Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how DialSync Solutions ("DialSync", "we", "us", "our") collects, uses, discloses, retains, and protects personal information when you visit dialsyncsolutions.com (the "Site"), submit a Know Your Customer ("KYC") application, create or maintain a wholesale voice account, or use our voice termination, SIP trunking, compliance, and related telecommunications services (collectively, the "Services").

DialSync is a wholesale voice service provider serving business customers—including call centers, BPOs, telecom resellers, and enterprise operators—in the United States, United Kingdom, Canada, and other jurisdictions. We process personal information of authorized representatives, beneficial owners, billing contacts, and individuals whose call metadata or communications may be handled in connection with the Services.

We respect privacy and are committed to handling information responsibly. This Policy should be read together with our Cookie Policy and applicable service agreements.

2. Data Controller & Contact

For purposes of the UK GDPR and EU GDPR, DialSync Solutions is the data controller for personal information described in this Policy, except where we process information solely on behalf of a customer as a service provider or processor under a separate agreement.

DialSync Solutions
30 N Gould St Ste R
Sheridan, WY 82801, USA
Email: support@dialsyncsolutions.com
Phone (US): +1 (332) 265-2728 · WhatsApp
Phone (UK): +44 7462 097922 · WhatsApp

For privacy-specific inquiries, including rights requests, contact us using the details above with the subject line "Privacy Request."

3. Scope & Application

This Policy applies to information we collect through the Site, KYC onboarding forms, customer portals, email, phone, support tickets, billing systems, and network operations platforms. It does not apply to third-party websites, carriers, or platforms that may be linked from our Site or integrated with your own infrastructure.

Our Services are directed to businesses and their authorized personnel. We do not offer consumer residential telephone service. If you interact with us on behalf of an organization, you represent that you have authority to provide information and to bind that organization to this Policy where applicable.

Where DialSync acts as a processor for customer-originated traffic (for example, call content or end-user telephone numbers transmitted solely for routing), the customer's privacy policy and applicable law govern that processing. Customers remain responsible for providing appropriate notices to their end users.

4. Information We Collect

4.1 Information You Provide Directly

• Account and business information: legal entity name, trade name, business type, incorporation jurisdiction, tax identifiers (EIN, VAT, etc.), registered and operating addresses, website URL, and industry sector.
• Contact information: names, titles, email addresses, telephone numbers, and authorized signatory details for account administrators, technical contacts, and billing contacts.
• KYC and compliance information: government-issued identification, beneficial ownership declarations, corporate formation documents, proof of address, campaign descriptions, intended use cases, destination markets, volume estimates, compliance attestations (TCPA, DNC, STIR/SHAKEN, OFCOM-related representations), and other materials required for onboarding or ongoing review.
• Payment and billing information: invoicing preferences, bank account or payment card details (processed by PCI-compliant third-party payment processors; DialSync does not store full card numbers on its own servers where prohibited by PCI DSS), credit references, and tax exemption certificates.
• Communications: content of emails, chat messages, support tickets, traceback responses, regulatory correspondence, and recordings of calls with our support or sales teams where permitted by law and disclosed at the time of the call.
• Service configuration data: SIP credentials metadata, IP allowlists, routing preferences, DID assignments, and technical parameters necessary to provision Services.

4.2 Information Generated Through the Services

• Call Detail Records (CDRs) and call metadata: originating and terminating telephone numbers, call timestamps, duration, disposition codes, routing paths, authentication headers (including STIR/SHAKEN attestation results where applicable), trunk identifiers, and associated billing records.
• Network and security logs: IP addresses, session identifiers, authentication events, fraud alerts, rate-limit triggers, and diagnostic logs from switches, session border controllers, and monitoring systems.
• Usage and performance data: concurrent channel utilization, ASR/ACD metrics, geographic traffic distribution, and capacity consumption used for billing, capacity planning, and abuse detection.

4.3 Information Collected Automatically on the Site

• Device and browser data: browser type, operating system, device type, screen resolution, language preferences, and referring URLs.
• Site usage data: pages viewed, links clicked, time on page, form interactions, and error reports.
• Cookies and similar technologies: as described in our Cookie Policy, including strictly necessary session cookies, functional preferences, and analytics cookies where consented.

4.4 Information from Third Parties

We may receive information from identity verification vendors, credit bureaus, fraud prevention databases, carrier partners, regulatory traceback requests, public business registries, and marketing partners (where you have consented to receive communications). We use this information to verify identity, assess risk, route traffic, and comply with law.

