Privacy Policy

UCSTAK (“we,” “us,” “our”) provides managed voice, contact center, and private AI services to Ontario businesses. This policy covers what personal information we collect, why, and how we protect it. We follow Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and, where it applies, Ontario’s Personal Health Information Protection Act (PHIPA). For example, see our PIPEDA Compliance Statement for how we apply PIPEDA’s ten principles in practice.

Information We Collect

We collect a few categories of information to run your service. Specifically, that includes:

• Account and billing details you give us directly — your name, business name, email, phone number, and payment information.
• Call and messaging metadata your team generates using our platform, including call times, durations, and routing paths.
• Call recordings and voicemail, where your account has recording turned on.
• Voice transcripts, SMS content, and synced email content, but only where you enable our AI modules for those channels.
• Technical and usage data from our website and admin portal, such as browser type, IP address, and pages visited.

How We Collect Information

Most information comes directly from you. For instance, you share it when you sign up, configure your phone system, or contact support. Some information builds up automatically as your team places and receives calls. Our payment processor also shares billing status with us so we can keep your account current, and we never see or store full card numbers ourselves — see PCI DSS Compliance for that safeguard.

How We Use Information

We use your information to run your Managed Voice and AI services, bill your account correctly, answer support requests, and keep the platform secure. Where you use AI modules, we use conversation data for features like call summaries and knowledge search. Importantly, we never sell personal information, and we never use client data to train public or third-party AI models.

Call Recording & Consent

Many Canadian jurisdictions need only one party to consent to a recorded call. However, some callers may be in a jurisdiction that needs consent from everyone on the line. If you turn call recording on, you must tell callers that you may record the call, in line with your own legal obligations. Our platform can play an automatic disclosure message at the start of a call or queue to help with this — see Call Recording and Menu Call Recording to set it up.

AI-Specific Data Practices

Our Zero-Trust Proxy Router screens every AI-bound request for personal information first, before it reaches any AI processing. All AI processing runs on private infrastructure inside Canada. As a result, client data never crosses the Canada–U.S. border for processing or storage. Each client’s data also stays logically separate from every other client’s, and none of it trains public models.

Cookies & Website Analytics

Our website uses cookies to remember basic preferences and understand how visitors use the site. You can control cookies through your browser settings. Turning them off may limit some site features, but it won’t affect your phone service.

How We Share Information

We never sell your personal information. Instead, we share it in three limited situations. First, with service providers who help run the platform, such as cloud hosting and payment partners, under contracts that limit their use of your data. Second, when the law requires it, such as a valid court order. Third, if another company acquires UCSTAK, in which case the new owner stays bound by this policy.

Data Residency & Security

All AI processing and call data storage stays on private infrastructure inside Canada. We protect your information with encryption, two-factor authentication on administrative access, and role-based access controls that limit who on our team can see it. For more detail, see our PCI DSS Compliance, Two-Factor Authentication, and Role-Based Access Control pages.

Data Retention

We keep your information for as long as your account stays active, plus a reasonable period afterward for legal, tax, and regulatory needs. Call recordings and transcripts follow the retention period you set for your account. See Call Recording Retention & Access Controls to adjust it.

Your Rights

Under PIPEDA, you can ask to see, correct, or delete your personal information at any time. To make a request, email [email protected]. We’ll respond within the timeframe PIPEDA sets. If our response doesn’t resolve your concern, you can also contact the Office of the Privacy Commissioner of Canada.

Children’s Privacy

We build our services for businesses, not individual consumers. Accordingly, we don’t knowingly collect personal information from children.

Changes to This Policy

We may update this policy as our services or the law changes. In that case, we’ll post the new version here with an updated date, and we’ll tell active clients about any significant changes.

Contact Us

Send questions about this policy to UCSTAK, 123 Main Street, Unit 201, Dundas, ON N6C 1R2, or [email protected].