Privacy Policy for CallTuv.com
Operated by Configo Ltd.
Last Updated: November 2025
1. Introduction
Welcome to CallTuv.com (“CallTuv” or the “Service”), a global communication platform operated by Configo Ltd. (“Configo”, “we”, “us”, or “our”).
CallTuv enables users to make international calls, manage credits and billing, maintain personal and team contact lists, share contacts with team members, create and manage team workspaces, and view call logs and communication history.
This Privacy Policy explains how we collect, use, disclose, transfer, and protect personal information when you use our Service, website, or related applications.
By accessing or using CallTuv, you acknowledge that you have read and understood this Policy. If you do not agree, please discontinue use of the Service.
2. Definitions
For clarity, the following terms have the meanings below:
- “Personal Data” – Any information relating to an identified or identifiable individual.
- “Processing” – Any operation performed on Personal Data (e.g., collection, storage, organization, transmission, deletion).
- “Account Holder” – A natural person with an individual CallTuv account.
- “Team Account” / “Enterprise Account” – A workspace where administrators manage multiple users.
- “Call Metadata” – Non-audio data associated with a call, such as call duration, phone numbers, timestamps, routing information, connection status, and quality metrics.
- “Service Providers” – Third-party vendors assisting in providing the Service.
- “Applicable Laws” – GDPR, UK GDPR, ePrivacy Directive, CPRA/CCPA (California), LGPD (Brazil), PIPEDA (Canada), and other global privacy and telecom laws.
3. Personal Data We Collect
3.1 Information You Provide
- Account Information – Name, phone number, email address, password, authentication details.
- Billing Information – Payment method, transaction history, top-up amounts, subscription records.
- We do not store full payment card numbers. Payments are processed by certified third-party processors.
- Contacts & Team Data – Contacts you add or import, contacts you share with team members, team membership details, roles, permissions, and workspace configurations.
- Support & Communications – Messages sent to our support team, feedback, and communication preferences.
- Optional Call Recording – If enabled (and lawful), we collect audio recordings of calls with appropriate consent.
3.2 Automatically Collected Information
- Call Metadata – Duration, timestamps, dialed/received phone numbers, routing info, call status, error codes, and call quality.
- We do not record call audio unless you explicitly enable call recording or where required by law.
- Device & Technical Data – IP address, device IDs, operating system, browser type, app version, crash data, cookies, log files.
- Usage Data – Feature usage information, navigation behavior, settings, and performance analytics.
3.3 Information from Third Parties
- Payment processors
- Telecom carriers and VoIP partners
- Fraud-prevention and identity verification services
- Team administrators who manage your workspace
- Authentication providers (OAuth/SSO)
4. Legal Bases for Processing (GDPR/UK GDPR)
Where GDPR or similar laws apply, we process Personal Data based on:
- Performance of a Contract – Account creation, placing calls, billing, customer support.
- Legitimate Interests – Security, fraud prevention, improving the Service, analytics.
- Consent – Marketing communications, optional call recording, certain cookies.
- Legal Obligations – Telecom data retention, tax compliance, anti-fraud and law enforcement requirements.
5. How We Use Personal Data
5.1 To Provide the CallTuv Service
- Enable international calls and routing
- Manage credits, subscriptions, and billing
- Provide contact management features
- Enable team/enterprise workspaces
- Display call logs and call history
- Authenticate accounts and secure access
5.2 To Ensure Platform Security and Integrity
- Detect and prevent fraud, abuse, and unauthorized access
- Monitor usage anomalies
- Secure networks and infrastructure
- Enforce our Terms of Service
5.3 To Improve and Develop the Service
- Perform analytics and performance monitoring
- Improve routing quality and reduce call failures
- Develop new features and enhancements
- Train models for spam detection or fraud prevention (non-identifiable data)
5.4 Customer Support
- Respond to inquiries and troubleshoot
- Provide notifications and updates about service status
5.5 Marketing and Communications
- Send product updates, offers, and promotions (with opt-out rights)
- Maintain communication preferences
5.6 Legal Compliance and Protection
- Compliance with telecom laws, call records retention mandates
- Respond to subpoenas, court orders, lawful government requests
- Protect our rights, users, and the public
6. Automated Decision-Making and Profiling
We may use automated systems for:
- Fraud detection
- Abuse prevention
- Risk scoring for suspicious activity
- Service optimization
These systems do not make decisions that produce legal or significant effects without human review.
Users may request human review of any automated decision affecting them.
