DialLink Privacy Policy

Version 2.0 · Effective November 2, 2026 · Previous versions: Legal Archive

This Privacy Policy explains how DialLink Corp. ("DialLink", "we", "us") collects, uses, shares and protects personal data when you visit our websites, use our cloud phone system, messaging and AI products (the "Services"), or otherwise interact with us. It also explains the choices and rights you have.

In plain terms

• If you are a DialLink customer or a user on a customer's account, we use your account and usage data to run, bill, secure and support the Services. We are the "controller" of that data.
• If you call, message or talk to an AI agent of a business that uses DialLink, that business decides how your data is used. We process it on the business's behalf as its "processor" or "service provider". Contact the business for questions about its use of your data.
• We do not use the content of calls, messages or transcripts to train AI models. We do not sell personal data for money. Our website does share identifiers and browsing data with advertising partners for targeted advertising, which California law calls "sharing" and some other states treat as a "sale"; you can opt out at Do Not Sell or Share My Personal Information and we honor Global Privacy Control signals.
• As a provider of interconnected VoIP service, we protect your call records (CPNI) under U.S. federal rules (Section 6).

1. Who We Are and How to Contact Us

DialLink Corp., 1688 Meridian Ave, Suite 700, Miami Beach, FL 33139, United States.

• Privacy questions and requests: privacy@diallink.com
• Security: trust@diallink.com
• Support: support@diallink.com

2. Our Two Roles

2.1 DialLink as controller. We decide how and why to process personal data when we:

• operate our websites and respond to enquiries;
• create and manage customer Accounts, including the personal data of Administrators and Users ("Account Data");
• bill for the Services, verify identity and business information, and prevent fraud;
• collect technical and operational data about the use of the Services, including call detail records and related billing data, which we use for billing, network operation, fraud prevention and legal compliance and protect as CPNI ("Usage Data"); the same records as displayed in a customer's Account (call logs, contacts) are also available to the customer as part of the Services;
• communicate with customers and prospects, including marketing;
• provide support; and
• comply with legal obligations as a communications provider.

2.2 DialLink as processor (or service provider). When a business customer uses the Services to call, message or interact with people — its customers, prospects, clients, employees or anyone else ("Callers" and "Users") — the content of those communications and the personal data in them ("Customer Data": call audio, recordings, voicemails, transcripts, messages, contact lists, AI Agent conversations and outputs) belong to the customer. The customer is the controller or business; we process Customer Data only on the customer's instructions under our Data Processing Addendum. If you are a Caller or User, please direct privacy questions and requests about Customer Data to the business you communicated with. If you contact us instead, we will refer your request to that business where we can identify it, and will assist the business in responding.

3. Personal Data We Collect

We do not intentionally collect sensitive personal data (such as health, biometric or precise geolocation data) about Account holders or Users, except identification documents where verification requires them. Customer Data may contain sensitive data placed there by our customers; we process it only as their processor.

4. How We Use Personal Data

As controller, we use personal data for the following purposes. Where the EU, UK or Swiss data protection laws apply, the legal basis for each purpose is shown.

Automated tools detect fraud, toll fraud and abuse and may temporarily restrict an Account to protect the network and other customers; a person reviews any restriction that lasts more than 24 hours, and you can contest a restriction at any time by contacting support@diallink.com. We do not otherwise make decisions with legal or similarly significant effects on you solely by automated means.

5. AI Features and Your Data

The AI Features (AI Voice Agents, AI Messaging Agents, AI Knowledge Bases, AI Call Intelligence and related features) process the content of calls, messages and transcripts to generate transcripts, summaries, responses and actions. We use third-party speech and language model providers to do so; they are listed on our Sub-processors page and are contractually restricted to processing the data to provide the service to us and, for the limited period stated on that page, to monitor for abuse and safety.