5. How We Use Information

We use personal and business information for the following purposes:

• Service delivery: provisioning SIP trunks, voice termination, DIDs, compliance filtering, STIR/SHAKEN signing, and related wholesale voice services.
• Account administration: creating and managing accounts, authenticating users, and providing customer support.
• KYC and onboarding: verifying business legitimacy, beneficial ownership, and suitability for wholesale voice services.
• Billing and collections: calculating usage charges, issuing invoices, processing payments, managing deposits, and resolving billing disputes.
• Compliance and legal obligations: responding to FCC, OFCOM, ITG traceback requests, law enforcement inquiries, tax reporting, and telecommunications regulatory requirements in the US, UK, and other applicable jurisdictions.
• Fraud prevention and network security: detecting toll fraud, traffic pumping, illegal robocalling, spoofing, account takeover, and other abusive or unlawful activity on our network.
• Service improvement: analyzing network performance, developing new features, and conducting internal audits and quality assurance.
• Communications: sending service notices, security alerts, policy updates, and—with consent or as permitted by law—marketing about DialSync products and events.
• Legal defense and enforcement: establishing, exercising, or defending legal claims and enforcing our agreements.

We do not use call content for advertising purposes. Where call recording or content inspection is offered as a feature, it is governed by your service agreement and your obligations toward call participants.

6. Legal Bases for Processing (GDPR/UK)

Where the UK GDPR or EU GDPR applies, we rely on the following legal bases:

• Contract (Art. 6(1)(b)): processing necessary to perform our agreement with you or to take steps at your request before entering a contract, including provisioning Services, billing, and account support.
• Legal obligation (Art. 6(1)(c)): processing required to comply with telecommunications, anti-fraud, tax, sanctions, and law-enforcement obligations, including CDR retention and traceback cooperation.
• Legitimate interests (Art. 6(1)(f)): operating and securing our network, preventing fraud and illegal traffic, improving Services, and conducting limited business analytics, balanced against your rights and interests. You may object to processing based on legitimate interests as described in Section 12.
• Consent (Art. 6(1)(a)): where you have given clear consent, such as for non-essential cookies, certain marketing communications, or optional data uses. You may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.
• Vital interests or public interest: in rare cases where required to protect life or as mandated by public authority requests under applicable law.

Where we process special categories of personal data (for example, identity document images submitted during KYC), we rely on applicable exemptions including substantial public interest in preventing fraud and ensuring network integrity, or explicit consent where required.

7. US State Privacy Rights

Residents of California and certain other US states have privacy rights under laws such as the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), and analogous state statutes. This section summarizes key concepts applicable to DialSync's business-to-business operations.

7.1 Categories of Personal Information

In the preceding twelve months, we may have collected identifiers (name, email, phone, IP address), commercial information (account history, usage records), internet activity (Site interactions), professional information (job title, business role), and sensitive personal information in limited cases (government ID numbers submitted for KYC, where applicable).

7.2 Business Purposes

We use personal information for the business purposes described in Section 5. We do not sell personal information and do not share personal information for cross-context behavioral advertising.

7.3 Your State Privacy Rights

Subject to applicable exceptions, you may have the right to:

• Know what personal information we collect, use, disclose, and retain.
• Access specific pieces of personal information we hold about you.
• Delete personal information, subject to legal and contractual retention requirements.
• Correct inaccurate personal information.
• Opt out of the sale or sharing of personal information (DialSync does not sell or share for cross-context behavioral advertising).
• Limit use and disclosure of sensitive personal information to purposes permitted by law.
• Non-discrimination for exercising privacy rights.

7.4 Authorized Agents and Verification

We will verify requests using information associated with your account. Authorized agents must provide proof of authority. We will respond within timeframes required by applicable law.

To exercise rights, email support@dialsyncsolutions.com with "State Privacy Request" in the subject line.

8. How We Share Information

We do not sell personal information. We disclose information only in limited circumstances:

• Service providers and subprocessors: cloud hosting, payment processors, KYC/identity verification vendors, fraud analytics, email delivery, customer support platforms, and professional advisors, bound by contractual confidentiality and data protection obligations.
• Interconnect and carrier partners: upstream and downstream carriers, numbering administrators, and STIR/SHAKEN certificate authorities as necessary to route, authenticate, bill, and troubleshoot voice traffic. CDR and routing data shared with carriers is limited to what is required for interconnection.
• Compliance and regulatory bodies: FCC, OFCOM, Industry Traceback Group (ITG), FTC, state attorneys general, courts, and law enforcement when required by subpoena, court order, statutory obligation, or lawful traceback request.
• Corporate transactions: in connection with a merger, acquisition, financing, reorganization, or sale of assets, subject to appropriate confidentiality protections.
• With your direction or consent: when you authorize disclosure or request integration with a third-party system.
• Protection of rights: when we believe disclosure is necessary to protect DialSync, our customers, or others from fraud, abuse, illegal activity, or violations of our agreements.

