Privacy Policy

1. Introduction

SecondRings ("we," "us," or "our") is a browser-based VoIP calling and messaging service. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform. By creating an account or using our services, you agree to the collection and use of information in accordance with this policy.

We are committed to protecting your personal information and your right to privacy. If you have any questions or concerns, please contact us before continuing to use our service.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Name and email address
• Password (stored as a cryptographic hash — never in plain text)
• Profile photo (if you choose to upload one)

2.2 Phone Number & Calling Data

When you use calling and messaging features, we collect:

• Your assigned virtual phone number
• Call logs including origin, destination, duration, and status
• SMS message content, sender, recipient, and delivery status
• Timestamps for all calls and messages

2.3 Technical Data

We automatically collect certain technical information:

• IP address and general geographic location
• Browser type and version
• Device type and operating system
• Pages visited and features used within the app
• Error and performance logs

2.4 Contacts

If you use our Contacts feature, we store the contact information you enter, including names, phone numbers, email addresses, and optional profile photos. This data is associated with your account and only visible to you.

3. How We Use Your Information

We use collected information to:

• Provide the service — process calls and messages, manage your virtual phone number, and maintain your account
• Improve the service — analyze usage patterns to enhance features and fix issues
• Security and fraud prevention — detect and prevent unauthorized access, spam calls, or abuse
• Communications — send account notifications, security alerts, and service updates
• Legal compliance — fulfill regulatory obligations, including telecommunications law requirements

We do not sell your personal information to third parties. We do not use your call content or SMS content for advertising purposes.

4. Telephony Data and Twilio

SecondRings uses Twilio, Inc. to power voice calls and SMS messaging. When you make a call or send a text, telecommunications data (including phone numbers, call duration, message content, and metadata) is processed by Twilio in accordance with their Privacy Policy and applicable telecommunications regulations.

Call and message records may be retained by Twilio and are subject to lawful interception requirements under applicable telecommunications laws. Please review Twilio's Privacy Policy at twilio.com/legal/privacy.

5. Data Storage and Security

Your data is stored on secure servers. We implement industry-standard security measures including:

• Encrypted data transmission (TLS/HTTPS) for all communications
• Hashed password storage using bcrypt
• Access controls limiting data access to authorized personnel
• Regular security reviews

While we take commercially reasonable steps to secure your data, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide our services. Specifically:

• Account data: Retained until account deletion, plus up to 30 days thereafter
• Call logs and message records: Retained for 12 months by default
• Contact data: Retained as long as your account is active
• Technical logs: Retained for up to 90 days

You may request deletion of your account and associated data at any time by contacting us.

7. Sharing of Information

We may share your information with:

• Service providers: Twilio (calling/messaging infrastructure), and hosting providers operating under data processing agreements
• Legal authorities: When required by law, court order, or to protect the rights and safety of our users or the public
• Business transfers: In connection with a merger, acquisition, or sale of all or part of our assets, with notice to you

We do not share your personal information with advertisers or marketing companies.

8. Your Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data (subject to legal retention requirements)
• Portability: Request your data in a structured, machine-readable format
• Objection: Object to certain types of data processing
• Withdrawal of consent: Withdraw consent where processing is based on consent

To exercise any of these rights, please contact us. We will respond within 30 days.

9. Cookies and Tracking

We use session-based authentication tokens stored in your browser's local storage to keep you signed in. We do not use third-party advertising cookies or cross-site tracking technologies.

10. Children's Privacy

SecondRings is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected data from a minor, please contact us and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last updated" date at the top of this page. Continued use of SecondRings after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions or concerns about this Privacy Policy or how we handle your data, please contact us through your account settings or via the contact information listed on our website.