Privacy Policy

Last updated: 9 October 2026

This policy explains how ObiSIP collects and uses personal data when you visit obisip.com or use our services. ObiSIP is operated by Voicify Pte. Ltd., which is the data controller.

Who we are

We follow Singapore's Personal Data Protection Act 2012 (PDPA). Where we serve customers in the European Economic Area or the United Kingdom, we also apply the GDPR / UK GDPR.

What we collect

• Account and verification data: name, company, email, phone, address and other details you give us at signup or when we verify an account.
• Service and call data: call detail records (calling and called numbers, times, duration, route, cost), SIP and IP-authentication settings, and logs needed to run and secure the network.
• Customer content you upload: lead lists, survey prompts and answers, call recordings and CRM notes. You control this content; we process it on your behalf.
• Payment data: invoices, balance movements, and for crypto payments the deposit address, transaction hash and sending address shown on the public blockchain. We do not process card details.
• Support messages: what you send us by email, Telegram or the portal support page.
• Technical data: IP address, browser type and server access logs when you visit our site or portal.

How we use it

• To provide, bill and support the services you order (performance of our contract with you).
• To prevent fraud and abuse, secure our network, and enforce our Terms (legitimate interests).
• To meet accounting, tax and telecoms record-keeping duties (legal obligation).
• To measure our advertising, only if you accept cookies (consent — see below).

We do not sell personal data.

Who we share it with

• Telecom carriers that terminate your calls, which receive the call signalling they need.
• Hosting providers that run our platform and the dedicated servers you order, in the location you choose (Netherlands, Lithuania, United Kingdom or United States).
• Messaging providers you choose to contact us through, such as Telegram.
• Google, for advertising measurement, only after you accept cookies.
• Authorities, where the law requires it.

Some of these recipients are outside your country. Where GDPR applies, we rely on adequacy decisions or standard contractual clauses for those transfers.

How long we keep it

Call detail records are kept for 180 days in the live system. Invoices and payment records are kept as long as tax law requires. Account data is kept while your account is open and for a limited period afterwards to handle disputes. Content on a dedicated server is deleted when the server's term ends.

Cookies

The public site sets no advertising cookies unless you click Accept in the cookie bar. If you accept, Google Ads may set cookies to tell us which ads brought you here. You can change your choice at any time with Cookie settings in the footer. The customer portal uses only the session cookies needed to keep you logged in.

Your rights

You can ask to access, correct or delete your personal data, to receive a copy of it, or to object to or restrict how we use it. You can withdraw consent at any time. Write to sales@obisip.com. You can also complain to Singapore's Personal Data Protection Commission or, in the EEA/UK, to your local data protection authority.

Security

We use encrypted connections, access controls, firewalls and monitoring to protect data. No system is perfectly secure; we will notify you and the relevant authority of a breach where the law requires.

Changes

We will post any changes on this page and update the date above.