• No training. We do not use Customer Data — call audio, recordings, transcripts, messages, AI Agent instructions, knowledge content or conversation logs — to train, fine-tune or improve artificial intelligence or machine learning models, nor de-identified data derived from it, and our agreements with each model provider listed on our Sub-processors page prohibit the provider from doing so.
• Human review. DialLink staff do not listen to customer calls or read transcripts except where a customer asks us to in a support request, where we investigate suspected abuse of the Services or a security incident, or where the law requires.
• Disclosure to Callers. The business that deploys an AI Agent is responsible for telling Callers that they are speaking with an automated assistant where the law requires it, and for the other notices and consents required for its use; our terms require this of every customer.
• Retention. AI transcripts, summaries and conversation logs are stored in the customer's Account and retained according to the customer's settings and Section 11.

6. Customer Proprietary Network Information (CPNI)

As a provider of interconnected VoIP service in the United States, we are subject to Section 222 of the Communications Act (47 U.S.C. § 222) and the FCC's CPNI rules (47 C.F.R. Part 64, Subpart U). CPNI includes information about the quantity, technical configuration, type, destination, location and amount of use of your telephone service, and the related billing information — for example, the numbers you call and receive calls from, when, and for how long.

• How we use CPNI. We use CPNI to provide, bill for, maintain and support your service; to protect our rights and property and those of our customers; to prevent fraud and abuse; and as otherwise required or permitted by law. We may use CPNI to offer you additional DialLink services within the categories of service you already subscribe to.
• Your choice. We will not use your CPNI to market services outside the categories you subscribe to, or share it with third parties for their marketing, without your approval. If we ask for approval, you may decline or withdraw it at any time by emailing privacy@diallink.com; declining does not affect your service.
• Protecting CPNI. We authenticate requests for call detail information before disclosing it. Administrators control which Users can view call records in the Services. We do not disclose call detail records over the phone or by email without verifying the requester as the FCC's rules require.
• Breach notification. If a breach of CPNI occurs, we notify federal law enforcement, the FCC and affected customers in the sequence and within the timeframes required by the FCC's rules (47 C.F.R. § 64.2011), subject to any delay that law enforcement directs.

7. How We Share Personal Data

We share personal data only as described here. We do not sell personal data for money. We do disclose identifiers and browsing data from our websites to advertising partners for cross-context behavioral or targeted advertising, which California law calls "sharing" and some other state laws treat as a "sale"; you can opt out as described in Section 9. We do not share Customer Data with anyone except as our customers instruct, as the Data Processing Addendum permits, or as the law requires.

