Minimal call evidence, not call content

Data processed

Aircall sends completed-call events containing call IDs, timestamps, direction, status, missed-call reason, and the other party's phone number. The phone number is canonicalized in Worker memory, transformed into an account-keyed HMAC, and discarded before queueing or storage.

Data retained

Cazimedia retains the resulting digest, call IDs, timestamps, missed-call reason, configured SLA, resolution outcome, encrypted Aircall OAuth token, hashed webhook token, billing identifiers, sessions, and generated receipts. We do not retain phone numbers, contact names, recordings, voicemail, transcripts, comments, tags, or message content.

Processors and purpose

Cloudflare processes hosting, D1 database, Queue, Durable Object rate limiting, R2 receipt storage, and Turnstile verification. Stripe processes subscription billing. Aircall supplies the authorized call events. Data is used only to operate callback-SLA evidence, secure the service, provide billing, and answer support requests.

Retention and deletion

Case evidence is retained for up to 365 days while the installation remains active. Download objects expire after 15 minutes. A customer can delete an installation after canceling active billing; the app removes the Aircall webhook before deleting Cazimedia-held app data.

Contact

[email protected]. The shared Cazimedia privacy policy and terms also apply.