Privacy Policy

1. Introduction

Voipe Telecom Ltd. ("Voipe", "we", "us", or "our") respects the privacy of users of our website, cloud services, and telephony platform, including the VoIPe for ZOHO integration. This Privacy Policy explains what information we collect, how we use it, how it is shared, and the rights available to you.

Voipe acts in a dual role: as a data controller for account, billing, and website-analytics data; and as a data processor for the call data, recordings, and CDRs of our business customers. Where our customer is itself a processor for its own end users, Voipe acts as a sub-processor.

2. Information We Collect

2.1 Information you provide

• Registration details: name, email, phone number, company name, role.
• Billing details: processed through a secure payment processor — we do not store full card numbers.
• Service configuration: IVR menus, routing rules, voicemail, queue settings.

2.2 Service and communications data

• Call recordings stored as part of the Service (see Section 5).
• Call metadata: caller/callee numbers, call duration, timestamps, call status and outcomes.
• Call Detail Records (CDRs) and, where applicable, SMS logs and agent activity.

2.3 Technical and automatic data

• IP address, browser type, operating system;
• device identifiers (for the softphone app);
• pages viewed and session duration.

2.4 Cookies

The website uses strictly necessary cookies (always on) and, only after your explicit consent via the cookie banner, analytics and marketing cookies. Non-essential cookies are not set before consent is given.

3. The VoIPe for ZOHO Data Flow

This section describes how personal data moves between the Voipe platform and your Zoho account when you enable the VoIPe for ZOHO integration. The Integration is built on the Zoho PhoneBridge framework.

3.1 Roles of the parties

• You (the customer) are the data controller of the call data associated with your account and your contacts.
• Voipe is a data processor that transmits and processes this data on your behalf and on your instructions, solely to provide the Integration. Zoho, as the operator of your Zoho environment and the PhoneBridge framework, is a separate controller/processor under your agreement with Zoho.

3.2 What data passes to Zoho via PhoneBridge

When the Integration is active, the following call-related data may be transmitted from the Voipe platform into your Zoho account:

• Caller / callee number — used for screen-pop and to match the contact in your Zoho records;
• Call metadata — direction (inbound/outbound), timestamps, duration, ring/answer status, and the agent/extension that handled the call;
• Recording links — a reference/URL to the call recording stored on the Voipe platform (the recording audio itself remains hosted by Voipe; only the link is written to Zoho, subject to your access controls);
• Call outcomes — disposition, notes, and automatic call-log entries created against the matched Zoho record.

Click-to-call operates in the reverse direction: a phone number you click in Zoho is sent to the Voipe platform to place the outbound call. No call recordings are copied into Zoho; only the metadata and links described above are exchanged.

3.3 Purpose, direction, and legal basis

The data flow exists to deliver the Integration's core functions — screen-pop, click-to-call, and automatic call logging. It runs in both directions between Voipe and Zoho, triggered by your calls and your actions in Zoho. The legal basis is the performance of our contract with you and your documented instructions as controller. You are responsible for configuring which Zoho users and records receive this data and for the lawfulness of processing within your Zoho environment.

3.4 Sub-processors and retention

• Sub-processors: to operate the Integration we rely on cloud infrastructure and telephony providers, and on the Zoho PhoneBridge framework as the delivery channel to your Zoho account. We maintain a current sub-processor list and give customers 30 days' advance notice of any new sub-processor.
• Retention within Voipe: call metadata and recording links are retained per Section 8. Data written into your Zoho account is retained and deleted according to your Zoho configuration and your agreement with Zoho — Voipe does not control retention inside your Zoho environment.
• Disabling the Integration stops future data flow to Zoho; it does not retroactively delete entries already written into your Zoho account.

4. How We Use Information

• Providing the Services and managing accounts — performance of contract;
• Billing and payments — performance of contract;
• Technical support — performance of contract;
• Service improvement and usage analysis — legitimate interest;
• Information security and fraud prevention — legitimate interest;
• Marketing communications — explicit consent;
• Legal compliance — legal obligation.

5. Call Recordings

Where recording is enabled, recordings are stored encrypted (AES-256). Under Israeli law, recording a call requires the consent of at least one party; the business customer is responsible for obtaining any consent required from callers before recording begins. Voipe processes recordings solely on the customer's instructions as processor.

6. Sharing with Third Parties

We do not sell your personal data. We may share data with: telephony carriers (for routing), cloud infrastructure providers, payment processors, the Zoho PhoneBridge framework (for the Integration data flow described in Section 3), analytics providers where you have consented, and authorities where required by law.

7. Information Security

• Encryption in transit (TLS 1.2+) and at rest (AES-256);
• Role-based access control (RBAC) and MFA for administrative access;
• Periodic security testing, monitoring, and incident-response procedures.

8. Data Retention

9. Your Rights

Under the Israeli Privacy Protection Law, 5741-1981 (as amended, including Amendment 13, effective August 2025), and, where applicable, the GDPR, you have the right to:

• Access the personal data we hold about you;
• Rectify inaccurate data;
• Erase data, subject to legal retention limits;
• Object to processing for marketing purposes;
• Data portability — receive your data in a structured format.

Because call data processed through the Integration is controlled by you, requests from your end users regarding data in your Zoho account should be directed to you as the controller; we will assist you as your processor. To exercise your own rights, contact privacy@voipe.co.il. We respond within 30 days and verify identity before disclosing data.

10. Cross-Border Transfers

Your data may be stored or processed on servers outside Israel. Such transfers are made in accordance with the Israeli Privacy Protection Regulations (Transfer of Data Abroad) and, where applicable, under Standard Contractual Clauses (SCCs). Israel benefits from an EU adequacy decision; transfers to the EU/EEA are recognized as adequate under Israeli law.

11. Breach Notification

In the event of a material security breach, we will notify affected users within 72 hours of discovery and report significant incidents to the Israeli Privacy Protection Authority. For data we process on behalf of a customer, we notify the customer (as controller) so they can inform affected individuals.

12. Amendment 13 (Israeli Privacy Law)

Amendment 13 to the Privacy Protection Law (effective August 2025) strengthens enforcement, expands definitions of sensitive data, and introduces additional obligations for controllers and processors. Voipe processes the categories of data described above; we do not collect voice biometrics, health data, or other special categories of sensitive data as defined by the amendment.

13. Contact

• Privacy: privacy@voipe.co.il
• Sales / general: sales@voipe.co.il
• Phone / WhatsApp: +972-3-6411111
• Legal entity: Voipe Telecom Ltd., Rishon LeZion, Israel