AunTel Legal Policy
Privacy Policy
Learn how AunTel collects, uses, stores, protects, and shares account, billing, call, SMS, voicemail, E911, identity verification, and CPNI data.
Last updated: August 31, 2026 · Effective date: June 29, 2026
Policy record
Overview
This Privacy Policy explains what information AunTel collects, how we use it, who we share it with, how long we retain it, and what rights may be available to users in the United States and Canada.
We do not sell personal information, use service data for advertising, or share user data with data brokers.
Information we collect
- Account details: name, email address, password hash, phone verification status, country, preferred language, and security events.
- Telecommunications data: assigned numbers, call detail records, call direction, timestamps, duration, cost, message metadata, message content, media URLs, voicemail audio, and contact data.
- Billing data: Stripe customer identifiers, invoices, payment status, subscriptions, usage charges, and tax or regulatory billing records.
- E911 data: registered emergency service address, address validation status, and acknowledgement records.
- Identity verification data: verification status, verified name, verified address, provider references, and encrypted provider status or decision payloads where enhanced verification is required.
- Device and security data: IP address, user agent, authentication events, consent timestamps, and abuse-prevention signals.
How we use information
- Provide voice calling, SMS/MMS messaging, voicemail, number provisioning, billing, support, and account management.
- Route communications, calculate usage, enforce account limits, process payments, and maintain service records.
- Detect fraud, prevent abuse, investigate complaints, secure accounts, and comply with carrier, FCC, CRTC, and legal requirements.
- Send service notifications, billing notices, account alerts, policy updates, and legally required disclosures.
Service providers
| Provider | Data shared | Purpose |
|---|---|---|
| Telecommunications infrastructure providers | Phone numbers, routing details, call and message data | Voice, SMS/MMS, number, carrier, and phone verification services |
| Didit | Account identifier, verification session reference, and identity-document information needed for document-only verification | Default identity verification processor |
| Stripe | Name, email, billing details, payment method, and identity data only when Stripe KYC is explicitly selected | Payments, subscriptions, and optional identity verification |
| WhatsApp (Meta) | Phone number and verification code | Delivery of phone verification codes over WhatsApp |
| AunTel-operated infrastructure (no third-party media processor) | Voicemail recordings and MMS media | Media is stored on storage attached to our own application servers and served only to the authenticated account holder; it is not placed with an outside storage provider |
Retention
Different categories of information are kept for different periods. Recordings and media are deleted on a schedule; billing, security, and compliance records are kept substantially longer because we are required to be able to account for them.
Recordings and media. Voicemail audio recordings are automatically deleted up to 31 days after the voicemail is received, whether or not you have listened to them, and are not recoverable afterwards. The voicemail entry and its text transcription remain in your account after the audio has been deleted, so you can still read what was said; delete the voicemail itself if you do not want the transcription retained.
Billing, access, and compliance records. Usage and billing records, and logs of access to customer proprietary network information, are retained for longer than recordings and media, as required for legal, tax, carrier, fraud-prevention, and dispute-resolution purposes. These records describe the fact of a communication and its charges; they do not contain the audio.
Identity verification. Encrypted raw identity-provider status and decision payloads are retained for 90 days; we do not store identity document images, media, hosted-session URLs, or session tokens locally.
Other account content. User-controlled content such as contacts may remain until deleted or until account closure is processed, subject to retention obligations.
Your choices and rights
- You may access and correct account information through the dashboard where available.
- You may request account deletion, subject to legal and telecommunications retention requirements.
- California residents may have rights to know, delete, correct, and opt out of sale or sharing of personal information. AunTel does not sell personal information.
- Canadian users may have rights to access, correct, and withdraw consent where applicable under PIPEDA and provincial privacy laws.
Contact
Privacy requests may be sent to privacy@auntel.com.