7. How We Share Personal Data
7.1 Service Providers
We share Personal Data with trusted partners that perform services such as:
- Telecom routing and termination
- Cloud hosting and infrastructure
- Payment processing
- Analytics and performance monitoring
- Security and fraud prevention
- Customer support
All providers are bound by contractual confidentiality and security obligations.
7.2 Team/Enterprise Administrators
If you are part of a team workspace:
- Administrators may access your account details, team-shared contacts, usage statistics, assigned phone numbers, and certain call metadata.
- Administrators may modify permissions, add/remove users, or export workspace data.
7.3 Legal and Regulatory Authorities
We may disclose Personal Data:
- When required by applicable telecom regulations
- In response to lawful government requests, subpoenas, or investigations
- To comply with fraud-prevention and anti-spam enforcement
7.4 Business Transfers
If Configo undergoes a merger, acquisition, restructuring, or asset sale, Personal Data may be transferred subject to protections consistent with this Policy.
8. International Data Transfers
Because CallTuv operates globally, data may be transferred to countries outside your jurisdiction.
We implement appropriate safeguards including:
- Standard Contractual Clauses (SCCs)
- Adequacy decisions
- Data Processing Agreements
- Technical and organizational measures (encryption, access control)
Telecom routing may inherently involve transient processing in multiple jurisdictions to complete calls.
9. Data Retention
We retain Personal Data only as long as needed to fulfill the purposes described in this Policy or as required by law.
| Data Category | Retention Period |
|---|---|
| Account profile data | While account is active + 12 months |
| Call metadata | Typically 12–24 months (or longer if required by telecom laws) |
| Call recordings (optional) | User-configured; default 30–90 days unless extended |
| Billing & payment records | 7–10 years (financial/tax compliance) |
| Contact lists | Until deleted by user or account closure |
| Team workspace data | Until workspace deletion or admin removal |
| Logs & security data | 12–36 months (security/legal) |
Upon account deletion, certain data may be retained if required for fraud prevention, legal compliance, dispute resolution, or tax obligations.
10. Your Rights and Choices
Depending on your location, you may have the right to:
- Access your Personal Data
- Request correction
- Request deletion (subject to telecom/legal constraints)
- Request data portability
- Restrict or object to processing
- Opt out of marketing communications
- Opt out of “selling” or “sharing” of data (CPRA—CallTuv does not sell Personal Data)
- Appeal denied privacy requests (CPRA 2025 requirement)
- Withdraw consent where processing is based on consent
Requests can be made at [email protected] or via in-app settings.
We verify identity before processing requests as required by law.
11. Cookies, Trackers & Global Privacy Controls
We use cookies and similar technologies to:
- Authenticate users
- Maintain sessions
- Analyze performance
- Personalize the Service
You may manage cookie settings via browser controls.
Do Not Track (DNT): We do not currently respond to DNT signals.
Global Privacy Control (GPC): Where required by law, we will treat GPC signals as an opt-out request.
12. Children’s Privacy
CallTuv is not intended for users under 13.
We do not knowingly collect data from children.
If such data is identified, we will delete it unless required for legal or safety reasons.
13. Security Measures
We use industry-standard administrative, technical, and physical safeguards, including:
- TLS/SSL encryption
- Database and file-level encryption
- Access controls and multi-factor authentication
- Regular penetration testing and audits
- Network monitoring and intrusion detection
- Secure key management
- Data minimization and pseudonymization where possible
While no system is completely secure, we continuously improve safeguards to protect your information.
14. Data Breach Notification
In the event of a security incident affecting Personal Data:
- We will investigate promptly
- We will notify impacted individuals when legally required
- We will notify regulators as required by GDPR, CPRA, telecom law, or other applicable regulations
15. Role as Data Controller and Data Processor
For individual accounts, Configo acts as a Data Controller.
For team/enterprise workspaces, Configo acts as:
- Controller for platform-level analytics, call routing, logs, and billing
- Processor for workspace-managed contact lists and user-generated content
We enter into Data Processing Agreements (DPAs) with enterprise customers upon request.
16. Third-Party Links
Our Service may contain links to third-party websites.
We do not control and are not responsible for their privacy practices.
We encourage you to review their privacy policies.
17. Changes to This Privacy Policy
We may update this Policy from time to time.
When changes are material, we will provide notice via email or in-app notification.
Your continued use of the Service after updates constitutes acceptance.
18. Contact Us
If you have questions, complaints, or requests relating to privacy or this Policy, contact us: