Privacy Policy

1. Information We Collect

When you use Twilsoft, we collect:

• Account information: Email address, name, and company name when you sign up.
• Twilio credentials: Your Twilio Account SID, API Key SID, and API Key Secret (encrypted with AES-256-GCM at rest).
• Usage data: Call history metadata, SMS messages sent and received through the app, voicemail recordings (stored on your Twilio account).
• Device information: Device type, operating system, and push notification tokens for incoming call/SMS notifications.
• Payment information: Processed by Stripe. We do not store your credit card details.

2. How We Use Your Information

• To provide and maintain the Twilsoft service, including making and receiving calls and messages.
• To process payments and manage your subscription via Stripe.
• To send transactional emails (welcome, billing, account notifications) via SendGrid.
• To deliver push notifications for incoming calls and messages.
• To improve the service and troubleshoot technical issues.

3. Data Storage & Security

• Account data is stored in Google Cloud Firestore (US region).
• Twilio API credentials are encrypted with AES-256-GCM before storage and are never exposed to client applications.
• Authentication is handled by Firebase Authentication with industry-standard security practices.
• Voicemail recordings are stored on your Twilio account, not on Twilsoft servers. Recordings are automatically deleted after 30 days.
• All data transmission occurs over HTTPS/TLS.
• The backend runs on Google Cloud Run with automatic scaling and security patching.

4. Third-Party Services

Twilsoft uses the following third-party services:

• Twilio: Voice calling, SMS messaging, and voicemail. Subject to Twilio's Privacy Policy.
• Firebase (Google Cloud): Authentication, database, push notifications, and hosting.
• Stripe: Payment processing. Subject to Stripe's Privacy Policy.
• SendGrid (Twilio): Transactional email delivery.

5. Data Retention & Deletion

• Account data is retained as long as your account is active.
• Voicemail recordings are automatically deleted after 30 days.
• You can close your account at any time from the Settings page. This permanently deletes all data, cancels your subscription, and disconnects your Twilio numbers from Twilsoft.
• Your Twilio account and phone numbers are not affected by closing your Twilsoft account.

6. Children's Privacy

Twilsoft is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will delete it promptly.

7. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes by posting the new policy on this page and updating the "Last updated" date.

8. Contact

If you have questions about this privacy policy, please contact us at noreply@twilsoft.co.