Privacy Policy

About this Privacy Policy

By means of this Privacy Policy, Aircall provides you with information about how it uses Personal Data as a Data Controller.

uses your

as a

—on its own behalf— in the following situations:

• If you use Aircall product and Services that require an Aircall account (we further call you “Aircall User”), Aircall will process some of your Personal Data as a Data Controller under certain circumstances described below. An Aircall User is typically a representative or an employee of

  Aircall Customer 

  By “Aircall's Customers”, “Aircall Customer” or the “Customer” we mean the company that entered into a contractual relationship with Aircall, as is defined in the corresponding contract, and to whose account is the Aircall User's usage of Aircall product and Services linked.

  or of a prospect (a company that is in the process of becoming Aircall Customer) who acts as our Customer’s agent. If you use Aircall product and Services that require an Aircall account (we further call you “Aircall User”), Aircall will process some of your Personal Data as a Data Controller under certain circumstances described below. An Aircall User is typically a representative or an employee of Aircall Customer or of a prospect (a company that is in the process of becoming Aircall Customer) who acts as our Customer’s agent. If you are an Aircall User, Sections 1 and 6–13 apply to Aircall’s processing of your Personal Data. Also, Aircall likely processes, acting as a Data Processor, your Personal Data for other purposes than those stated herein. For more information about such processing (as well as for exercising your rights related to Personal Data Processing), you should contact the corresponding Aircall Customer in the first instance.

• You simply visit the

  Site 

  By “Site” we mean Aircall website: https://aircall.io.

  (we further call you “Site Visitor”) without being logged into your Aircall account, in case you are also an Aircall User. If you are a Site Visitor, Sections 3 and 6–13 apply to Aircall’s processing of your Personal Data.

• You showed interest in Aircall product or services and/or agreed to be listed as a contact in our marketing database (we further call you a “Lead”). If you are a Lead, Sections 4 and 6–13 apply to Aircall’s processing of your Personal Data.

• You contact or have been contacted by Aircall go-to-market teams, including our support, sales or customer success agents (we further call you “Aircall Contact”). You might contact us by phone via one of our customer support lines. If you are also a Lead or an Aircall User, you might have been contacted by us via phone. If you are an Aircall Contact, Sections 5 and 6–13 apply to Aircall’s processing of your Personal Data.
  
  If you do not provide us the personal information we request from you, you may not be able to benefit from the full use of our Services.

Aircall is a global service provider and, correspondingly, it collects Personal Data in different locations globally and from individuals across the globe. Thus, different privacy (personal data protection) laws apply to Aircall’s usage of your Personal Data. Aircall strives to follow the highest standards of protection of your personal data, respecting, on the other hand, local differences in applicable regulation. This Privacy Policy applies to Aircall’s processing of Personal Data globally.

Unless otherwise provided herein, all terms starting with a capital letter shall have the meaning ascribed to them in Aircall

.

If this Privacy Policy does not answer all your questions or concerns, you may also consult our Privacy FAQs.

If you are US Customer interested about protection of your Customer Proprietary Network Informations, please consult our CPNI Notice.

1. Aircall User’s Personal Data Processing

The Data Controller of Aircall User’s Personal Data is such Aircall entity, which is a contracting party to the Customer to whose account your Aircall usage is linked. It is always one of the Aircall’s entities listed in Section 14 of this Policy.

The table below indicates the different purposes for which your Personal Data, may be processed as an Aircall User by Aircall as a Data Controller, as well as their different categories, the legal basis the processing is based on, categories of their recipients, and information about the period for which we process your Personal Data for the particular processing purpose (retention period). In addition to the purposes listed below, Aircall may also process personal data as required by applicable law.

Purpose and included processing activities:

You are invited to contact us via means provided in Section 13 hereof for more information about the said recipients categories.

We do not store any bank information or credit details on our servers, provided that they are handled by a trusted third party independent and different from Aircall.

2. Aircall API Update Subscriber’s Personal Data Processing

When we process Personal Data of subscribers to our API update notifications for the purposes of this chapter Aircall.io, Inc. acts as the Data Controller.

The table below indicates the purpose for which your Personal Data may be processed as a subscriber to API update notifications by Aircall as a Data Controller, as well as their different categories, the legal basis the processing is based on, categories of their recipients, and information about the period for which we process your Personal Data for the particular processing purpose (retention period). In addition to the purposes listed below, Aircall may also process personal data as required by applicable law.

