Privacy Policy

TelEcho, a product operated by RTC LEAGUE, Inc. ("TelEcho," "we," "our," or "us"), values your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you access telecho.io or use our voice, chat, WhatsApp, WeChat, and related AI-driven Services.

This Privacy Policy applies where TelEcho acts as a data controller, for example for visitors to telecho.io and for our own account holders and billing contacts.

It does not apply where TelEcho processes personal data solely as a processor on behalf of a Customer, for example when a Customer uses TelEcho to power voice or chat experiences for its own end users or call recipients. In those cases, the Customer is the data controller, and the Customer's own privacy notice governs that processing. TelEcho is not responsible for the privacy practices of our Customers.

Account Information

Name, email address, phone number, company name, billing details, authentication credentials, including via supported SSO providers.

Communications

Name, email, company, job title, message content, and attachments when you contact us.

Marketing and Subscriptions

Contact information if you subscribe to updates or newsletters.

Careers

Contact details, resumes, and employment/education history if you apply for a job.

Payment Information

Payments are processed by third-party payment processors; we do not store full card details but may receive limited transaction information for billing.

Device and Technical Information

IP address, approximate location, device type, operating system, browser type, cookie identifiers.

Usage Information

Pages viewed, features used, timestamps, referral URLs, logs, errors, and performance metrics.

Call & Message Content

Voice audio, call transcripts, chat and WhatsApp/WeChat messages, captured during use of TelEcho's voice/chat agents.

Integration Data

CRM records, calendar events, helpdesk tickets synced via connected apps you choose to connect (e.g., Salesforce, contact-center systems, EHR systems).

Voice, Audio, and AI Inputs

Audio, voice, text, or telephony data submitted to generate responses or actions, processed solely to provide the Services requested.

We use the information we collect to:

• Provide, operate, and maintain the Services, including call/message handling, AI response generation, and call summaries
• Process transactions and manage accounts
• Improve performance, reliability, and security
• Develop and enhance features, including AI-powered functionality
• Communicate with you about updates, support, and service-related notices
• Send marketing communications, where permitted
• Analyze usage trends and generate aggregated or anonymized insights
• Detect, prevent, and address fraud, abuse, or security incidents
• Comply with legal obligations and enforce our Terms and Acceptable Use Policy

AI and Voice Processing

TelEcho uses AI and machine-learning technologies, including third-party speech-to-text, text-to-speech, and large language model providers, to power voice processing, transcription, routing, and automation. Inputs are processed only to deliver the requested functionality. We configure these integrations, where offered by the provider, to disable use of Customer-submitted data for training the provider's general-purpose models. TelEcho does not use identifiable customer content or end-user data to train or fine-tune its own proprietary models unless explicitly agreed. Limited aggregated, de-identified telemetry may be used to improve system performance and reliability.

Recording and Consent

Where TelEcho records or transcribes a call, the Customer deploying TelEcho, not TelEcho, is responsible for providing any required disclosures and obtaining any required consent from call participants under applicable recording-consent laws.

We may disclose information as follows:

• Service Providers and Sub-processors: vendors who help us operate the Services, including telephony/SIP carriers, speech-to-text and text-to-speech providers, large language model providers, and cloud infrastructure/hosting providers. These vendors are contractually bound to data protection and confidentiality obligations consistent with our own commitments.
• Integration Partners: third-party platforms you choose to connect (e.g., CRM, contact-center, EHR systems), governed by their own terms.
• Legal and Compliance: where required by law, legal process, or governmental request, or to protect the rights, safety, and property of TelEcho, our users, or others.
• Business Transfers: in connection with a merger, acquisition, financing, or sale of assets.
• With Consent: where you direct us to share information.

We do not sell Personal Information, as "sale" is defined under the CCPA/CPRA and similar laws.

TelEcho may process and store data in the United States and other jurisdictions. Where Personal Data is transferred internationally (e.g., from the EEA, UK, or Switzerland to the United States), we rely on appropriate safeguards such as Standard Contractual Clauses.

Security

We use reasonable administrative, technical, and physical safeguards to protect Personal Data, including TLS 1.2+ encryption in transit and AES-256 encryption at rest, and role-based access controls. No system can be guaranteed 100% secure.

Retention

We retain call recordings, transcripts, and related content for the period configured by the Customer within product settings, or, absent such configuration, our default retention period, after which data is deleted or anonymized, except as required for legal, billing, or security purposes. Other Personal Data is retained only as long as necessary to fulfill the purposes described in this Policy, comply with legal obligations, resolve disputes, and enforce agreements.

Depending on your location, you may have rights to:

• Access your Personal Data
• Correct or delete Personal Data
• Restrict or object to processing
• Withdraw consent
• Receive a copy of your data

Legal Bases for Processing (EEA/UK): performance of a contract, legitimate interests, compliance with legal obligations, and consent where required.

Enterprise end users should generally direct requests to the organization that deployed TelEcho, as that organization is the data Controller for that processing. You may exercise your rights directly by contacting us using the details in Section 11.

Marketing Communications: you may opt out of promotional emails using the unsubscribe link provided; you may still receive transactional or service-related messages.

Our Services are not directed to children under 18, and we do not knowingly collect Personal Data from children. If you believe a child has provided us with Personal Data, please contact us.

We use cookies, SDKs, and similar technologies to operate, analyze, and improve our Services. These may be set by us or trusted third-party partners such as analytics providers. See our Cookie Policy for details on the categories of cookies we use and how to manage your preferences.

Where TelEcho offers industry-specific configurations (for example, HIPAA-eligible workflows for healthcare Customers with a signed Business Associate Agreement, or PCI-tokenized workflows for payment-related workflows), additional processing terms apply as set out in the applicable Order Form, Business Associate Agreement, or Data Processing Agreement. Contact legal@rtcleague.com for these documents.

If you have questions or concerns about this Privacy Policy or our data practices, contact us at: info@telecho.io

We periodically review and update this Notice to make clarifications or to reflect legal, technical, or business changes. The latest version will always be posted at telecho.io/legal/privacy-policy with the "Last Updated" date at the top. If we make significant changes that affect your rights, we will provide advance notice via the TelEcho console or by email and obtain your consent where legally required.