Privacy Policy - Desktop App

Purpose

This document describes the data processed by the Breizh VOIP desktop app, how each kind of access it requests on your computer is used, who receives that data, and the rights available to you. It covers the desktop app only; the mobile app has its own policy, and use of the website is covered by the website's privacy policy.

Publisher and contact

The app is published and operated by:

• •BREIZH VOIP, association
• •SIREN: 821039971
• •4 rue Descartes, 29480 Le Relecq-Kerhuon, France
• •Email: [email protected]
• •Phone: +33 2 57 52 04 32

Who is responsible for your data

The app is used with an account created and managed by your company, which remains the data controller under the GDPR. BREIZH VOIP acts as a processor: we process this data on behalf of your company and according to its instructions. For any question about the purpose of a processing operation, please contact your company's administrator first.

Access used on your computer

The app only uses the access needed for telephony and its collaboration features. Each one is used as follows:

• •Microphone: capture your voice during calls and video meetings, and record the voice messages you send in the team chat.
• •Camera: send your image during a video call or meeting, and take your account's profile photo if you choose to.
• •Screen capture: share the screen or window you choose during a video meeting. For remote assistance, show your screen to a colleague from your company, or see theirs: a session only starts after the explicit consent of the person being assisted, a banner stays visible while it lasts, it can be stopped at any time, and control of the mouse and keyboard is only possible during an accepted session.
• •Notifications: alert you to an incoming call, a message or a meeting invitation.
• •Audio devices: choose the headset, microphone and speakers used for calls and ringing.
• •Start with the system: launch the app when you sign in, if you enable it. You can turn this off at any time (on Windows: Settings, Apps, Startup).
• •breizhvoip: links: open the app from such a link, for example from the administration panel.
• •Network access: connect to our servers.

Data processed

As part of the service, the app processes:

• •Your account credentials and a session token, to authenticate you. The token is stored on your computer, encrypted by the operating system's protection (DPAPI on Windows, Keychain on macOS, the session keyring on Linux).
• •Your call metadata: numbers called or calling, date, time and duration. It feeds your call log and your company's billing.
• •The messages you exchange in the team chat, the files and photos you attach, and the voice messages you record there.
• •Your profile photo, if you add one, stored on our servers.
• •Connection data for security purposes: IP address, operating system, app version, history of your sessions and sign-ins (with an approximate location derived from the IP address, visible in the app).
• •Your preferences and favorites, synced with your account on our servers so you can find them on your other devices. Settings specific to the computer (window size and position, interface size, selected audio devices) stay stored on the computer.
• •For the version distributed as an installer, checking for updates contacts our update server, which receives your IP address and the installed version. The Microsoft Store version is updated by the Store.

Call and video meeting recording

Calls are not recorded by default. Recording is a feature your company's administrator can enable; in that case, recordings are kept on your company's infrastructure. Video meetings can be recorded when a participant explicitly starts recording during the meeting. Contact your company's administrator to find out how it is configured.

Voicemail

When a caller leaves you a message, their voice is recorded in an audio file. If your company enables voicemail transcription, the message may also be automatically transcribed and summarized (see "Recipients and processors"). Voicemail messages, and any transcription and summary, are kept on your company's infrastructure and can be accessed from the app's voicemail by the people your company authorizes.

Recipients and processors

Your data is never sold, transferred or used for advertising. It is accessible to:

• •BREIZH VOIP, which operates the service (including the video meeting server) on servers hosted in France by OVH.
• •Microsoft, Google or Infomaniak, if you choose to sign in with an account from one of them: sign-in happens with that provider, in your browser, and it confirms your identity to us.
• •Google Cloud (automatic transcription and summary), when voicemail transcription is enabled by your company: the voicemail audio is then sent to Google Cloud to be transcribed and summarized.
• •Microsoft, for the version installed from the Microsoft Store, which handles its distribution and updates under its own terms.
• •Your company, which manages its users' accounts and access.

What the app does not do

The app contains:

• •No advertising and no advertising trackers.
• •No audience measurement or behavioral analytics tools.
• •No geolocation and no collection of your precise location.
• •No reading of your files, other than those you choose to attach to a message.
• •No resale or transfer of data to third parties.

Security

Communications between the app and our servers are encrypted in transit (TLS for signaling and data, encryption of audio and video streams). Access to the service is protected by authentication, the session token is encrypted on your computer, and each company's data is isolated from the others.

Retention period

Account data, call metadata and connection data are kept for the duration of the contract between your company and BREIZH VOIP, then deleted or anonymized, subject to the legal retention periods that apply to billing and security. Your preferences and favorites are kept on the server as long as your account exists. Data stored on the computer is deleted when the Microsoft Store version is uninstalled; for the version distributed as an installer, the app's data folder stays in place and can be deleted manually.

Your rights and deleting your data

Under the GDPR, you have the following rights:

• •Right of access to your data and to obtain a copy of it.
• •Right to rectify inaccurate data.
• •Right to erasure of your data.
• •Right to data portability.
• •Right to object to and restrict processing.
• •Account deletion: you can request the deletion of your account and associated data by writing to [email protected]. Your request is processed within 30 days. Your company's administrator can also delete your account from their administration area.
• •To exercise these rights, write to [email protected]. You may also lodge a complaint with the CNIL (the French data protection authority).

Minors

The app is a professional tool intended for employees of client companies. It is not intended for people under 16 and we do not knowingly collect data about them.

Changes to this policy

This policy may be revised, in particular when the app changes. Any new version is published on this page, with its update date.

Contact us

For any question about this policy or the processing of your data: [email protected]