Privacy Policy

1. Information We Collect

We collect information you provide directly to us, information generated by your use of our services, and information obtained from third parties.

Account Information

When you register for a Vinix account, we collect your name, business name, email address, phone number, billing address, and payment information. For business accounts, we may also collect your Federal Tax ID (EIN) or other business identifiers necessary for regulatory compliance.

Usage Data

Our services automatically generate records of your usage, including call detail records (CDRs) containing originating and terminating numbers, call duration, timestamps, and call disposition. For SMS services, we retain message metadata (sender, recipient, timestamp, and delivery status) but do not retain the content of SMS messages beyond delivery. For internet services, we retain traffic volume, session duration, and IP address assignment records.

Device & Technical Information

When you access our web portal, desktop application, or mobile application, we collect device identifiers, operating system version, browser type, IP address, and application version. This information is used for security, troubleshooting, and service optimization purposes.

Cookies & Similar Technologies

Our website uses cookies and similar tracking technologies. See the Cookies & Tracking section below for details.

2. How We Use Your Information

We use the information we collect to:

• Provide and operate our services — provision your VoIP lines, process calls, route SMS messages, deliver internet connectivity, generate invoices, and support your account.
• Meet regulatory obligations — comply with FCC regulations, CALEA lawful intercept requirements, E911 obligations, STIR/SHAKEN caller ID authentication, and mandatory data retention rules applicable to telecommunications carriers.
• Improve our platform — analyze aggregate usage patterns to enhance call quality, network performance, and feature development. We use de-identified data for these purposes.
• Communicate with you — send transactional communications (invoices, service alerts, outage notifications), respond to support requests, and with your consent, send marketing communications about new features and offers.
• Fraud prevention and security — detect, investigate, and prevent fraudulent activity, abuse of our network (including traffic pumping and toll fraud), and unauthorized access to accounts.
• Legal compliance — respond to lawful subpoenas, court orders, and law enforcement requests; assert or defend legal claims; and comply with applicable laws and regulations.

3. Information Sharing

We do not sell your personal information to third parties. We may share your information in the following circumstances:

Service Providers

We engage trusted third-party vendors to assist in operating our business, including cloud infrastructure providers, payment processors, customer support platforms, and analytics providers. These vendors are contractually obligated to use your information only to perform services on our behalf and to maintain appropriate security standards.

Interconnect & Carrier Partners

As a licensed telecommunications carrier, we exchange call routing data (including calling and called party numbers) with other carriers as necessary to complete calls and messages. This is an inherent function of the public switched telephone network (PSTN).

Legal Requirements

We may disclose information when required by law, including in response to subpoenas, court orders, National Security Letters, or other legal process. Where permitted, we will notify you of such requests before disclosing your information. We also disclose information when we believe disclosure is necessary to protect the rights, property, or safety of Vinix, our customers, or the public.

Business Transfers

If Vinix is involved in a merger, acquisition, asset sale, or bankruptcy proceeding, your information may be transferred as part of that transaction. We will provide notice before your personal information is transferred and becomes subject to a different privacy policy.

4. Data Security

We implement industry-standard technical and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction. Our security practices include:

• Encryption in transit: All data transmitted between your devices and our services is encrypted using TLS 1.2 or higher. Voice traffic is encrypted using SRTP where supported by the endpoint.
• Encryption at rest: Sensitive data stored in our systems is encrypted using AES-256 encryption.
• Access controls: Access to customer data is restricted to employees who need it to perform their job functions, enforced through role-based access controls and multi-factor authentication requirements.
• Incident response: We maintain a documented incident response plan. In the event of a data breach that is likely to result in risk to your rights and freedoms, we will notify affected customers as required by applicable law and notify relevant regulatory authorities.
• Third-party audits: We conduct periodic security assessments and maintain SOC 2 Type II compliance for our core infrastructure.

No security system is impenetrable. We cannot guarantee the absolute security of your information. You are responsible for maintaining the security of your account credentials.

5. Your Rights

Depending on your location and applicable law, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request that we correct inaccurate or incomplete information.
• Deletion: Request deletion of your personal information, subject to our legal retention obligations (for example, call records required to be retained for regulatory purposes cannot be deleted on request).
• Opt-out of marketing: Unsubscribe from marketing communications at any time by clicking “unsubscribe” in any marketing email or contacting us directly.
• Data portability: Request a machine-readable copy of your account data.

To exercise any of these rights, contact us at [email protected]. We will respond to verified requests within 30 days. We may need to verify your identity before processing certain requests.

6. Cookies & Tracking

Our website uses the following categories of cookies:

• Strictly necessary cookies: Required for the website to function, including session management and security tokens. These cannot be disabled.
• Analytics cookies: We use first-party analytics to understand how visitors use our website (page views, session duration, traffic sources). We do not use Google Analytics or other third-party tracking pixels on our core service pages.
• Preference cookies: Remember your settings, such as your selected theme (light/dark mode) and cookie consent choice.

You can control cookie settings through our cookie consent banner or your browser settings. Note that disabling certain cookies may affect website functionality. We do not use cookies for targeted advertising.

7. Data Retention

We retain your information for as long as necessary to provide services and comply with our legal obligations:

• Call detail records (CDRs): Retained for 7 years to comply with FCC record-keeping requirements applicable to common carriers and to support dispute resolution.
• Account information: Retained for the duration of your account and for 3 years following account termination for legal and audit purposes.
• Billing records: Retained for 7 years to comply with IRS and state tax record-keeping requirements.
• Support tickets and communications: Retained for 3 years following resolution.
• Website analytics: Aggregated, de-identified data retained indefinitely; individual session data purged after 26 months.

When retention periods expire, we securely delete or de-identify the data.

8. Children’s Privacy

Our services are designed for businesses and are not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected information from a child under 13 without verifiable parental consent, we will take steps to delete that information. If you believe we may have inadvertently collected information from a child, please contact us at [email protected].

9. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Privacy team:

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and, where required by law, by direct notification to your registered email address. Your continued use of our services after the effective date of any changes constitutes your acceptance of the updated policy.