Privacy Policy
LynxPBX is a cloud phone system for businesses. It is provided to companies, and to their employees and members, by Pivot-Tech Development, Inc. ("Pivot-Tech," "we," "us"). This policy explains what information the LynxPBX apps and services handle, why, and what your choices are. We have tried to write it the way we would want it explained to us.
The most important thing to understand
LynxPBX is a workplace phone system. Your account is created and administered by your company, and your company controls the phone numbers, departments, and call records of its own phone system. Calls and text messages handled through your company's numbers are business records of that company: administrators can see the company's call history, and messages in shared inboxes (such as a main company number or a department number) are visible to the coworkers who staff that inbox. When you send a message from a shared inbox, LynxPBX records internally which account sent it, even if a different display name is shown to the customer.
Information we handle
- Account information. Your name, work email address, extension, department memberships, and role, provided by you or your company's administrator.
- Calls. Call records (numbers, time, duration, direction, and which account placed or answered a call) and the audio of calls while they are being carried. Voicemail messages and recorded greetings are stored so they can be played back.
- Text messages. The content of SMS conversations on company numbers, stored so conversations can be read and continued by the people authorized to see them.
- Contacts. With your permission, the app reads your device's contacts to display names alongside numbers and let you place calls from your contact list. The company directory (colleagues and extensions) is provided by our service.
- Microphone. With your permission, the app uses the microphone during calls. It does not listen outside of calls.
- Push notifications. We store the device tokens needed to alert your device to incoming calls and messages, delivered through Apple and Google's notification services.
- Technical and log information. App version, device model, and diagnostic events (for example, whether a call connected or a notification was delivered), used to operate and troubleshoot the service.
What we use it for
To provide the phone system: routing and connecting calls, delivering messages and voicemail, ringing the right devices, showing presence and directory information, and troubleshooting when something does not work. We also send transactional email, such as account invitations and password resets. We do not use your information for advertising, we do not sell it, and we do not share it with anyone except the service providers below.
Service providers we rely on
- Telnyx carries calls and text messages on the public telephone network.
- Amazon Web Services hosts our servers and databases in the United States.
- Postmark delivers our transactional email (invitations, password resets).
- Apple and Google deliver push notifications to your device.
Each receives only what it needs to perform its function.
Emergency calls
LynxPBX does not carry emergency calls. If you dial an emergency number in our mobile app, the app hands the call to your phone's own dialer so it travels over your mobile carrier, which can provide your location to responders. A device without mobile service cannot reach emergency services through LynxPBX. LynxPBX is not a replacement for a traditional phone line.
Retention
Business records (call history, messages, voicemail) are retained for the life of the company's account, under the company's control. If your account is removed, your login is disabled; records of calls and messages you handled remain part of your company's business records, with your identity preserved on them. Diagnostic logs are kept for a limited period and then deleted.
Security
Traffic between the apps and our servers is encrypted in transit. Our databases run on private networks that are not reachable from the public internet, and passwords are stored only as cryptographic hashes. No system is perfectly secure, and we do not claim ours is; we can say that we treat silent failures as our most serious class of defect and verify what our systems actually do rather than what we intended them to do.
Your choices
- Contacts and microphone access can be revoked at any time in your device's settings. The app will still work, though the features that depend on them will not.
- Notification settings are controlled in your device's settings and in the app.
- Questions about your company's records — including access to or correction of information about you — should go first to your company's administrator, since those records belong to the company's phone system. You can also contact us directly using the address below, and we will help.
Children
LynxPBX is a business service and is not directed to children. We do not knowingly collect information from anyone under 18.
Changes to this policy
If we change this policy in a way that matters, we will update the date above and note the change here. We will not quietly weaken it.
Pivot-Tech Development, Inc.
6674 E 118th Ct., Thornton, CO 80233
Email: support@pivot-tech.io