In short
- Version for all countries except Russia. Controller: Beebro Group LLC (Republic of Belarus)
- We process your sign-in phone, profile and payment data to provide the service
- We use our clients' users' numbers only for verification and anonymise the number after 90 days
- We do not sell data or use it for advertising
- Data is stored in the Republic of Belarus, connections are HTTPS only
- You can access, correct or delete your data — write to privacy@telvera.io
1.General provisions
This policy explains what personal data the Telvera service processes, why, for how long, and what rights you have. It has been prepared in accordance with Law of the Republic of Belarus No. 99-Z of 7 May 2021 “On Personal Data Protection”.
This version applies to clients and users from all countries except the Russian Federation. Russia is covered by a separate version.
The policy applies to the telvera.io website, the dashboard and the Telvera API. Reading the policy is your right. We do not require you to “accept” it as a condition of using the service.
2.Who processes whose data
Telvera handles two kinds of data, and the service's role differs for each.
Our clients' data — we are the controller
These are the companies and developers who sign up in the dashboard: sign-in phone, payer details for invoices, payments, support requests. We are responsible for this data.
Our clients' users' numbers — we are the processor
When a client verifies their user's phone through the API, they pass the number to us. We process it only on the client's instructions and only to confirm the number. The client is the controller of this data: they inform the user about the verification and obtain consent where required. The terms of processing are set out in the contract with the client.
3.Purposes, data, grounds and periods
Each purpose is listed separately below. We do not process more data than the purpose requires and do not use it for anything else.
- Whose data
- Telvera clients
- What data
- Phone number, number to call, time and result of the sign-in, IP address
- Ground
- Contract with the client (Terms of Service), para. 15 art. 6 of Law No. 99-Z
- Retention
- While the account exists and 1 year after it is deleted
- Whose data
- Clients' users (on the client's instructions)
- What data
- User's phone number, number to call, call time, verification result
- Ground
- Instructions of the client as controller under the contract (art. 7 of Law No. 99-Z)
- Retention
- 90 days, then the number is anonymised and remains in the client's reports only in masked form (+375 29 5••-••-03)
- Whose data
- Telvera clients
- What data
- Payer details (name, tax ID, address — if you provided them), last 4 digits of the card, payment history and documents
- Ground
- Contract with the client; accounting legislation
- Retention
- Payment documents — periods set by archiving legislation, everything else — while the account exists
- Whose data
- Telvera clients
- What data
- Text of requests, correspondence, contact details for the reply
- Ground
- Contract with the client
- Retention
- 3 years after the request is closed
- Whose data
- Telvera clients and website visitors
- What data
- IP address, browser data, sign-in and API request logs
- Ground
- Contract with the client; information security obligations
- Retention
- Request log — 30 days, sign-in log — 6 months
5.Cross-border transfer
Data is stored on servers in the Republic of Belarus. We do not transfer clients' data abroad except as described below.
6.How we protect data
- All connections to the website, dashboard and API are HTTPS only
- Only staff who need it for their work have access to data, and access is logged
- Clients' users' numbers are shown masked in the dashboard
- API keys are stored only as a hash; the full key is shown once, when it is created
- We report personal data breaches to the National Personal Data Protection Center within 3 business days
7.Your rights and how to exercise them
Under Law No. 99-Z you have the right to:
- Obtain information about what data of yours we process, why and on what grounds — we reply within 5 business days, free of charge
- Find out who your data was shared with over the last year — once a year free of charge, reply within 15 days
- Correct incomplete, outdated or inaccurate data — within 15 days
- Withdraw consent where processing was based on it — within 15 days
- Demand that processing stop and the data be deleted if there is no lawful ground for it — within 15 days
- Appeal our actions to the National Personal Data Protection Center (cpd.by)
How to submit a request
Send the request in writing to the controller's address (Pobediteley Ave. 7A, office 28, 220004 Minsk) or as an electronic document to privacy@telvera.io. State your full name, address, date of birth, the substance of the request and your signature (or electronic digital signature), as required by art. 14 of Law No. 99-Z.
9.Changes to this policy
If we materially change the policy (purposes, periods, the data processed or how rights are exercised), we notify you in advance in the dashboard and by email. The current version is always available on this page.
Fragen?
Schreiben Sie an privacy@telvera.io zu personenbezogenen Daten oder an hello@telvera.io zu allem anderen. Wir antworten innerhalb von 5 Werktagen.