Privacy Policy

VoiceCore Enterprise · Last Updated: April 5, 2026

At Digitallog SRL, we value your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use VoiceCore Enterprise.

1. Data Collection

We collect the following types of data necessary to provide PBX and communication services:

• Call logs, metadata, and routing information
• User profiles, extension numbers, and tenant configuration data
• Authentication credentials and access logs
• Device and connection information for quality monitoring

2. Media Data & Call Recordings

Call recordings are only stored when explicitly enabled by your system administrator. All recordings are encrypted at rest and in transit. Retention periods are configurable by your administrator, after which recordings are automatically and permanently deleted.

3. Data Usage

Your data is used exclusively for the following purposes:

• Providing and maintaining the VoiceCore Enterprise service
• Improving service quality and network performance
• Analytics and reporting (when enabled by your organization)
• AI training and model improvement (only with explicit organizational consent)

We do not sell your personal data to third parties.

4. Third-Party Providers

We use industry-leading third-party services to enhance our platform, including:

• OpenAI for AI call assistant features (language understanding, speech-to-text, and text-to-speech)
• Twilio for SMS message delivery
• Firebase (Google) and Apple Push Notification service for mobile push notifications
• Cloud infrastructure providers for hosting and storage

All third-party providers are contractually bound to handle your data in accordance with their privacy standards and applicable data protection regulations.

5. Data Security

We implement industry-standard security measures to protect your data, including:

• JWT-based authentication and role-based access control
• End-to-end encryption for voice and signaling traffic
• Strict multi-tenant isolation to prevent unauthorized cross-tenant access
• Regular security audits and penetration testing