Privacy Policy
How we handle personal information.
Overview
CurrentBlack provides voice and fax services, including A2P (application-to-person) and P2P (person-to-person) calling, and digital faxing (the “Services”). This Privacy Policy explains how we collect, use, disclose, and protect personal information when you use the Services, visit our websites, or contact us.
This policy is designed to align with common telecom and privacy frameworks, including the EU/UK GDPR and the California CCPA/CPRA. Local requirements may apply based on your location and use case.
Who We Are
“CurrentBlack”, “we”, “us”, and “our” refer to the CurrentBlack entity operating the Services. For privacy inquiries, contact support@currentblack.com.
Data We Collect
Account and Profile
- Identifiers: name, email, phone number, username/handle.
- Credentials and security: hashed passwords, tokens, session IDs, verification codes.
- Business details (A2P): company name, brand/campaign registration data (e.g., 10DLC), use-case descriptions, sample scripts.
Service Usage and Telephony Metadata
- Call detail records (CDRs): caller/callee numbers or IDs, timestamps, duration, routing, signaling and error codes.
- Fax metadata: sender/recipient IDs, transmission status, page counts, timestamps.
- Device and network data: IP address, device type, OS, app version, carrier, and performance metrics.
Content We Process to Provide the Services
- Voice media: real-time audio necessary to establish and maintain calls; typically processed transiently and not retained unless you enable a feature that requires storage (e.g., voicemail or call recording, where available).
- Faxes and attachments: documents processed to complete delivery and, if you enable storage, retained per your settings.
Compliance and Anti‑Abuse
- Opt-in/opt-out signals, consent records, and complaint reports.
- Fraud and abuse indicators to detect spam, spoofing, or prohibited use.
Cookies and Similar Technologies
- Essential cookies for security and session continuity.
- Optional analytics (if enabled) to understand aggregate usage; no third‑party ad tracking.
How We Use Personal Information
- Provide and maintain the Services, including routing calls/faxes and troubleshooting.
- Authenticate users, secure accounts, prevent fraud and abuse, and enforce our terms and acceptable use.
- Facilitate regulatory and carrier compliance for A2P campaigns (e.g., brand/campaign registration, consent management).
- Communicate with you about service updates, incidents, and support.
- Analyze service performance and reliability on an aggregate basis.
- Comply with legal obligations and respond to lawful requests.
Legal Bases (EU/UK GDPR)
- Contract: to deliver the Services you request.
- Legitimate interests: to secure, improve, and support the Services, balanced with your rights.
- Legal obligation: to meet telecom and privacy requirements.
- Consent: where required (e.g., certain analytics, marketing, or recordings where applicable).
Voice, Recording, and Notice
- We do not record calls by default. If you enable call recording or voicemail where available, you are responsible for providing any legally required notice and consent to all parties. Laws vary by jurisdiction (e.g., one‑party vs. all‑party consent).
- Where supported, voice media is encrypted in transit; storage (if enabled) is encrypted at rest.
Fax Handling
- We process fax documents to complete delivery. If you enable stored copies, documents are retained per your settings and then deleted.
- Do not transmit sensitive data unless legally permitted and appropriate safeguards are in place. You are responsible for complying with industry‑specific obligations applicable to your use of fax.
Security
- Encryption in transit (TLS/SRTP where supported) and at rest for stored data.
- Access controls, principle of least privilege, audit logging, and service monitoring.
- Secure development practices, vulnerability management, and incident response procedures.
No system is perfectly secure. We work to protect your data but cannot guarantee absolute security.
Data Retention
- We keep personal information only as long as necessary to provide the Services, comply with law, resolve disputes, and enforce agreements.
- Voice media is typically transient and not retained unless you enable a feature that requires storage.
- Fax documents are retained only if you enable storage and for the period you select; otherwise we delete them after delivery.
- Metadata and logs may be retained for security, troubleshooting, and regulatory requirements.
International Transfers
We may process and store information in countries other than where you live. When we transfer personal data internationally, we use appropriate safeguards (for example, standard contractual clauses where applicable) in accordance with law.
Your Privacy Rights
EU/UK
You may have rights to access, correct, delete, restrict, or object to processing, and data portability. You may also withdraw consent where processing is based on consent.
California (CCPA/CPRA)
You may have rights to know, delete, correct, and to opt out of the sale or sharing of personal information. We do not sell or share personal information for cross‑context behavioral advertising.
Exercising Rights
To exercise rights, contact support@currentblack.com. We will verify your request and respond within the time required by law. Authorized agents may submit requests subject to verification.
Children
The Services are not directed to children under 16, and we do not knowingly collect personal information from them.
Do Not Track
We do not respond to browser “Do Not Track” signals. We honor applicable opt‑out rights provided by law.
Changes to This Policy
We may update this policy from time to time. We will post the updated version and change the effective date above. Material changes will be communicated through the Services or by email when appropriate.
Contact Us
Questions or complaints about privacy? Contact support@currentblack.com.