Who is responsible
LinkedSIP, the operator of linkedsip.com, is responsible for the personal data described here. Contact us about it at [email protected].
We collect only what we need to provide calling, take payments, prevent fraud and meet our legal obligations. We do not sell personal data and do not use it for advertising.
What we collect
| Data | Examples | Why |
|---|---|---|
| Account details | Email address, password (stored only as a hash), two-step verification settings | To create and secure your account and contact you about it |
| Sign-in records | When each sign-in session started and ends. We do not keep your IP address or browser details | Security and fraud prevention |
| Call records | Number called, SIP login used, start time, duration and charge | To connect and bill calls, answer disputes and detect misuse |
| Payment records | Amount, coin, network, transaction identifier and the time a payment arrived | To credit payments, handle refunds to your balance and keep accounting records |
| Requests and messages | Phone number requests, including the use you describe, and messages to support | To answer and fulfil them |
We do not record the audio of your calls. We do not ask for identity documents to open an account.
Why we may use it
Where data protection law asks for a legal basis, we rely on performing our contract with you (account, calls, billing), our legitimate interests in keeping the service secure and preventing fraud, and legal obligations such as accounting and record keeping.
Cryptocurrency payments are public
Payments on public blockchains can be seen by anyone, permanently, and we cannot remove or hide a transaction. Payments in each coin go to a receiving address that all customers share, and we tell payments apart by their exact amount. Anyone can see the payments that address receives, but the blockchain does not show which account a payment belongs to. Blockchain analysis by others may still link your payments to your wallet.
Who we share data with
- Carriers and our calling provider receive the number called, the caller ID your system sends and the details needed to set up your SIP login, because they are needed to complete calls.
- Service providers that host our systems and send our emails, under terms that limit their use of the data to providing services to us.
- Blockchain data providers that we ask whether a payment has arrived. They receive our receiving addresses and transaction identifiers, which are public anyway, and no account details.
- Authorities, when the law requires it, and others where needed to protect our rights or prevent fraud.
Cryptocurrency prices come from a market data provider. We send it no personal data.
Our providers may process data in countries other than yours. Where data protection law requires it, we use the safeguards it provides for, such as standard contractual clauses.
Cookies
We use a cookie to keep you signed in to the account area. It is needed for the account area to work. We do not use advertising or analytics cookies.
How long we keep data
- Account details: while your account is open, and then as long as needed to close it out.
- Call, payment and ledger records: as long as needed for billing, disputes, fraud prevention and the record-keeping periods the law sets, then deleted or anonymised.
- Sign-in session records: until the session expires.
Your rights
Depending on where you live, you may have the right to access the data we hold about you, correct it, ask us to delete it, object to or restrict some uses, and receive a copy in a portable format. To use these rights, email us from the address on your account; we answer within 30 days. Some records, such as payments and the ledger, must be kept even if you ask us to delete them; we will tell you when that applies. You can also complain to the data protection authority where you live.
Children
The service is for adults. We do not knowingly collect data from anyone under 18, and we close accounts we find were opened by one.
Security
Passwords are stored as hashes. SIP passwords are stored encrypted, and every time one is shown in your account it is recorded. Staff access to account data requires two-step verification, and staff actions on accounts are logged. If a breach puts your data at risk, we will tell you and the authorities as the law requires.
Changes
We will publish any update to this policy with its date, and tell account holders about significant changes before they take effect.
Contact
Questions about this policy: [email protected]