Personal data (GDPR)

Retention periods

In Settings, Retention periods. Beyond them, the purge, which runs every hour, erases:

• Call recordings: 6 months at most; the call stays in the log.
• Voicemail messages, with their transcription.
• Call log: one year at least, traffic data retention obligation (French CPCE, art. L34-1).

An empty field takes your operator’s period.

Data subject rights

• Access and portability: everyone downloads their data from My account (My data); an admin does it for a user (Account tab, Export their data). The JSON file contains the account, the extension, sessions, sign-ins and actions, the extension’s calls over twelve months and voicemail messages.
• Erasure: Erase (GDPR) deletes the account, the extension, the voicemail and the recordings of the extension’s calls. What remains is the call log, kept one year by legal obligation, and the audit log, protected against any change.

Audit log

The Audit log (More menu) shows who did what, when and from where in your company: sign-ins (successful and refused), accounts created or changed, settings changed, exports and erasures. Filter by action (start of the name: utilisateur., connexion) or on refusals; click an action for its details. Entries can be neither changed nor erased.

For your record of processing activities, your operator provides the phone system’s sheet: your company is the controller for its users and their communications, the operator its processor.