• Service providers and sub-processors. Companies that process data on our behalf to help us run the Services: cloud hosting, telecommunications carriers and messaging aggregators, speech and language model providers for AI Features, payment processing, email delivery, customer support and ticketing, marketing automation, analytics, error monitoring, identity verification and sanctions screening, and the engineering and support contractors who work on the Services under confidentiality obligations. Sub-processors that process Customer Data are listed, with their locations, on our Sub-processors page.
• Carriers, registries and regulators. To provide telephone numbers, route calls and messages, register messaging campaigns (including the 10DLC registry operated for U.S. carriers), port numbers, comply with number-portability, robocall-mitigation and 911 requirements, and respond to traceback requests, we share Account, verification and Usage Data with carriers, number registries, the Industry Traceback Group and regulators as required.
• Emergency services. When a 911 call is placed, we transmit the caller's Registered Location and callback number to emergency services as described in our 911 Service Terms.
• Advertising and analytics partners. Our websites use cookies and similar technologies from advertising and analytics partners (for example Google, LinkedIn and Meta) that collect identifiers, device information and browsing activity to measure our campaigns and to show you DialLink advertising on other sites. The same tags run on the sign-up and onboarding pages of the web application and, until we complete the change that limits them to those pages, on other pages of the web application; they receive page and event data (for example which step of sign-up you completed and which pages you open), not the content of your calls, messages or recordings. With Meta's advanced matching, the email address and phone number you enter at sign-up are hashed in your browser and sent to Meta to match you to a Meta account; you can opt out as described in Section 9 and in the Cookie Policy. This is "sharing" for cross-context behavioral advertising, or "targeted advertising", under U.S. state privacy laws. You can opt out as described in Section 9 and in our Cookie Policy. We do not share Customer Data with advertising partners.
• Third-party services you connect. When you connect an integration or an AI Agent to a third-party service, we exchange data with that service as needed to make the integration work, under the terms of that service.
• AI assistants you connect through the DialLink MCP Server. If you connect an AI assistant such as ChatGPT (OpenAI), Claude (Anthropic) or Grok to your Account through the DialLink MCP Server for AI Assistants, we disclose to that provider the data its assistant requests within the permissions you granted, so that the assistant can answer you and carry out the actions you ask for. The provider is not our sub-processor: it processes that data under its own terms and privacy policy, which you should review before connecting. See Section 17.
• Authorized sales partners. If you order through one of our authorized sales partners, we share with that partner the status of your order and Account (business and contact name, plan, activation status and recurring charges) so that it can help you get started and be paid its commission. Partners are bound by confidentiality and privacy obligations and may use the data only for these purposes.
• Professional advisers. Lawyers, accountants, auditors and insurers, under confidentiality obligations.
• Legal requirements and protection of rights. We disclose personal data where required by law, subpoena, court order or other legal process, or where we believe in good faith that disclosure is necessary to protect the rights, property or safety of DialLink, our customers or the public, to enforce our agreements, or to investigate fraud or security issues; the contents of communications are disclosed only as the Stored Communications Act permits (Section 15).
• Corporate transactions. If DialLink is involved in a merger, acquisition, financing, reorganization or sale of assets, personal data may be transferred to the successor, subject to this Privacy Policy.
• With your consent or at your direction.

8. Cookies, Tracking Technologies and Analytics Inside the Services

We use cookies, pixels, tags and similar technologies on our websites for essential functions, analytics and advertising. Our Cookie Policy describes the technologies we use, their purposes and how to manage them through our cookie preferences tool. Where the law requires consent, we load non-essential technologies only after you consent. We honor the Global Privacy Control browser signal as an opt-out of sharing for targeted advertising for the browser that sends it. Our websites do not respond to "Do Not Track" signals, which have no industry standard. Some pages of diallink.com use Microsoft Clarity, which records how visitors interact with a page (clicks, scrolling and mouse movement) to produce session replays and heatmaps that help us improve the Sites; Clarity loads only after you consent and is not used inside the signed-in Services.

Analytics and session replay on the sign-in, sign-up and payment pages. On the DialLink sign-in page, the sign-up and onboarding screens (up to the point where your dashboard first loads) and the payment-setup page used when a sales partner creates an Account for you, we use PostHog, a product-analytics service, to see where people get stuck and to improve those screens. On those pages PostHog records the screens you view and the actions you take, your device, browser and operating system, your IP address and, once you have entered it, the email address and company name you sign up with. PostHog can also replay those sessions: a reconstruction of the screens as they were displayed to you. Anything you type into an input field is masked on your device before it is sent, passwords are never captured, and card details are entered in a Stripe frame that PostHog cannot see. PostHog does not run inside the DialLink apps after you reach your dashboard: it does not record your calls, voicemails, messages, contacts or anything else in your Account, and it is not a processor of Customer Data. Replays are used only to diagnose problems and improve the sign-up experience; access is limited to a small number of named staff who need it, and replays are deleted after 90 days. PostHog processes this data on our behalf in the United States and is listed on our Sub-processors page. If you object to this processing, email privacy@diallink.com and we will delete the replays and events associated with you. The apps themselves use only the cookies and local storage needed to keep you signed in and to run the application, as described in the Cookie Policy.

9. Your Privacy Rights {#your-rights}

9.1 Everyone. Regardless of where you live, you can: access and update your Account Data in the Account settings; unsubscribe from marketing emails using the link in any email; reply STOP to opt out of marketing text messages; manage cookies through our cookie preferences tool; and contact privacy@diallink.com with any privacy question or request.