Purpose and included processing activities:

3. Site Visitor’s Personal Data Processing: Cookies

If you are a Site Visitor, the Personal Data we process about you are the cookies and similar online identifiers (further on collectively referred to as “cookies”).

Please note that the information in this Section only applies to Aircall’s usage of cookies on the Site. If you are an Aircall User and you access Aircall Services via a browser, Section 1 of this Privacy Policy (Aircall User’s Personal Data Processing) applies. Aircall’s cookie usage as per this Section 3 does not apply to you when you are signed in to your Aircall User account and you access the Aircall Dashboard via a browser.

The Data Controller of Site Visitor's cookies is Aircall SAS. The identity and the contact details of Aircall SAS can be found in Section 14 hereof.

Cookies are alphanumeric identifiers/trackers that are transferred to the device you use to access the Services via your browser. Cookies are widely used to make websites work, or work more efficiently, as well as to provide additional features for a better user experience and to provide information to site owners.

How can you set your cookie preferences, and which choices do we provide? Upon your first visit on the Site, a cookie banner will appear, unless you’re visiting the Site from the Americas (if you are visiting the Site from the Americas, please see the section “How do I change my cookie settings?” below). The cookie banner allows you to express your cookie choice for the performance, functional and targeting cookies:

• If you click on the “Accept all cookies” button, we will start deploying the performance, functional and targeting cookies.

• If you click on the “Reject all cookies” button, we will not deploy the performance, functional and targeting cookies. Only strictly necessary (technical) cookies will be deployed, unless you change your choice.

• If you click on the “Personalize my choice” button, you will be invited to make a separate choice for performance, functional and targeting cookies.

The strictly necessary (technical) cookies are automatically deployed to the device upon your first visit to the Site. We do not provide you with options for this cookie type, as disabling these cookies would affect how the Site functions. You may still disable these cookies in your browser setting (see the next paragraph).

How do I change my cookie settings? We encourage you to change your cookie preferences for performance, functional and targeting cookies at any time by clicking on the “Cookies Preferences” link at the bottom of the Site. The cookie banner will reappear and you can update your cookie choices from there.

Alternatively, most web browsers allow some control of most cookies through the browser settings. The default settings for Internet browsers are usually set to accept cookies, but you can easily change your browser’s settings. For more information, please visit: http://www.aboutcookies.org/.

You may also use a cookie management software, such as the TarteAuCitron or TagCommander software.

To opt out of being tracked by Google Analytics across all websites, visit http://tools.google.com/dlpage/gaoptout.

A list of additional software is also available on the French data protection authority (

), and additional links to your favorite browser setting are available on the Information Commissioner’s Office (

) website.

4. Lead's Personal Data Processing: Sales and Marketing

Who is the Data Controller? When we conduct our email marketing campaigns and outbound sales development activities (email and calling), as described in this chapter, the following Aircall companies typically participate in them and act as

: Aircall SAS, Aircall UK Ltd, Aircall.io, Inc. and Aircall PTY LTD.

Our email communication will always include identification of Aircall company leading our marketing activity in your region (Aircall SAS in Europe, Middle East, and Asia; Aircall.io, Inc. in North America; and Aircall PTY LTD in Australia). Other Aircall companies may participate, based on internal agreement between them, in the processing of your Personal Data within our email marketing campaigns and outbound sales development activities as follows:

• Aircall companies participate in creation of the email communication content and design;

• Aircall companies share the touchpoint for requests and complaints regarding the processing of your Personal Data in relation to Aircall's outbound sales development and marketing activities, whereby your requests and complaints are typically handled by Aircall SAS;

• Aircall companies jointly administer and share database used for Aircall's outbound sales development and marketing purposes; and

• Each Aircall company may enter into agreement with Aircall's business partners to enrich the shared database.

How do we collect your Personal Data? If we contact you with an email marketing campaign and/or as a part of our outbound sales development activities, it means we have your contact details listed in our database for these purposes. We collect contact details for our database from the following sources:

• Aircall's internal customer database: If you are Aircall's customer, we automatically add you to our database for email marketing communication, as we believe that you are interested in news about Aircall product, services, events and other content.

