Privacy Policy

This Privacy Policy describes how BablyBox, LLC d/b/a BablyBox ("BablyBox," "we," "us," or "our") collects, uses, discloses, protects, and retains information in connection with our websites, applications, Microsoft Teams integrations, telecommunications services, administrative portals, and related services.

1. Information we process

Account and identity information

We may process names, business names, email addresses, telephone numbers, account identifiers, organization or tenant information, roles, permissions, and authentication-related information.

Microsoft information

When a Customer connects BablyBox to Microsoft services, we may receive information authorized through Microsoft Entra ID, Microsoft Graph, Teams, Microsoft 365, or related APIs, such as user and tenant identifiers, display names, email addresses or user principal names, organization information, authentication tokens, profile information, and other information permitted by the permissions approved by the user or administrator. BablyBox accesses Microsoft information according to granted permissions and uses it to provide authorized BablyBox functionality.

Telecommunications information

To provide communications services we may process telephone numbers, originating and destination numbers, caller-ID information, dates and times, call duration, routing and disposition information, voicemail metadata, device and IP information, emergency-service location information, messaging metadata, and related communications records. Some information may qualify as CPNI or receive other legal protection.

Communications content

Depending on enabled features, BablyBox may process voicemail, call recordings, transcripts, messages, uploaded files, communication content, notes, and other information entered into the Services.

Technical and billing information

We may process IP address, device and browser information, application version, diagnostics, authentication and security events, network information, billing contacts, subscription details, and transaction history. Payment card data may be processed by payment providers rather than stored directly by BablyBox.

2. How we use information

We use information to provide and administer communications services; authenticate users; integrate with Microsoft Teams and other authorized services; route calls and messages; provision numbers; provide emergency-calling functionality; operate voicemail, recording, transcription, analytics, and administrative features; process billing; support Customers; diagnose issues; secure the platform; prevent fraud and abuse; comply with telecommunications and legal requirements; enforce agreements; and improve reliability and functionality.

3. Microsoft data

Information received through Microsoft APIs is processed to provide functionality requested or authorized by the Customer. BablyBox does not intentionally access Microsoft information beyond granted permissions. Customers or Microsoft tenant administrators may revoke BablyBox access through applicable Microsoft controls.

4. How we disclose information

BablyBox does not sell personal information merely because it operates the communications service. We may disclose information to service providers as necessary to provide cloud infrastructure, telecommunications connectivity, telephone numbering, emergency calling, Microsoft integration, security, support, payment processing, and communications infrastructure. We may also disclose information at a Customer's direction, to authorized Customer administrators, when required by law or valid legal process, to protect BablyBox or others, to investigate fraud or security incidents, or in connection with a corporate transaction subject to applicable law.

5. Customer administrators

When BablyBox is provided through an employer or organization, authorized administrators may access and manage information associated with users under that organization, including call records, numbers, recordings, configuration, analytics, and other information depending on permissions and enabled features.

6. CPNI

Where applicable, BablyBox protects Customer Proprietary Network Information in accordance with telecommunications law. CPNI may include information concerning the quantity, technical configuration, type, destination, location, and amount of use of telecommunications services. BablyBox maintains procedures for authorized access, authentication, use, disclosure, recordkeeping, and compliance where required.

7. Recordings and communications

Recordings, transcripts, voicemail, messages, and similar content may contain information about people who are not BablyBox account holders. BablyBox processes such information to provide Customer-requested functionality. Customers are responsible for notices and consent required for their recording, monitoring, transcription, or other processing activities.

8. Security

BablyBox uses administrative, technical, and organizational safeguards designed to protect information against unauthorized access, alteration, disclosure, or destruction. Safeguards may include access controls, encryption, authentication, logging, monitoring, network protections, and restricted administrative access where appropriate. No information system can guarantee absolute security.

9. Retention

BablyBox retains information for as long as reasonably necessary for the purposes for which it was collected, including providing Services, honoring Customer-configured retention settings, resolving disputes, preventing fraud, maintaining security, and satisfying legal, accounting, telecommunications, and regulatory obligations. Retention periods differ by data category and applicable requirements.

10. Access, correction, and deletion

Subject to applicable law and contractual obligations, individuals may request access to, correction of, or deletion of personal information maintained directly by BablyBox. When information is controlled by a Customer organization, requests may need to be directed to that organization. We may retain information where legally required or otherwise permitted.

11. Cookies and website technologies

BablyBox websites may use cookies and similar technologies for authentication, security, preferences, analytics, and website operation. Additional notices or controls may be provided where required.

12. Children's privacy

BablyBox is a business communications service and is not directed to children as a consumer service. We do not knowingly solicit personal information directly from children through consumer-directed services.

13. International processing

BablyBox and its providers may process information in the United States and other locations where providers operate. Where required, appropriate mechanisms will be used for international transfers.

14. Legal requests

BablyBox may preserve or disclose information when required by applicable law or valid legal process. See our Legal Requests Policy.

15. Changes

We may update this Policy as Services, practices, or legal obligations change. The current version will be published with its effective date and material changes may receive additional notice where appropriate or required.