9.2 U.S. state privacy rights. If you are a resident of a U.S. state with a comprehensive privacy law (including California, Colorado, Connecticut, Virginia, Texas, Oregon, Montana, Utah, Iowa, Indiana, Tennessee, Delaware, New Jersey, New Hampshire, Nebraska, Maryland, Minnesota, Kentucky, Rhode Island and others as they take effect), you may have the right, subject to the law's conditions and exceptions, to:

• Know and access the personal data we hold about you, including the categories and specific pieces, the sources, our purposes, and the categories of third parties we disclose it to;
• Correct inaccurate personal data;
• Delete personal data we collected from you;
• Receive a portable copy of personal data you provided;
• Opt out of the sale of personal data, the sharing of personal data for cross-context behavioral advertising or targeted advertising, and profiling in furtherance of decisions that produce legal or similarly significant effects (we do not sell personal data or engage in such profiling; see below for how to opt out of advertising-related sharing);
• Limit the use of sensitive personal data (we use sensitive personal data only for the purposes permitted without a right to limit, such as verification and security);
• Not be discriminated against for exercising your rights; and
• Appeal a decision we make on your request.

How to exercise these rights:

• Opt out of sharing for advertising: click Do Not Sell or Share My Personal Information to set your cookie preferences for this browser, or enable the Global Privacy Control signal in your browser. Because advertising sharing is cookie-based, the opt-out applies to the browser and device you use it on.
• Access, correction, deletion, portability and other requests: email privacy@diallink.com with the subject "Privacy Request", or write to the address in Section 1. Tell us which right you are exercising and the email address or phone number associated with your relationship with us.
• Verification. We verify requests by matching the information you provide with information we hold and, for Account holders, by confirming the request from the email address on the Account. We may ask for additional information where necessary. An authorized agent may make a request on your behalf if we can verify the agent's authority and your identity.
• Timing. We respond within 45 days of receiving a verifiable request and may extend that period by a further 45 days where reasonably necessary, in which case we will tell you. We do not charge for requests unless they are manifestly unfounded or excessive.
• Appeals. If we decline a request, we will tell you why. You may appeal by replying to our decision or emailing privacy@diallink.com with the subject "Privacy Appeal"; we respond to appeals within 45 days (60 days where the law allows). If your appeal is denied, you may contact your state attorney general.
• Customer Data. If your request concerns data that a DialLink customer holds about you (for example a recording of a call you made to a business), we are the processor and will refer you to that business, which is responsible for responding.

9.3 California — additional disclosures. In the 12 months before the Effective Date, we collected the categories of personal information listed in Section 3 (which correspond to identifiers, customer records, commercial information, internet or network activity, geolocation (IP address), audio and electronic information, professional information, inferences drawn for marketing, and sensitive personal information in the form of government identification numbers from verification documents, which we use only for the purposes permitted without a right to limit) from the sources listed there, for the purposes in Section 4, and disclosed them for business purposes to the categories of recipients in Section 7. We "shared" identifiers, internet activity and commercial information with advertising partners for cross-context behavioral advertising. We did not "sell" personal information as defined in the CCPA, and we have no actual knowledge of selling or sharing the personal information of consumers under 16. We do not offer financial incentives in exchange for personal information. Retention periods are described in Section 11. California residents may also request, once per year, information about disclosures of personal information to third parties for their direct marketing purposes (Civil Code § 1798.83); we do not make such disclosures.

9.4 Nevada. We do not sell covered information as defined in Nevada law. Nevada residents may submit an opt-out request to privacy@diallink.com.

10. European Economic Area, United Kingdom and Switzerland

If you are in the EEA, the UK or Switzerland, the following also applies when we act as controller.