• Forms on Aircall Site: You have the option to sign up for our email marketing campaigns and outbound sales development activities via various forms on Aircall Site, including when you register for a webinar or event hosted by Aircall or where Aircall participates, and via support chat bot on the Site.

• Social networks: We may find your contact on a work-related social network, such as LinkedIn.

• Campaigns co-organized by Aircall: We also receive your contact when you participate in a marketing campaign co-organized by Aircall and its business partners.

• Data-enrichment tools and providers: Where local data protection laws allow and where we find a reliable data-enrichment tool provider, we may also receive some of your contact details. Every provider used by Aircall for this purpose is subject to Aircall's privacy team assessment to make sure we collect your data ethically and in compliance with applicable laws.

What should you do if you want us to stop contacting you as a Lead? You can find an "Unsubscribe" link in every email marketing communication sent by Aircall. Using this link is a reliable way to make sure we do not contact you with marketing emails anymore. Please note that it may take us up to 3 working days to process your "Unsubscribe" choice, so you may receive other marketing emails from us in the meantime. Thank you for understanding.

If we call you as a part of Aircall's outbound sales development activities, you can inform our outbound sales representative that you do not wish to be contacted in this way anymore at any time. We will make sure not to call you again.

Which Personal Data do we use? When we process your data as a Lead, we use, all or just some, depending on your particular circumstance, of the following Personal Data: name, email, phone number, company and job title, region/country, and/or IP address. We also use certain data about your company, such as company size, CRM, and whether you or your company is an Aircall Customer.

How do we use your Personal Data? The table below indicates the different purposes your Personal Data as a Lead may be processed by Aircall, the legal basis the processing is based on, categories of their recipients, and information about the period for which we process your Personal Data for the particular processing purpose (retention period).

Purpose and included processing activities:

Please note that not all categories of data recipients necessarily apply to you, depending on how we collect your Personal Data as a Lead (i.e., Aircall's ticketing system provider will only receive your Personal Data if you sign up for our marketing activities via chat bot on our Site).

5. Aircall Contact’s Personal Data Processing: Improvement of our product and performance

When we process Aircall Contacts’ Personal Data for the purposes of this chapter, the following Aircall companies typically participate in such processing and act as Joint Controllers: Aircall SAS and Aircall Telecom SL.

The table below indicates the purpose for which your Personal Data may be processed as an Aircall Contact by Aircall as a Data Controller, as well as their different categories, the legal basis the processing is based on, categories of their recipients, and information about the period for which we process your Personal Data for the particular processing purpose (retention period). In addition to the purposes listed below, Aircall may also process personal data as required by applicable law.

Purpose and included processing activities:

6. Other recipients of the collected Personal Data

Only our personnel, the services in charge of control (especially external auditors) and our recipient subcontractors may have access to your Personal Data.

Personal Data may also be disclosed in response to lawful requests made by government agencies or public authorities —including public officers or debt collection organizations— to meet national security, law enforcement, or any other legal requirements.

Depending on where you are located, we might have to enforce local regulations and requirements where the use of a local phone number requires verification of customer's identity and collection and storage of user details (in particular, first/last name and address) in the event we should receive an official request from a competent local authority.

7. Retention of Personal Data

We retain Personal Data when we have an ongoing legal basis to do so. When we no longer have legal basis to process Personal Data, we will either delete or aggregate it or, if this is not possible (for example, because Personal Data has been stored in backup archives), then we will securely store it and isolate it from any further processing until deletion is possible.

We may retain Personal Data to comply with our legal or regulatory obligations. In any case, upon ceasing or lifting of such obligations, Personal Data shall be removed from our systems and records, as well as that of our subcontractors, if any, or otherwise archived or anonymized so that they can no longer be identified.

8. Transfers of Personal Data outside of the country of origin

Aircall may transfer Personal Data to recipients (described in Section 6 above) located outside of the country of the Personal Data’s origin.

Personal Data can also be processed by mere access by individuals working outside the country of origin who work for us or for one of our trusted service providers (Data Processors).

The main locations where the Personal Data may be stored are the United States, Europe (European Economic Area, Switzerland, or the United Kingdom; collectively, “Europe”) and Australia. They also may be transferred to, mainly but not limited to, these countries as well as to India.

