Privacy Policy
Last updated: 8 October 2026
1. Information We Collect
We collect information you provide directly to us, including name, email address, phone numbers you save or call, and support messages. We also collect account usage data, call records, device information, and payment transaction metadata. Card details are handled by Stripe and are not stored by FiraPhone.
2. How We Use Your Information
We use your information to: provide and improve our services, process transactions, send communications, prevent fraud, and comply with legal obligations.
3. Information Sharing
We do not sell your personal information. We may share information with: service providers who assist our operations, when required by law, or with your consent.
4. Data Security
We use reasonable technical and organizational safeguards, including encrypted connections in transit and trusted infrastructure providers. However, no method of transmission or storage over the Internet can be guaranteed to be completely secure.
5. Your Rights
Depending on your location, you may have rights to: access your data, correct inaccuracies, delete your data, opt-out of marketing, and data portability.
6. Cookies and Tracking
We use cookies and similar technologies to improve user experience, analyze usage, and personalize content. You can manage cookie preferences through your browser settings.
7. International Data Transfers
Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers.
8. Data Retention
We retain account information and call records while your account is active and as needed for billing, support, fraud prevention, legal obligations, and service operation. FiraPhone does not record calls in the standard outbound calling flow.
9. Children's Privacy
Our services are not directed to children under 13. We do not knowingly collect information from children under 13.
10. ChatGPT Connection
If you connect FiraPhone to ChatGPT, the plugin can return your account identifier, email address, calling balance, the destination numbers you check, their rates, and the status, duration and charge of calls made through the plugin. These results are shared with ChatGPT to provide the features you request. Your FiraPhone password is not shared with ChatGPT. Short-lived calling credentials are delivered privately to the dialler interface and are not included in model-visible tool results.
Microphone access requires your permission. Audio is transmitted through our telephony provider, Telnyx, only when you start a call. The plugin does not record calls or send the call audio to ChatGPT. The microphone test processes sound locally and discards it. Technical diagnostics contain connection status and audio packet counts, not audio recordings; they are shared with the conversation only when you choose Share diagnostics.
Supabase stores account links and call records, and Vercel hosts the service. OAuth access tokens expire after one hour; refresh tokens rotate and expire after 30 days of inactivity. We store hashes rather than the plain OAuth credentials. You can revoke all ChatGPT connections from Manage connection. Revoking access does not remove billing records or information already in your ChatGPT conversations. Account and call-record retention follows section 8 above. Contact us to request access, correction or deletion.
11. Contact Us
For privacy-related questions, please contact us at firasoftwareltd@gmail.com.