Privacy Policy

Who we are and what this policy covers

BitCall LTD (company number 15288134, registered office 124 City Road, London, United Kingdom, EC1V 2NX) is the controller of the personal data described in this policy. Contact us at [email protected].

• This policy covers our website, dashboard, apps, API and telecom services.

• It doesn’t cover third-party websites or services linked from our platform.

• If you buy Bitcall services through a reseller, the reseller is responsible for its own privacy notice to you.

Data we collect

• Account information: Your email address and any name, business or billing details you give us. If you sign in with Google, the details described below.

• Call records: Calling and called numbers and the date, time, duration, route and cost of calls (call detail records, CDRs). Never the audio of your calls.

• Product data: Your OTP numbers and the verification codes they receive, eSIM orders and identifiers, the numbers you look up, and your webphone call history.

• Payment data: Top-ups, invoices and refunds, and crypto payment details such as wallet addresses and transaction IDs. Card payments are handled by our payment providers; we don’t store your full card number.

• Support: Messages you send us by email or live chat.

• Technical data: IP addresses, browser and device information, and security and usage events.

How we use your data and why

• To provide the services: Creating your account, connecting calls, delivering eSIMs and OTP numbers, billing, refunds and support. We need this to perform our contract with you.

• Security and fraud prevention: Protecting accounts, preventing fraud and abuse, and enforcing our Terms and Acceptable Use Policy. This is in our legitimate interests and yours.

• Improving our website: Understanding how our website and dashboard are used (see Cookies and analytics). This is in our legitimate interests.

• Legal obligations: Keeping accounting and tax records and answering valid requests from authorities.

• Service news and offers: Emails about our services. Where the law requires, we ask for your consent first. You can unsubscribe at any time.

Google user data

• We use Google Sign-In / OAuth for login and account authentication.

• Data accessed: email address and basic profile information (only if provided by Google during sign-in).

• Purpose: used only for authentication, account identification, and security.

• Not accessed: we do not access Gmail content, Google Drive files, Google Contacts, Google Calendar, or any other Google services.

• Sharing: we do not sell Google user data; we do not share it with third parties except service providers necessary to operate authentication/security or where required by law.

• Retention/deletion: users can request deletion by contacting [email protected] or deleting their account, subject to legal retention obligations already described in the policy.

How long we keep data

• Call records (CDRs): In our live systems for 30 days, or up to 90 days on some routes, for billing and disputes. After that, they are kept only in secure, access-restricted archives and backups for accounting, legal and fraud-prevention purposes, only as long as those purposes require.

• Call audio: We never record or store call audio on our servers. Webphone recordings you make stay in your browser or on your device, under your control.

• Invoices and payment records: 6 years, as UK tax law requires.

• Account data: While your account is open. When you close it, we delete or anonymise your data, except what we must keep for the reasons above or for an open dispute.

Who we share data with

• Service providers: Telecom carriers and suppliers, eSIM and OTP number providers, payment providers, hosting, customer support (Intercom), email and analytics (PostHog) providers. Each receives only what it needs to provide its service.

• Google Customer Reviews: After an eSIM purchase, Google may invite you to an optional survey about your experience. To offer it, the order confirmation page passes your order email, order number, country and order date to Google. Google only sends the survey if you agree.

• Legal requirements: When the law, a court order or a valid request from an authority requires it, or to protect people, our rights or our services from fraud and abuse.

International transfers

Some of our providers, such as PostHog, Intercom and Google, are based in the United States or other countries outside the UK. When we transfer personal data outside the UK, we use the safeguards UK law requires, such as adequacy regulations (including the UK–US data bridge) or approved standard contract clauses. Ask [email protected] for details.

Cookies and analytics

We use cookies and similar browser storage that our website and dashboard need to work, for example to keep you signed in and remember your preferences.

We also use PostHog analytics to understand how our website and dashboard are used, such as which pages are visited. Session recording is switched off. You can block analytics cookies in your browser settings.

We don’t currently use advertising cookies.

Security

We use appropriate technical and organisational measures, such as encryption and access controls, to protect your data. No system is completely secure. If a breach puts your data at risk, we’ll tell you and the Information Commissioner’s Office where the law requires.

Your rights

Under UK data protection law you can ask to access, correct or delete your data, restrict or object to how we use it, receive it in a portable format, and withdraw consent at any time. Email [email protected]; we reply within one month. We may need to confirm your identity first.

You can also complain to the Information Commissioner’s Office (ico.org.uk).

Changes to this policy

We may update this policy. We publish the new version with its date and email you about important changes.

Contact

• Company: BitCall LTD

• Company number: 15288134

• Registered office: 124 City Road, London, United Kingdom, EC1V 2NX

• Email: [email protected]