Privacy Policy

Effective October 26, 2026.

This Privacy Policy explains what personal data Ecliptical Software Inc. collects when you use The (Unofficial) VoIP.ms MCP Server, how we use and store it, who we share it with, and your choices. It reflects how the Service actually works.

What we collect

  • Account identity: your email address and an account identifier. If you sign in with Google, Apple, or GitHub, we also receive your name as the provider shares it, your profile picture URL (Google and GitHub), and the provider’s identifier for your account. If you register a passkey, it is stored with your account. Sign-in is handled by Amazon Cognito; we do not see or store your password.
  • Sign-in session: while you are signed in to the website, a session record holding your name, email address, sign-in provider, and the sign-in tokens Amazon Cognito issued. It expires after 60 minutes of inactivity.
  • VoIP.ms API credentials: the VoIP.ms API username and password you choose to store so the Service can call VoIP.ms on your behalf.
  • Copies of voicemail, recordings, and faxes: when a tool fetches a voicemail message, a recording, or a fax through the hosted Service, we store a copy of the file so you can download it from a link that only you can open while signed in. Copies are encrypted at rest and deleted automatically 30 days after they are stored. There is currently no way to delete a copy sooner. Other VoIP.ms data a tool returns, such as text messages and call records, passes through to your AI app and is not stored.
  • Connected apps: which AI apps you have approved, the permissions you granted each, and when. While an app stays connected we also keep a refresh token for it, which expires 30 days after its last use or when it is revoked.
  • Usage data: the plan you have selected, and a per-day count of tool calls if your plan has a daily limit. We also log each tool call: the tool’s name, a pseudonymous identifier derived from your account, the AI app that made the call (its identifier and, where known, its name and version; for a call through the hosted Service, these are the name and version of the software that sent the request, from its User-Agent), whether the call ran through the hosted Service or the voipms-mcp app, the outcome, and how long it took. Each time an AI app connects, we log its name and version. These logs are kept for 60 days.
  • Request logs: our web server logs each request to the website, including signed-in pages: the page requested (without its query string), your approximate country as determined by our network provider, and the browser identifier (User-Agent) your software sends. Requests to the Service that fail authentication are logged with their User-Agent. Our logs identify a user only by a pseudonymous identifier derived from the account, and a browser session only by a pseudonymous identifier derived from it. For account-setup actions (accepting the terms, choosing a plan, saving or removing VoIP.ms credentials, approving or denying an app) we also log whether the action succeeded and, for saved credentials, the result of our check on them, never the credentials themselves. These logs are kept for no more than 60 days.
  • Greeting text: the words you ask the Service to turn into a voice recording, whether through the hosted Service or the voipms-mcp app on your computer. We send the text to Amazon Polly to produce the audio and do not store it. For each request we keep the number of characters, the voice, and whether it succeeded, linked to your account, to monitor cost and prevent abuse.
  • Analytics data (public pages, with your consent): if you accept analytics on our marketing pages, Google Analytics collects standard usage data such as pages visited, approximate location, and device and browser information. This runs only if you opt in, and never inside the signed-in app.
  • Acceptance records: which version of the Terms of Service you accepted, and when.
  • Account status: if we suspend your account, a record of when and why.
  • Email preference: whether you chose to receive product-update email, when and on which page you chose, and which version of the request you were shown. Your email address, that record, and your account identifier are kept in the contact list of Amazon Simple Email Service, which sends our email.
  • Billing data (paid plans): your payment details are handled by our payment processor; we do not store card numbers. We store the identifiers of your customer and subscription records with the processor, and your subscription’s status. We keep the customer identifier if you return to the Free plan.

The voipms-mcp app on your computer

The voipms-mcp app keeps your VoIP.ms API credentials in your operating system’s keychain and calls VoIP.ms directly. Those credentials are never sent to us. The app contacts the Service to sign you in, to check each tool call against your daily limit if your plan has one, and to create greetings from text as described above. It also checks for a newer release at most once a day; setting VOIPMS_MCP_UPDATE_CHECK=off turns that check off. Every request the app makes carries its version, operating system, and processor type. Files the app fetches are not stored by us.

How we store VoIP.ms credentials

Your VoIP.ms API credentials are encrypted before they are written to our database, using envelope encryption with AWS Key Management Service (KMS). They are decrypted in memory only for the moment a request to VoIP.ms is made on your behalf, and are never displayed back to you after you save them. You can replace or delete your stored credentials at any time from the credentials page; deleting them removes them from our database, and they remain in our encrypted backups for up to 35 days. When the Service calls VoIP.ms, it does so as you, using these credentials, scoped to the per-resource permissions you have granted.

You remain responsible for the security of your VoIP.ms account. We recommend enabling two-factor authentication on your VoIP.ms account; doing so does not interfere with the Service’s API access.

How we use your data

  • To provide the Service: authenticate you, store and use your VoIP.ms credentials to fulfill tool calls, and enforce your plan’s limits.
  • To operate and secure the Service, prevent abuse, and comply with law.
  • To understand how the Service is used, such as how many people use it and which tools and AI apps they use, from the logs described above. This analysis is internal and identifies users only by a pseudonymous identifier.
  • To communicate with you about your account, security, and material changes to our policies.
  • To email you about new features and releases, only if you opt in. You can opt out at any time on your Account page or with the unsubscribe link in any such email.

Who we share it with

  • Amazon Web Services (AWS), which hosts the Service and stores our data, including the KMS-encrypted credentials.
  • Amazon Polly, the AWS text-to-speech service, which receives the text of any greeting you ask the Service to create from text. AWS may store that text and use it to improve its AI services.
  • Google, Apple, or GitHub, when you choose to sign in with that provider (sign-in only), and — only if you accept analytics on our public pages — Google as the provider of Google Analytics.
  • VoIP.ms, when the Service makes API calls on your behalf using your credentials — this is the core function you ask it to perform.
  • Our payment processor, for paid-plan billing.

We do not sell your personal data.

Where your data is stored

We store your data with AWS in Canada (the ca-central-1 region). Connections to the Service are received at AWS network locations around the world. The other companies listed under “Who we share it with” may process your data outside Canada, including in the United States.

Retention and your rights

We keep your account data for as long as your account exists and as needed to provide the Service and meet legal obligations. Some data has a fixed lifetime: copies of voicemail, recordings, and faxes are deleted 30 days after they are stored, and server logs are kept for no more than 60 days. Our database keeps backups for 35 days, so a record that is deleted remains in those backups until they expire.

You can replace or delete your stored VoIP.ms credentials at any time. To request access to, export of, or deletion of any other personal data, contact us; we handle these requests manually. Data we delete remains in backups and logs until they expire as described above. Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA; we will honor those rights as applicable.

Cookies

The Service uses a server-side session cookie to keep you signed in, linked to the session record described above, and — only if you accept on our public pages — Google Analytics cookies. See the Cookie & Session notice for details.

Contact

Privacy questions and data-rights requests can be sent to privacy@eclipticalsoftware.com.

Questions about this document? Contact us at info@eclipticalsoftware.com.