CCPA · CPRA · honored globally
CCPA · CPRA · honored globally CCPA
& CPRA.
DialPhone honors California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) rights globally. We do not sell or share personal information.
California's privacy framework — CCPA from 2020 and CPRA from 2023 — set the operating template most US state privacy laws are now converging toward. DialPhone honors the full set of CCPA/CPRA consumer rights regardless of where the requesting individual resides, because operating two privacy postures (one for California, one for everyone else) creates more risk than it removes. The same rights apply equivalently under Virginia VCDPA, Colorado CPA, Connecticut CTDPA, Utah UCPA, Texas TDPSA, and the rest of the patchwork.
Two distinctions matter inside the DialPhone account structure. The customer (the business that subscribes to DialPhone) is the Business under CCPA — they decide what personal information their employees and end-users generate, retain, and process. DialPhone is the Service Provider — we process that personal information only on the customer's behalf, under the Service Provider terms in the Data Processing Agreement. Cross-context behavioral advertising is explicitly prohibited; we do not "sell" or "share" personal information in any of the senses the CCPA defines those terms.
Consumer-rights requests follow the Service-Provider routing pattern. Most end-user requests (callers, message recipients, meeting participants) should be submitted to the customer who interacted with them — the customer can then execute access, deletion, or correction through the DialPhone admin portal. Where the request involves data that only DialPhone can reach (backup archives, subprocessor data), the [email protected] channel handles the response within statutory 45-day deadlines. For the broader privacy posture see the privacy commitments page and the Privacy Policy.
Consumer rights
Rights supported
- Right to know, what data is collected, sources, purposes, recipients
- Right to delete, erasure of personal information with exceptions for legal retention
- Right to correct, fix inaccurate personal information
- Right to opt-out of sale, we don't sell data, but the opt-out mechanism exists
- Right to opt-out of sharing (CPRA), cross-context behavioral advertising
- Right to limit use of sensitive personal information
- Non-discrimination for exercising rights
Documents
Reference
CCPA / CPRA FAQ
Does DialPhone sell personal information?
No. We do not sell personal information, share it for cross-context behavioral advertising, or exchange it for anything of value. Our business model is subscription fees from customers.
How do I submit a consumer rights request?
Email [email protected] or submit via the Privacy Policy. We respond within 45 days (90 with extension) per CCPA requirements.
If I'm not a California resident, do these rights apply?
DialPhone honors CCPA rights globally as a matter of policy. Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), and other state privacy frameworks provide comparable rights, we honor those too.
What about end users (people on calls with your customers)?
DialPhone processes end-user data as a service provider on behalf of customers under a Data Processing Agreement. End users should submit rights requests to the customer (the business they interacted with); customers can then instruct DialPhone to execute the request through the admin portal.
Trust center