Gitasis Privacy Policy

1. Who We Are

Gitasis provides call center software, VoIP infrastructure tools, IVR flows, call reporting, call recording, and related operational services.

Contact: info@gitasis.com

2. Data We Process

Depending on the services enabled by a customer, Gitasis may process the following categories of data:

• User account data, such as name, email address, username, role, and permission information.
• Call metadata, such as caller number, called number, call date, call duration, call status, campaign, queue, and operator information.
• Call recordings, when call recording is enabled by the customer.
• Technical data, such as IP addresses, session information, logs, security events, and error records.
• Google Drive data required for cloud archiving, such as authorized account information, folder identifiers, file identifiers, file names, and file metadata.

3. How We Use Google Drive API Data

Gitasis uses the Google Drive API only to provide cloud archiving functionality for call recordings. When a customer authorizes Google Drive access, Gitasis may create folders, upload call recording files, read file metadata, and store Google Drive file identifiers so that authorized users can access, stream, or download recordings through the Gitasis service.

Gitasis does not use Google Drive data for advertising, profiling, or unrelated purposes.

Gitasis does not sell Google user data.

Gitasis does not transfer Google user data to third parties except as necessary to provide or improve the customer-requested functionality, comply with legal obligations, protect the service, or as otherwise expressly authorized by the customer.

4. Purposes of Processing

We process data for the following purposes:

• Operating call center, VoIP, IVR, and reporting services.
• Creating, storing, indexing, streaming, and downloading call recordings.
• Archiving call recordings to authorized cloud storage such as Google Drive.
• Managing customer accounts, user permissions, security, and access control.
• Calculating usage, balances, billing, and operational reporting.
• Maintaining service security, troubleshooting issues, and preventing unauthorized access.
• Complying with applicable legal and regulatory obligations.

5. Call Recording Retention

Call recordings are retained for six (6) months where retention is required by applicable law, regulation, contractual obligation, or customer configuration. After the applicable retention period, recordings may be deleted, archived, or retained longer only where required by law, a valid customer instruction, or a legitimate operational requirement.

Customers are responsible for ensuring that call recording, notice, consent, and retention settings are lawful for their own operations and jurisdictions.

6. Customer Responsibilities for Recorded Calls

Customers decide whether call recording is enabled and are responsible for providing legally required notices and obtaining any required consent from callers, employees, operators, and other participants.

Gitasis acts as a technical service provider for recording, storing, archiving, and making recordings available to authorized users.

7. Storage and Security

Gitasis applies technical and organizational measures designed to protect data against unauthorized access, loss, misuse, alteration, or disclosure. These measures may include access controls, authentication, logging, network security controls, and encryption where appropriate.

Google OAuth credentials and cloud integration settings are used only to operate the authorized integration and are protected against unauthorized access.

8. Sharing and Disclosure

Gitasis may disclose data only in limited circumstances:

• To infrastructure, hosting, storage, backup, or security providers needed to operate the service.
• To the customer or authorized users according to their permissions.
• To comply with applicable law, legal process, or enforceable governmental requests.
• To protect the rights, property, or security of Gitasis, customers, users, or the public.

9. Google Account Access and Revocation

A customer or authorized user may revoke Gitasis's Google Drive access at any time from their Google Account permissions page. Revoking access may stop Google Drive archiving, streaming, or download functions that depend on that authorization.

10. User Rights

Depending on applicable law, customers and users may have rights to request access, correction, deletion, restriction, portability, or objection regarding their personal data. Requests may be sent to info@gitasis.com.

11. Changes to This Policy

Gitasis may update this Privacy Policy from time to time. The updated version will be published on this page with a revised "Last updated" date.