Privacy policy

What we collect

Account details, call records, payment records and panel logs.

Only what is needed to open and run the account:

• Business and personal details — company name, your name, email address and, if you give one, a phone number
• Call records — when, from which number to which number, for how long, and the outcome
• Payment records — which plan, which invoices, and the card’s last four digits and expiry as Stripe reports them
• Technical logs from the panel — which account changed what, and when

What we do not collect

No call audio, no identity documents, no card numbers, no ad trackers.

Call audio is not recorded. Call recording is not built; on the day it is, it will be a setting under your control and this page will be updated before it ships.

We do not ask for a company registration document or a government ID. Opening an account takes an email address and a password.

Your card number never reaches us. Payment details are entered on Stripe’s own page and we hold only what is listed above, which is what an invoice needs to be recognisable.

This website carries no advertising trackers, no third-party analytics script and no social pixels. Signing in to the panel sets one session cookie, which does nothing but keep you signed in.

Why we collect it

To provide the service, to bill it, and to keep it from being abused.

It is needed to route calls, run the panel, calculate the bill, meter a free account against its monthly minutes, prevent fraud and fix things when they break.

Call records are also what lets us answer “what happened to that call” months later, which is the question a phone system exists to be able to answer.

Who it is shared with

The providers the service runs on, and where the law requires it.

Running the platform needs a small number of outside providers — hosting, Stripe for payments, and a provider for sending email. Each receives only what its job requires, and the current list is in the data policy.

Placing a call means the destination number and your caller ID reach a carrier. On FoxLine that carrier is the one you chose and contracted with yourself; we pass the call to your trunk and nowhere else.

Where a court or a law-enforcement agency makes a lawful demand, we comply. Unless the law forbids it, we tell you when that happens.

We do not sell your data, do not use it for advertising, do not give it to data brokers, and do not train models on it.

How long it is kept

While the account is open, and 12 months after it closes.

Call records and panel logs are kept while the account is open, and deleted 12 months after it closes, unless the law requires us to keep them longer.

Billing and tax records are kept for as long as accounting rules require, which is longer than the rest and is not something either of us can shorten.

Your rights

Ask to see it, correct it, export it, or have it deleted.

Write to us to see what we hold about your account, to correct anything wrong, to export your call records, or to close the account and have the data deleted.

Where local law gives you a specific right over your information, we apply it to every customer rather than only to the ones who can insist on it. We usually respond within 30 days. What the law obliges us to keep cannot be deleted; in that case we tell you exactly what is being kept and why.

Where it is held

On servers we run, and the list of providers is public.

The platform runs on infrastructure we operate, and your data crosses a border only as far as reaching that infrastructure and our providers requires. The providers are named in the data policy, and that page is updated when one is added or changed.

Security

Calls are encrypted, and companies are separated in the database itself.

Signalling is encrypted with TLS and call audio with SRTP. There is no setting to turn either off.

Each company’s data is separated at the database level — one company’s query cannot touch another company’s rows. The security page has the detail.

Children

This is a business service, not a consumer one.

FoxLine is for businesses and is not intended for anyone under 18. We do not knowingly collect information about children.

Changes

The date changes when the policy does, and real changes come by email.

When this policy is updated the date above changes. Any change that materially affects how your information is used is announced by email first.