Privacy policy

Applies to the iSAP.phone app, the softphone at phone.isap.network and iSAP Virtual PBX at pbx.isap.network.

Who is responsible

iSAP Solutions LTD (iSAP Group) is responsible for the processing described here. Contact for privacy questions: privacy@isap.network.

If your company uses iSAP Virtual PBX, your company decides how its phone system is used (for example who gets an extension and whether recording is switched on). For that data we act on your company's behalf.

What we process

• Your iSAP account: you sign in with your existing iSAP account (account.isap.one). We receive your account identifier and email address. There is no separate registration in iSAP.phone.
• Your workspace: membership and role in your company's workspace, and the extension assigned to you.
• Linked devices: device name, when it was linked and last used. The app keeps its access key in the iPhone Keychain.
• Calls: phone numbers, time, duration and outcome of calls made or received through your company's phone system, and usage for billing.
• Text messages, if your company uses messaging.
• Recordings, transcripts and AI features: off by default. They are only processed if the operator, your company and you switch them on.

On your iPhone

• Microphone: only during calls.
• Camera: only to scan the QR code that links the app. Images are not stored or sent.
• Contacts: you pick a contact with the system picker; only the selected number is used. Your address book is not uploaded.

There is no advertising and no tracking in iSAP.phone, and we do not sell personal data.

Why we process it

To provide the phone service to you and your company (contract), to meet legal obligations for telecommunications and accounting, and to keep the service secure and prevent abuse (legitimate interest).

Who receives data

• Telecommunications carriers (for example Telnyx, du or e&) receive what they need to connect calls and messages.
• Our servers are hosted by Contabo GmbH in Germany. Workspaces in the United Arab Emirates will be served from the UAE once that location is live; we will update this page then.
• The iSAP account service (account.isap.one) handles sign-in.
• Other iSAP Group services receive call metadata only (never call contents, recordings or transcripts), and only if your company connects them.

How long we keep it

Recordings and transcripts are deleted after the retention period your company sets (90 days by default). Call records and billing data are kept as long as your company and the law require. One-time link codes expire after 5 minutes.

Your rights

You can request access to your data, a copy (export), correction or deletion, and you can object to processing. You can also complain to a data protection authority.

Delete your data at any time: in the app under Account → Delete my iSAP.phone data, or on the web in your workspace settings. This removes your linked devices, workspace memberships, personal settings and open invitations. Your company keeps its extensions and the call records it is required to retain, without your name. Your central iSAP account is not deleted; manage it at account.isap.one.

Business use

iSAP.phone is a business phone app for members of a company workspace.

Changes

We update this page when our processing changes. Last updated: 2026-10-01.