Privacy Policy

The Services are operated by PapaCall LLC, registered under the laws of Republic of Georgia. Therefore, it is governed by the laws and regulations of Republic of Georgia.

Our overriding policy is to collect as little user information as possible to ensure a private user experience when using the Services. The Company do not have the technical means to access the content of your encrypted emails, files, calendar events, passwords, or notes.

Data collection is limited to the following:

In order to pursue our legitimate interest of preventing the creation of accounts by spam bots or human spammers, the Company use a variety of human verification methods. Verification may also be requested in order to protect against brute-force attacks.

Services activity: The processing activities carried out to detect abusive and fraudulent use of our services, and take appropriate measures. The legal basis of this processing is our legitimate interest to protect our service against non-compliant or fraudulent activities.

IP logging: By default, the Company do not keep permanent IP logs. However, IP logs may be kept temporarily to combat abuse and fraud, and your IP address may be retained permanently if you are engaged in activities that breach our Terms of Service. The legal basis of this processing is our legitimate interest to protect our service against non-compliant or fraudulent activities.

Communication with the Company: Your communications with us, such as support requests, bug reports, or feature requests may be saved by our staff. The Company may also rely on third parties. The legal basis for processing is our legitimate interest to troubleshoot more efficiently and improve the quality of our Services. The information you provide when you contact our support team is processed for analytics purposes (such as to obtain aggregate statistics), but the Company do not do any targeted advertising or any profiling.

The Company will only disclose the limited user data the Company possess if the Company is legally obligated to do so by a binding request coming from the competent authorities.

The Company may comply with electronically delivered notices only when they are delivered in full compliance with the requirements of Georgian law.

The Company will not comply with the request until all legal or other remedies have been exhausted. Under no circumstances the Company has possibility to decrypt end-to-end encrypted content and disclose decrypted copies.

Through your web-interface, you can directly access, edit, delete, or export personal data in your use of the Services.

The Software is designed with end-to-end encryption, meaning the Company does not have access to the content of your meetings, including audio, video, screen sharing, or chat messages. All such data is encrypted on your device and can only be decrypted by meeting participants. Meeting authentication is secured using the Secure Remote Password, ensuring that the Company servers can verify participants without ever accessing meeting passwords.

The Company does not have access to encryption keys or meeting passwords and therefore cannot decrypt or record meetings. Participants may join anonymously and are identified only by names they choose, which are end-to-end encrypted.

Within the limits of applicable law, the Company reserves the right to review and change this Privacy Policy at any time. As long as you are using the Services, you are responsible for regularly reviewing this Privacy Policy. Continued use of the Services after such changes are performed shall constitute your consent to it.