Privacy Policy
Data Protection & Regulatory Privacy Notice • CallingCRM
1. Scope & Consent
M1 ENTITIES SOLUTIONS ("we," "our," or "us") operates the CallingCRM platform. This Privacy Policy describes how we collect, store, process, and protect your personal information when you register an account, utilize our dialer services, or access our APIs.
2. Information Collected During Registration
When you register, we collect your name, organizational name, email address, hashed authentication credentials, and your explicit legal consent metadata. This metadata includes the exact UTC timestamp of your acceptance, accepted terms and privacy policy versions, client IP address, and browser user-agent. This data is collected under legitimate interest and legal compliance obligations.
3. Telephony, Audio Recordings & CDR Data
Call Detail Records (CDRs), call metadata, and call audio recordings generated through WebRTC and SIP gateways are processed on behalf of your tenant organization. Recordings are stored with encryption at rest and retained in accordance with your configured retention rules and statutory telecom requirements.
4. Security & Data Isolation
We enforce strict multi-tenant data segregation, role-based access control (RBAC), and TLS 1.3 encryption in transit. Password hashes are salted using industry-grade bcrypt. Acceptance audit records are protected against unauthorized modification or deletion.
5. User Rights & Inquiries
Depending on your jurisdiction (DPDP Act, GDPR, CCPA), you may have the right to request access, rectification, or export of your personal information. To exercise your rights, email privacy@m1entities.com.