We have implemented suitable safeguards designed to transfer Personal Data outside countries of origin in a secure manner and in compliance with the applicable regulations, most significantly with the GDPR. We require the importers of the Personal Data to comply with security standards and obligations imposed by applicable regulations, above all, the security requirements of the GDPR. We execute appropriate contractual arrangements to deal with such transfers, in particular in respect of Personal Data originating from Europe the standard contractual clauses adopted by the Commission of the European Union and, following a thorough assessment, additional measures as required in accordance with the European Data Protection Board’s (EDPB) Recommendation no. 1/2020. You are invited to contact us via means provided in Section 13 hereof for more information in relation to the said safeguards.

Aircall also keeps monitoring the legislative development and latest guidance in relation to the personal data transfers outside Europe and commits to cooperate with EU data protection authorities (DPAs) and comply with the advice given by such authorities.

EU-U.S. Data Privacy Framework, UK Extension to the EU-U.S. Data Privacy Framework and Swiss-U.S. Data Privacy Framework 

Aircall participates in and complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF, together with the EU-U.S. DPF, including the UK Extension to the EU-U.S. DPF, jointly referred to as “DPF”) as set forth by the U.S. Department of Commerce. Aircall commits to subject all Personal Data received in the U.S.:

• From the European Economic Area (EEA) to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) in reliance on the EU-U.S. DPF;

• From the United Kingdom (and Gibraltar) to the EU-U.S. DPF Principles in reliance on the UK Extension to the EU-U.S. DPF; and

• From Switzerland to the Swiss-U.S. Data Privacy Framework Principles (Swiss-U.S. DPF Principles, together with the EU-U.S. DPF Principles jointly referred to as “DPF Principles”) in reliance on the Swiss-U.S. DPF,

and has certified to the U.S. Department of Commerce that its entity incorporated in the U.S. (Aircall.io, Inc.) adheres to the DPF Principles with regard to the processing of Personal Data. If there is any conflict between the terms in this Privacy Policy and the DPF Principles, the Principles shall govern. To learn more about the Data Privacy Framework (DPF) program, and to view Aircall’s certification, please visit: https://www.dataprivacyframework.gov/.

Where Aircall transfers Personal Data received under the DPF to a third party, Aircall requires that the third party’s processing of Personal Data is consistent with our obligations under the DPF. We remain liable under the DPF if the third party acting on our behalf processes Personal Data in a manner inconsistent with the DPF Principles unless we prove we are not responsible for the event giving rise to the damage.

Aircall.io, Inc. may be required to disclose Personal Data that it handles under the DPF in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.

Aircall commits to resolve DPF Principles-related complaints about its collection and use of Personal Data in compliance with the DPF Principles. EEA, UK and Swiss individuals with inquiries or complaints regarding Aircall’s handling of Personal Data received in reliance on the DPF should first contact Aircall at: privacy@aircall.io. In compliance with the DPF, Aircall commits to cooperate and comply with the advice of the:

• Panel established by the EU data protection authorities (DPAs) with regard to unresolved complaints concerning its handling of Personal Data received in reliance on the EU-U.S. DPF;

• UK Information Commissioner’s Office (ICO) and the Gibraltar Regulatory Authority (GRA) with regard to unresolved complaints concerning its handling of Personal Data received in reliance on the UK Extension to the EU-U.S. DPF; and

• The Swiss Federal Data Protection and Information Commissioner (FDPIC) with regard to unresolved complaints concerning its handling of Personal Data received in reliance on the Swiss-U.S. DPF.

In certain circumstances, the DPF provides the individual’s right to invoke binding arbitration to resolve complaints not resolved by other means, as described in Annex I to the DPF Principles.

Aircall offers individuals the choices and means described in Section 11 of this Privacy Policy for limiting the use and disclosure of their Personal Data.

Aircall.io, Inc. is subject to the investigatory and enforcement powers of the Federal Trade Commission.

9. Third-party links on the Site

Our Site and Services may include links to and from the websites of our partners, advertisers, and affiliates. If you follow a link to any of these websites, please note that these companies have their own privacy policies and that Aircall is not responsible or liable for any use of Personal Data by such third parties. We recommend that you check their policies before you visit these websites.