• Legal bases are set out in Section 4. Where we rely on legitimate interests, we have balanced them against your rights; you may object as described below.
• Your rights. You may request access to, rectification or erasure of your personal data, restriction of processing, data portability, and may object to processing based on legitimate interests (including direct marketing, to which you may object at any time). Where processing is based on consent, you may withdraw it at any time without affecting prior processing. Contact privacy@diallink.com; we respond within one month, extendable by two further months for complex requests.
• Complaints. You may lodge a complaint with your national data protection authority. We would appreciate the chance to address your concerns first.
• Providing data. Account and billing data are required to enter into and perform the contract with us; without them we cannot provide the Services. Where we obtain business contact details from data providers for sales prospecting, we tell you the source in our first communication, and you may object at any time.
• International transfers. DialLink is established in the United States, and the Services are provided from the United States. Where we transfer personal data from the EEA, the UK or Switzerland, we rely on the European Commission's Standard Contractual Clauses (Decision (EU) 2021/914), the UK International Data Transfer Addendum and the Swiss adaptations, which are incorporated in our Data Processing Addendum for customer data and in our agreements with service providers, together with supplementary measures where appropriate. You may request a copy of the relevant clauses from privacy@diallink.com.
• Customer Data. For Customer Data we act as processor on behalf of our customers under the Data Processing Addendum; please direct requests to the relevant customer.

11. Data Retention

We keep personal data only as long as needed for the purposes described in this Policy, to meet legal, accounting and reporting obligations, and to establish, exercise or defend legal claims. Typical periods:

12. Security

We maintain administrative, technical and physical safeguards designed to protect personal data, including encryption of data in transit and at rest, access controls based on least privilege, logging and monitoring, vulnerability scanning, written terms with vendors, staff and contractor confidentiality obligations, and backup and recovery procedures. Our Security Overview describes these measures in more detail. No method of transmission or storage is completely secure; please protect your credentials and report suspected security issues to trust@diallink.com.

13. International Transfers

We are based in the United States and store data in the United States with our hosting provider. Some of our engineering and support contractors access our systems remotely from outside the United States under the safeguards described in our Data Processing Addendum, and our other service providers process data in the locations shown on our Sub-processors page. Where we transfer personal data internationally, we use the safeguards described in Section 10 and our Data Processing Addendum.

14. Children

Our websites and Services are intended for businesses and are not directed to children. We do not knowingly collect personal data from children under 13 (or under 16 for the purposes of California's opt-in rules on sale and sharing), and our customers may not use the Services, including AI Agents, to collect personal data from children except in compliance with the law (see the AI Features Terms, Section 4). If you believe a child has provided us personal data, contact privacy@diallink.com and we will delete it.

15. Government and Law Enforcement Requests

We respond to subpoenas, court orders, warrants and other lawful requests for data in accordance with the law, including the Stored Communications Act, which permits us to disclose the contents of communications (voicemails, recordings, transcripts, messages) only in response to a warrant or other legal process that requires it, or voluntarily in the limited cases the law allows (for example an emergency involving danger of death or serious physical injury). We review each request for validity and scope, disclose only the data the request legally requires, and notify the affected customer before disclosure unless the law or the request prohibits it, or an emergency requires immediate disclosure. Requests should be served on DialLink Corp. at the address in Section 1 with a copy to legal@diallink.com.

16. Marketing Communications and Text Messages

You can unsubscribe from marketing emails through the link in each email or by emailing privacy@diallink.com; we will continue to send service, billing and security messages. If you opt in to receive text messages from DialLink (for example verification codes or account notifications), message and data rates may apply, message frequency varies, and you can reply STOP to opt out or HELP for help. Mobile phone numbers and text-message opt-in consent collected for DialLink's own messages are not shared with third parties or affiliates for their marketing or promotional purposes.

17. Third-Party Websites, Services and AI Assistants

17.1 Third-party websites and services. Our websites and Services link to or integrate with third-party websites and services whose privacy practices we do not control. Review their privacy policies before providing them personal data.

