QCoreTalk Privacy Policy

This Privacy Policy explains how QCoreTalk collects, uses, discloses, and protects information when you use talk.qcoret.com, our APIs, voice/SMS services, AI agents, and related products. It should be read together with our Terms of Service.

1. Scope

Applies to customers, administrators, end users of customer-deployed AI agents, and visitors to our portals. Does not apply to third-party websites we do not control.

2. Information We Collect

Account & billing

• Name, company, email, phone, address, country, timezone, currency
• Login credentials (stored hashed), session tokens, IP addresses
• Payment metadata from Stripe (we do not store full card numbers)
• Account balance, transactions, invoices

Telecommunications & usage (CPNI-related)

• Call Detail Records (CDRs): source/destination numbers, timestamps, duration, disposition, cost
• SMS/MMS metadata and message bodies you send or receive through our platform
• SIP device credentials, registration logs, call routing data
• AI call logs, transcripts, prompts, knowledge-base content you upload
• Recording files if you enable recording features

Technical & security

• Device/browser type, logs, cookies, fraud-prevention signals
• Support tickets and communications with our team

3. How We Use Information

• Provide, bill, secure, and troubleshoot Services
• Authenticate users and prevent fraud/toll fraud
• Comply with law, traceback, lawful intercept requests, and carrier obligations
• Improve platform reliability and AI features (aggregated/anonymized where possible)
• Send service notices, OTP codes, billing alerts, and regulatory communications
• Marketing only with consent where required

4. CPNI (Customer Proprietary Network Information)

Under U.S. FCC rules, CPNI includes call detail information about quantity, configuration, destination, and usage. We:

• Use CPNI only for providing telecommunications services, billing, and permitted purposes
• Require authentication before disclosing CPNI to you or your authorized agents
• Do not sell CPNI. We do not disclose CPNI to third parties for marketing without your approval
• Maintain safeguards against unauthorized CPNI access

You are responsible for protecting CPNI and portal credentials within your organization.

5. AI & Automated Processing

When you use AI agents, we process call audio/text, prompts, and knowledge bases to generate responses. You control what data is submitted. We may use subprocessors (e.g., speech/LLM providers) under contract. You must obtain caller consent where required.

6. Legal Bases (EEA/UK where applicable)

Processing is based on: contract performance; legitimate interests (security, fraud prevention); legal obligation; and consent where required (marketing, certain recordings).

7. Sharing & Subprocessors

We share data with service providers strictly to operate Services, including:

• Carriers: Telnyx, SignalWire (call/SMS routing)
• Payments: Stripe
• Infrastructure: hosting, email delivery, monitoring
• AI/telephony APIs as configured in your account

We may also disclose information when required by law, to protect rights/safety, or in connection with merger/acquisition with notice where practicable.

8. International Transfers

Data may be processed in the Dominican Republic, United States, EU, or other locations where providers operate. We implement appropriate safeguards (contracts, minimization) for cross-border transfers.

9. Retention

• Account data: while active + reasonable period after closure for legal/accounting needs
• CDRs/billing: typically 6–24 months unless longer retention required by law or dispute
• SMS/call content: per your settings and legal minimums; you may delete knowledge-base content you control
• Security logs: limited period based on operational need

10. Security

We use administrative, technical, and organizational measures (encryption in transit, access controls, monitoring). No method is 100% secure; report suspected incidents to operaciones@qcoret.com promptly.

11. Your Rights

Depending on jurisdiction, you may request access, correction, deletion, restriction, portability, or objection. Contact us to exercise rights. We may verify identity. You may lodge complaints with supervisory authorities where applicable.

12. California (CCPA/CPRA) Notice

California residents may have rights to know, delete, correct, and opt out of sale/share (we do not sell personal information). We honor authorized agent requests as required by law.

13. Cookies

We use essential cookies for sessions and language (e.g., qct_lang). Optional analytics cookies, if enabled, will be disclosed in cookie settings. You can control cookies via browser settings.

14. Children

Services are not directed to children under 13 (or 16 in certain jurisdictions). We do not knowingly collect children’s data.

15. Changes

We may update this Policy by posting a new version with an updated effective date. Material changes will be notified via portal or email where appropriate.

16. Contact

Privacy inquiries: operaciones@qcoret.com
QCoreT — QCoreTalk Telecommunications Platform