10. Security

We undertake to implement precautions, as well as organizational and technical measures, designed to maintain the security, integrity, and confidentiality of Personal Data, and, in particular, to help prevent them from being modified or damaged and stop any unauthorized third party from accessing them. As an example, our employees’ accounts are secured by strong passwords, and they are all bound by confidentiality obligations. All our data is encrypted both in transit and at rest. If you are Aircall User, please see our Information Security page here for more information about how your personal data is protected when you use the Aircall product.

11. Your rights and choices

In any case where Aircall processes your Personal Data as a Data Controller, you have, subject to applicable law, the following rights:

• To access and obtain a copy of Personal Data that we process;

• To rectify the Personal Data if inaccurate or outdated and/or supplement them if incomplete;

• To object to the processing of Personal Data that is based on legitimate interests;

• To erase Personal Data and to be forgotten;

• To withdraw your consent at any time to any processing of your Personal Data that is solely based on your consent;

• To portability - you have the right to move, copy, or transmit Personal Data relating to them;

• To restrict or limit the processing of Personal Data;

• To set guidelines to organize the use of Personal Data after the death of the concerned individual.

Depending on where you are located, you may have additional rights related to calls or other communications you place or receive using Aircall services.

In the event of any dispute, claim, question or disagreement arising from or relating to this Privacy Policy or breach thereof, you may lodge a complaint with a supervisory authority, be it the CNIL or your local authority (e.g. in case of Australia the Australian Information Commissioner (OAIC). Without prejudice to your said right, we invite you to first seek an amicable resolution thereof by contacting Aircall in writing, stating the grounds of your complaint and providing any supporting evidence.

Your additional rights under the DPF are described in section 8 above.

12. Amendments

We may amend the terms of this Privacy Policy from time to time. If you do not agree with the amended version of the Privacy Policy, you should stop using the Services or respectively stop visiting our website. All amended terms automatically become effective on the day when a new Privacy Policy is posted on the Site.

Should we add new consent-based processing of Personal Data, we shall ensure to obtain your consent prior to processing such Personal Data (e.g., via a box to tick).

13. Contact us

To exercise any of your rights listed in Section 11 of this Privacy Policy, please proceed to our Privacy Rights Request Form.

If you have questions regarding this Privacy Policy or if you want to share your concerns about our processing of your Personal Data, please contact us by email at privacy@aircall.io. Please be aware that this email address serves exclusively for matters related to privacy / personal data protection. In such matters we will usually get back to you within 5 working days. Should your request not be related to privacy / personal data protection, we might not answer.

By contacting us at privacy@aircall.io you can also reach the Data Protection Officer of Aircall SAS, registered with the CNIL.

For matters related to security (including with reports of detected vulnerabilities), please contact us at security@aircall.io.

You may also reach out to us via mail (see the addresses in Section 14 of this Policy).

14. Aircall entities

Aircall.io, Inc., a Delaware corporation with offices at 44 W 28th St, 14th, Floor, New York, New York 10001

Aircall SAS, a French société par actions simplifiée whose registered office is at 11-15, rue Saint-Georges, 75009 Paris (France), registered with the Paris Registre du Commerce et des Sociétés under No. 807 437 595

Aircall Telecom SL, a Spanish sociedad limitada whose registered office is at Avenida del Doctor Arce 14, 28002 Madrid (Spain), NIF: B88625694

Aircall PTY LTD, an Australian proprietary limited company whose registered office is at Level 1, 12 O’Connell Street, Sydney NSW 2000 (Australia), ABN: 33 646 704 314

Aircall UK Ltd, a private company limited by shares governed under the laws of England and Wales, whose registered office is at 12 New Fetter Lane, London, United Kingdom, EC4A 1JP, registered with the Registrar of Companies under No. 13885574

Aircall DE GmbH, a German Gesellschaft mit beschränkter Haftung, whose registered office is at Neue Schônhauserstraße 3-5, 10178 Berlin (Germany), registered with the Handelsregister B des Amtsgerichts München under No. HRB 272760

Aircall Telecom India Private Limited, a private company limited by shares governed under the laws of India, whose registered office is at K-62, First Floor, RIP, Green Park, South West Delhi, New Delhi, Delhi, India, 110016, registered with the Ministry of Corporate Affairs under Corporate Identification Number: U72200DL2022FTC407242