. Users may delete supported communications, revoke devices, and securely disconnect. Twilio independently retains records under the customer's Twilio settings and agreement. We may retain limited records longer where required for law, security evidence, disputes, or financial records.

Your choices and rights

Depending on location and applicable law, individuals may have rights to access, correct, delete, or obtain a copy of personal information and to appeal a denied request. Because we process many communication records for our business customers, a call or message recipient should generally contact the business that communicated with them first. Requests may be submitted through the contact form at https://www.gtm-solutions.ai/contact. We will verify requests and respond as required by law.

Security and international processing

We use administrative, technical, and organizational safeguards designed for the nature of the information, but no system is perfectly secure. Information may be processed where we and our providers operate. We use legally required transfer measures where applicable and do not promise a particular processing location unless agreed in writing.

Children

The Services are for business users and are not directed to children under 18. Customers must not knowingly use the Services to collect children's personal information without express written authorization and all required parental consent.

Changes and contact

We may update this notice as the Services or law changes. We will post the effective date and provide additional notice where required. Privacy, security, or data requests may be submitted through the contact form on our website.