Privacy Policy

When you use Tokly, we may collect the following categories of personal data:

• Account data: email address, account creation date.
• Call data: numbers dialled, call duration, timestamps. We do not access the content of your conversations unless you explicitly enable call recording.
• Payment data: transaction amounts, dates, and a transaction reference. We do not store full card details — these are handled entirely by our payment processor.
• Technical data: IP address, browser type, device information, session logs.
• Profile data: display name and profile picture, if you choose to provide them.

We use your personal data only for the following purposes:

• Providing the Service: placing calls, calculating costs, displaying your call and transaction history.
• Processing payments and preventing fraud.
• Sending you service-related communications (e.g. login links, receipts, important service notices).
• Improving, monitoring, and securing the Service.
• Complying with our legal obligations.

We do not use your data for advertising or sell it to third parties.

We rely on the following legal bases to process your personal data:

• Contract performance: processing necessary to deliver the Service you signed up for.
• Legitimate interests: fraud detection, security monitoring, and service improvement.
• Consent: call recording — only when you explicitly enable this feature.
• Legal obligation: retaining financial records as required by applicable law.

We do not sell your personal data. We share it only where necessary, with the following categories of recipients:

• Telecommunications infrastructure partners: to route and connect your calls.
• Payment processors: to handle credit purchases securely.
• Cloud infrastructure providers: to host, store, and operate the Service.
• Law enforcement or regulatory authorities: when required by law or a valid legal order.

All third-party processors are bound by data processing agreements and are authorised to use your data only as instructed by us.

Call recording is an optional feature. If you enable it, audio recordings are stored on our servers and are accessible only to you. You can delete recordings at any time from your dashboard.

You are solely responsible for informing other call participants that the conversation is being recorded, as required by applicable law in your jurisdiction and theirs.

We retain personal data only for as long as necessary:

• Account data: for the duration of your account, plus up to 2 years after closure.
• Call logs: 12 months, then anonymised.
• Payment records: 5 years (statutory requirement).
• Call recordings: until you delete them, or 90 days after account closure.

Under GDPR, you have the following rights regarding your personal data:

• Access: request a copy of the data we hold about you.
• Rectification: ask us to correct inaccurate data.
• Erasure: request deletion of your data ("right to be forgotten").
• Restriction: ask us to limit how we process your data.
• Portability: receive your data in a structured, machine-readable format.
• Objection: object to processing based on legitimate interests.
• Withdrawal of consent: withdraw consent for call recording at any time.

To exercise any of these rights, email us at support@tokly.app. You also have the right to lodge a complaint with your national data protection supervisory authority.

We use only strictly necessary cookies required to operate the Service — for example, to keep you logged in during your session. We do not use tracking, analytics, or advertising cookies.

All calls are encrypted in transit using TLS and SRTP. Stored data is protected by encryption at rest. We follow industry-standard security practices and conduct regular security reviews.

Tokly is not intended for use by anyone under 18 years of age. We do not knowingly collect personal data from minors. If you believe a minor has provided us with data, please contact us and we will delete it promptly.

Your data may be processed in countries outside the European Economic Area (EEA). When we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

We may update this Privacy Policy from time to time. We will notify you of significant changes via email. The date at the top of this page always reflects the most recent version.

If you have any questions about this Privacy Policy or how we handle your data, please contact us at support@tokly.app.