Privacy Policy
Last Updated: January 5, 2026
Introduction
This Privacy Policy describes how xVoIP ("we", "our", or "us") collects, uses, and protects information when you use the xVoIP Softphone browser extension ("Extension").
Information We Collect
Information You Provide
SIP Account Credentials:
- Server address
- Extension number
- SIP password
- Domain configuration
- Display name
Optional AI Service Configuration:
- API keys for third-party AI services (Groq, OpenAI, or Anthropic)
- Custom summarization prompts
Information Generated During Use
Call History:
- Phone numbers called or received
- Call direction (inbound/outbound)
- Call timestamps and duration
- Call outcome (answered, missed, rejected)
Call Recordings (When Enabled):
- Audio recordings of calls
- Recording duration and timestamps
Call Transcriptions (When Enabled):
- Text transcriptions of call audio
- Speaker identification (local/remote)
How Information Is Stored
Local Storage Only
All data collected by this Extension is stored locally on your device using Chrome's secure extension storage APIs:
| Data Type | Storage Location | Synced Across Devices |
|---|---|---|
| SIP Passwords | chrome.storage.local | No |
| AI API Keys | chrome.storage.local | No |
| Account Settings | chrome.storage.sync | Yes (encrypted by Google) |
| Call History | chrome.storage.local | No |
| Transcriptions | chrome.storage.local | No |
| Call Recordings | Downloads folder | No |
Important: We do not operate any servers that receive or store your data. All Extension functionality operates entirely on your device.
How Information Is Used
SIP Credentials
- Used exclusively to authenticate with your SIP/VoIP server
- Transmitted only to the server address you configure
- Transmitted over encrypted WebSocket connections (WSS)
AI API Keys
- Used only when you explicitly enable AI features (transcription summarization)
- Transmitted directly to the AI provider you select (Groq, OpenAI, or Anthropic)
- We do not have access to your API keys or the data sent to these services
Call History & Recordings
- Stored locally for your convenience
- Never transmitted to any external service
- Recordings saved to your Downloads folder
Call Transcriptions
- Generated using Chrome's built-in Web Speech API (processed by Google)
- Stored locally on your device
- Optionally sent to AI providers for summarization (only if you enable this feature)
Third-Party Services
Your SIP/VoIP Provider
The Extension connects to the SIP server you configure. Your call data (audio, signaling) is transmitted to and processed by your SIP provider according to their privacy practices.
AI Service Providers (Optional)
If you enable AI summarization, call transcriptions are sent to your chosen provider:
- Groq: https://groq.com/privacy
- OpenAI: https://openai.com/privacy
- Anthropic: https://www.anthropic.com/privacy
Google Web Speech API
When transcription is enabled, audio is processed by Google's Web Speech API for speech-to-text conversion. See Google's Privacy Policy.
Data Retention
- Call History: Last 100 calls retained locally
- Transcriptions: Configurable limit (default: 10 most recent)
- Recordings: Stored in Downloads folder until you delete them
- Credentials: Stored until you remove them or uninstall the Extension
You can clear all stored data at any time through the Extension's Settings page.
Data Security
We implement the following security measures:
- Encrypted Transport: All SIP connections use WSS (WebSocket Secure)
- Local Storage: Sensitive data stored in Chrome's protected extension storage
- No Server Storage: We do not operate servers that store your data
- Content Security Policy: Extension code is protected against injection attacks
- Manifest V3: Uses Chrome's latest, most secure extension architecture
Your Rights
You have the right to:
- Access: View all data stored by the Extension in Settings
- Delete: Clear call history, transcriptions, and recordings at any time
- Portability: Export call recordings from your Downloads folder
- Withdraw: Disable any optional features (recording, transcription, AI summarization)
- Uninstall: Remove the Extension to delete all stored data
Permissions Explained
| Permission | Why We Need It |
|---|---|
| storage | Store your settings and call history locally |
| notifications | Alert you to incoming calls |
| activeTab | Enable click-to-dial on the current page |
| tabs | Update phone number detection settings across open tabs |
| offscreen | Maintain SIP connection when popup is closed |
| alarms | Keep SIP registration active |
| downloads | Save call recordings to your Downloads folder |
| wss://*/* | Connect to your SIP server via secure WebSocket |
| <all_urls> | Detect phone numbers on any webpage |
Children's Privacy
This Extension is not intended for use by children under 13 years of age. We do not knowingly collect personal information from children.
Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be reflected in the "Last Updated" date above. Continued use of the Extension after changes constitutes acceptance of the updated policy.
Contact Us
If you have questions about this Privacy Policy, please contact:
xVoIP
Email: support@xvoip.co.za
Website: https://xvoip.co.za
Summary
- All data stored locally on your device
- We do not operate servers that collect your data
- Credentials transmitted only to servers you configure
- Optional AI features use third-party providers
- You control all data and can delete it anytime