17.2 DialLink MCP Server for AI Assistants. The DialLink MCP Server for AI Assistants (the "MCP Server") lets you connect the Services to a third-party AI assistant you use, such as ChatGPT, Claude or Grok, through the assistant's connector or app directory. This Section describes how we handle personal data when you use it, in addition to the rest of this Policy, and is the privacy statement for the MCP Server listed in those directories. The MCP Server is a standard remote MCP server, so any assistant that supports remote connectors can connect to it.

• How you connect. You connect the MCP Server from within the assistant, by signing in to your DialLink Account and approving the connection (OAuth 2.0). The permissions you approve are shown before you confirm; the assistant's provider is told which tools exist and whether each one reads data or changes something.

• What the MCP Server can access, and why. The MCP Server gives your connected AI assistant access to data in your Account only within the permissions granted during setup, and only to answer the request you make or carry out the action you ask for: your phone numbers and inboxes, your call history (including transcripts, summaries, sentiment, action items and voicemail text), your messages (including SMS and WhatsApp), your Contacts and the names of your AI Agents. If your Account has other Users, the assistant may also see limited information about them (name, email address, extension, job title, role and presence status). On your instruction the assistant can place a call through an AI Agent, send a message, and create or update a Contact. We use the data for no other purpose. Once data has been shared with the assistant, its handling is governed by the provider's own privacy policy and terms, which we encourage you to review before connecting.

• What the MCP Server returns. Tool responses contain only the information directly relevant to your request. We do not include internal session, trace or request identifiers or other diagnostic metadata in responses unless strictly required to complete the requested action.

• Data the MCP Server does not handle. The MCP Server has no fields for, and does not request, payment card information, protected health information, government identification numbers or authentication credentials such as passwords, API keys or one-time passcodes, and it does not return recordings or audio. Transcripts, message text and contact notes are free text and are returned as recorded, so they may contain whatever a caller or user said or typed.

• Location data. The MCP Server does not request or use your location.

• Your conversation with the assistant. The MCP Server does not retrieve, reconstruct or infer your wider conversation history with the assistant; it acts only on the specific request and information the assistant sends for a given action.

• Actions that send data outside the assistant. Some tools, such as placing a call or sending a message, send personal data outside your conversation with the assistant. These are labelled as write actions so that the assistant can ask for your confirmation before DialLink carries them out.

• What we record about your use of the MCP Server, and for how long. For security, troubleshooting and abuse prevention we log each tool request: the time, the tool called and its parameters, your User and Account identifiers, the assistant provider making the request and its IP address. We keep these logs for up to 90 days and then delete them; we do not use them for profiling or advertising, and we do not sell or share them. We do not keep a copy of your conversation with the assistant.

• Who receives data. The assistant's provider receives the tool responses described above. Our hosting and infrastructure sub-processors listed on the Sub-processors page process MCP Server traffic as part of the Services. No one else receives MCP Server data unless Section 7 applies (for example a legal request).

• No payments through the MCP Server. The MCP Server cannot move money, change your subscription or make purchases.

• Your controls and disconnecting. You can disconnect the MCP Server at any time in the assistant's own settings or by revoking the connection under Settings → Integrations in the DialLink web app. After disconnection the assistant no longer has access to any DialLink tool or to the permissions you granted, and we stop receiving requests on your behalf. Data exchanged before disconnection is retained as described in Section 11, and the rights in Section 12 apply to it. Questions and support for the MCP Server: support@diallink.com; privacy questions: privacy@diallink.com.

18. Changes to This Policy

We may update this Policy and we review it at least once every 12 months. We will post the new version with its effective date and, for material changes, notify Account Administrators by email or in-app notice. Prior versions are kept in the Legal Archive. Last reviewed: November 2, 2026.

19. Contact

DialLink Corp., Attn: Privacy, 1688 Meridian Ave, Suite 700, Miami Beach, FL 33139, United States · privacy@diallink.com