We require service providers to process personal information only for specified purposes and in accordance with our instructions and applicable law.

9. International Data Transfers

DialSync operates in the United States and serves customers in the UK, EU, and Canada. Personal information may be transferred to and processed in the United States and other countries where we or our service providers maintain facilities.

Where personal information is transferred from the UK or EEA to countries not deemed to provide adequate protection, we implement appropriate safeguards including:

• the UK International Data Transfer Agreement (IDTA) or UK Addendum to EU Standard Contractual Clauses;
• EU Commission Standard Contractual Clauses (SCCs) Module 2 (controller-to-processor) or Module 1 (controller-to-controller) as applicable;
• supplementary measures such as encryption in transit, access controls, and transfer impact assessments where required.

For Canadian customers, transfers are subject to applicable provincial and federal privacy legislation. Contact us for information about transfer mechanisms relevant to your jurisdiction.

10. Data Retention

We retain personal information for as long as necessary to fulfill the purposes described in this Policy and to comply with legal, regulatory, accounting, and reporting obligations. Retention periods vary based on data type, jurisdiction, and contractual requirements:

When retention periods expire, we delete or anonymize information unless further retention is required by law or legitimate business need.

11. Security Measures

We implement administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, alteration, disclosure, destruction, and loss. Measures include, where appropriate:

• encryption of data in transit using TLS and industry-standard protocols for SIP signaling where supported;
• role-based access controls, multi-factor authentication for administrative systems, and principle of least privilege;
• network segmentation, firewalls, intrusion detection, and continuous monitoring of voice and data infrastructure;
• secure development practices, vulnerability management, and periodic security reviews;
• physical security controls at facilities hosting critical infrastructure;
• employee training on data protection and incident response procedures;
• contractual security requirements for vendors processing personal information on our behalf.

No method of transmission or storage is completely secure. While we strive to protect your information, we cannot guarantee absolute security. You are responsible for safeguarding credentials, SIP authentication details, and portal passwords associated with your account.

If we become aware of a data breach affecting personal information subject to notification requirements, we will notify affected parties and regulators as required by applicable law.

12. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access: obtain confirmation of whether we process your information and receive a copy.
• Rectification: request correction of inaccurate or incomplete information.
• Erasure: request deletion where no overriding legal or legitimate basis requires continued processing.
• Restriction: request that we limit processing in certain circumstances.
• Data portability: receive personal information you provided in a structured, commonly used, machine-readable format where technically feasible.
• Objection: object to processing based on legitimate interests or for direct marketing.
• Withdraw consent: where processing is based on consent, withdraw it at any time.
• Complaint: lodge a complaint with a supervisory authority.

UK residents may contact the Information Commissioner's Office (ICO) at ico.org.uk. EU residents may contact their local data protection authority. US state residents may contact their state attorney general.

To exercise rights, email support@dialsyncsolutions.com. We will respond within one month (or the period required by applicable law). We may need to verify your identity before fulfilling requests.

13. Automated Processing

We use automated systems to monitor voice traffic patterns, detect fraud, flag potential Acceptable Use Policy violations, and assess KYC risk. These systems analyze metadata such as call volume, duration, destination patterns, and authentication results. Automated decisions may result in traffic throttling, account review, or suspension pending human investigation.

Where GDPR applies and automated processing produces legal or similarly significant effects, you may request human review, express your point of view, and contest the decision, subject to applicable exceptions for fraud prevention and network security.

14. Children's Privacy

Our Site and Services are not directed to individuals under 16 (or under 18 where local law requires parental consent for online services). We do not knowingly collect personal information from children. If you believe a child has provided information to us, contact us promptly and we will take steps to delete such information where permitted by law.

15. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, technology, or our practices. We will post the updated Policy on the Site with a revised "Last Updated" date. Material changes will be communicated by email to account holders or through a prominent Site notice at least 30 days before the effective date where required by law. Continued use of the Services after the effective date constitutes acceptance of the updated Policy.

16. Privacy Requests & Contact

For questions about this Policy, to exercise privacy rights, or to submit a complaint, contact:

DialSync Solutions — Privacy
30 N Gould St Ste R
Sheridan, WY 82801, USA
Email: support@dialsyncsolutions.com
Phone (US): +1 (332) 265-2728 · WhatsApp
Phone (UK): +44 7462 097922 · WhatsApp

Please include sufficient detail to identify your account and the nature of your request. We will acknowledge receipt and respond in accordance with applicable law.