Privacy Policy

This Privacy Policy explains how personal data is processed within the SyrusVox Mobile application. It is provided in accordance with Regulation (EU) 2016/679 (GDPR).

1. Data Controller

2. How SyrusVox works

SyrusVox Mobile is the application that lets you use your VoIP PBX (phone system) from your smartphone. The app connects exclusively to the PBX you specify on first launch: call data (history, recordings and any transcriptions) is processed and stored on the infrastructure of your organization's PBX, which acts as an independent data controller for that content. There is no central Syrus server that collects this content.

3. Data we process and purposes

• Credentials and access data (username, session token, SIP credentials, PBX domain): to authenticate you and keep your session active. Stored encrypted on the device.
• Call audio (microphone): to make and receive VoIP calls.
• Phone contacts: read only on the device to display the caller's name and to speed-dial; they are not uploaded to any Syrus server.
• Push notification token: sent to the PBX to alert you of incoming calls and messages.
• Preferences (biometric lock, forwarding number): saved on the device.

The app does not use analytics tools, advertising trackers or profiling.

4. Device permissions

• Microphone — calls.
• Contacts — caller names and speed-dial.
• Notifications — calls and messages.
• Face ID / Fingerprint — optional app lock; biometric data stays on the device.
• Local Network & Bluetooth — connection to the PBX and audio.

Every permission can be revoked at any time from your phone's settings.

5. Legal bases

Performance of the service (authentication and calls), legitimate interest (service security), and consent for access to the microphone, contacts, notifications and biometrics.

6. Third-party providers

Apple (APNs) and Google (Firebase Cloud Messaging) for the delivery of push notifications. For recordings and any transcriptions, the PBX may rely on dedicated providers (e.g. a speech-to-text service and storage).

7. Data retention

Credentials and preferences remain on the device until you log out or uninstall the app. Call history, recordings and transcriptions are retained on the PBX according to the policies of the organization that manages it.

8. Your rights

You may exercise your rights of access, rectification, erasure, restriction, objection and data portability by writing to [email protected] (for data hosted on the PBX, also to your own organization). You may also lodge a complaint with the Italian Data Protection Authority — Garante per la protezione dei dati personali (www.garanteprivacy.it).