Last updated: July 15, 2026
This Privacy Policy describes how Zarcom Inc. (“Zarcom,” “we,” “us,” or “our”), operator of the Zarcall cloud communications platform (“Zarcall” or the “Service”) at https://zarcall.com, collects, uses, discloses, and protects information. Zarcom Inc. is based in Burbank, California, USA. This Policy is part of our Legal Center and works together with our Terms of Service, Acceptable Use Policy, SMS Messaging Policy, Cookie Policy, E911 Disclaimer, Security overview, and Subprocessors list.
1. Who controls your data
When your organization uses Zarcall, your organization owns and controls its own communications data, and Zarcom acts as a service provider (processor) that stores and processes that data on your behalf to operate the Service. For our website, marketing, and billing, Zarcom acts as the business (controller). End users under an organization’s account should direct privacy requests to their organization administrator.
2. Information we collect
2.1 Account, contact, and billing
- Name
- Company / organization name
- Email address
- Phone numbers (including numbers you register, port, or are assigned)
- Billing information (billing contact and address; payments are processed by our payment provider and we do not store full card numbers)
2.2 Technical and security data
- IP address
- Browser and device information (type, operating system, identifiers, settings)
- Authentication logs (sign-ins, sessions, and security events)
2.3 Communications and service data
- Call Detail Records (CDR) — call metadata such as numbers, date, time, duration, direction, extension, and status
- SMS/MMS metadata — sender, recipient, timestamps, and delivery status (and, where we process it to deliver the Service, message content)
- Fax metadata — transmission details for faxes you send and receive, and the fax documents themselves
- Voicemail — voicemail audio and any transcriptions
- Call recordings — collected only when recording is enabled by the customer
2.4 Website data
- Cookies and similar technologies (see our Cookie Policy)
- Analytics information — aggregated usage and traffic data used to measure and improve the website and our advertising, where analytics are enabled
3. Why we collect information
We use information to provide, operate, secure, and support the Service; to route calls, messages, and faxes and store your communications for your access; to authenticate users and prevent fraud and abuse; to process billing, payments, and renewals; to respond to inquiries and, with your consent, to send marketing; to measure and improve our website and advertising; and to comply with law. Zarcall processes only the customer data necessary to operate the platform. We do not use the content of your communications for advertising, and we do not sell it.
4. Legal basis for processing
Where a legal basis is required (for example, for individuals protected by laws such as the GDPR), we rely on: performance of a contract (to provide the Service you or your organization requested); legitimate interests (to secure, support, and improve the Service and prevent fraud and abuse); consent (for marketing communications and certain cookies, which you may withdraw at any time); and compliance with legal obligations (such as tax, accounting, and lawful requests).
5. Data retention
We retain account and billing information for as long as your account is active and as required to meet legal, tax, and accounting obligations. Communications and service data (CDR, messages, faxes, voicemail, and recordings) are retained for the period needed to provide the Service and according to your organization’s settings and applicable law, after which the data is deleted or de-identified. When your account is closed, we delete or de-identify your data within a commercially reasonable period, except where retention is legally required.
6. Security measures
We use reasonable administrative, technical, and physical safeguards, including encryption of data in transit, hashed storage of passwords, access controls and authentication, activity and login logging, monitoring, and restricting access to authorized personnel and vendors. See our Security page for more detail. No method of transmission or storage is completely secure, and you are responsible for safeguarding your credentials and managing your users’ access.
7. Third-party service providers
We share information with a limited number of vendors that process it on our behalf to deliver the Service, under contracts that require them to protect it and use it only for that purpose. These include our upstream telecommunications carrier(s) (voice, SMS/MMS, and fax connectivity), our payment provider (Stripe), our business email and CRM provider (Zoho), our DNS, CDN, and security provider (Cloudflare), our cloud hosting and infrastructure provider(s), and, where enabled, analytics providers. A current list is maintained on our Subprocessors page. We may also disclose information to comply with law or lawful requests, protect rights and safety, or in a merger or sale of assets. We do not sell your personal information for money.
8. Call recordings and consent
Call recordings belong to the customer whose organization enabled them. Recording is off by default. California and many jurisdictions require that some or all parties consent before a call is recorded. The customer is solely responsible for obtaining any legally required consent before recording calls. We store recordings on your behalf and make them available to the users your administrators authorize.
9. Your rights
Subject to applicable law, you may request to access, correct, delete, or receive a copy of the personal information we hold about you. End users under an organization’s account should direct requests to their administrator; we will assist our customer in responding. To contact us directly, use the details in Section 12. We verify requests before responding.
10. California privacy rights (CCPA/CPRA)
If you are a California resident, you have the right to know about, access, correct, and delete the personal information we hold, to receive it in a portable form, to opt out of the “sale” or “sharing” of personal information, and to limit the use of sensitive personal information, subject to legal exceptions. We do not sell personal information for money; some sharing of online identifiers with analytics or advertising partners may be considered “sharing” under California law, and you may opt out. We will not discriminate against you for exercising your rights. To exercise them, contact us below; we verify identity before responding.
11. Account deletion
You may request deletion of your account and associated data by contacting info@zarcall.com or by asking your organization administrator to initiate closure. On deletion we terminate access and delete or de-identify your data within a commercially reasonable period, except information we must retain for legal, tax, security, or dispute-resolution purposes. Deletion is permanent — export any recordings, faxes, or records you wish to keep beforehand.
12. Contact us
Zarcom Inc. (operator of Zarcall)
Burbank, California, USA
Email: info@zarcall.com
Phone: (818) 456-1234
13. Changes to this Policy
We may update this Privacy Policy from time to time. The “Last updated” date above reflects the current version. Material changes will be posted on this page, and your continued use of the Service after they take effect constitutes acceptance.