Invoca, Inc. (“Invoca”, “We”, “Us” or “Our”) is committed to protecting your privacy and ensuring you have a positive experience on our website and when you use our products and services. Invoca owns and operates a proprietary call intelligence technology platform (“Invoca Platform”). Invoca provides networks, advertisers, agencies, publishers, and other businesses (“Clients”),with marketing automation services (the “Services”) using unique phone numbers combined with database management.
Collection of your Personal Data
Invoca collects Personal Data directly from individuals (data subjects), from Clients, and from third parties on behalf of our Clients.
Categories of information collected from consumers
Invoca collects your Personal Data directly when you interact with our website or callus. We may gather the following categories of Personal Data about you:
Categories of information collected from our clients
If you are a Client, Invoca collects Personal Data directly from you through the signup and registration process and through cookies or similar technologies. We may gather the following types of Personal Data about you:
Mostly, we gather this Personal Data directly from you or your devices. Some of this collection happens when you affirmatively send us information. You can choose not to provide Personal Data to Invoca, but you may be unable to access certain options and services if they require Personal Data that you have not provided. Some of the information collection happens passively – that is, the data is automatically collected when you interact with the Invoca Platform and our Services. You can adjust certain settings to reduce the amount of Personal Data we passively collect from you when you use ourProducts.
Categories of information collected from or on behalf of our Clients
Invoca, as part of our Services, collects or receives Personal Data from consumers who interact with our Clients’ websites and assigned phone numbers. Depending on how a Client configures and uses the Invoca Platform and Services, this may include the content of recorded telephone calls, as well as biometric data and biometric identifiers. This information, which we maintain exclusively on behalf and at the direction of our Clients, may include sensitive Personal Data including, without limitation, financial/credit card account data and/or health information. Invoca provides tools to redact/prevent recording of medical and financial health information. Invoca advises Clients to use such tools to prevent the collection and maintenance of sensitive Personal Data, but cannot guarantee that Clients use these tools in all cases. Our clients control this Personal Data and its collection and use are governed by their respective privacy policies, which may differ from Invoca’s policy. We encourage consumers with questions or requests related to Personal Data collected by Invoca’s Clients to contact those entities directly, and we will refer any consumer requests for Personal Data maintained by Invoca on behalf of a Client to that Client.
How we use Personal Data
Invoca processes Personal Data with consent and/or as reasonably necessary to provide our Platform and Services, operate our business, and provide the Platform andServices on behalf and at the direction of our, and for other legitimate commercial and business purposes including:
You have the right to object to how we process your personal data in certain circumstances, including the right to ask us not to process your personal data for marketing purposes. If you have questions about how we process your data, please contact us at firstname.lastname@example.org.
Disclosure and Sharing of Personal Data
Invoca does not sell Personal Data.
Invoca may disclose Personal Data to affiliated entities. Invoca may disclose aggregated information about our users without restriction.
We may also disclose your personal information:
We forbid our service providers from selling Personal Data they receive from us or otherwise collect or process on our behalf, and we limit their use of that Personal Data to that which is necessary to perform the services we have asked of them, or as otherwise required by law.
How long we retain your Personal Data depends on the type of data and the purpose for which we process the data. We will retain your Personal Information for the period necessary to fulfill the purposes outlined in this Privacy Notice unless a longer retention period is required or permitted by law.
Security of your Personal Data
Invoca takes appropriate security measures to protect against unauthorized access to or unauthorized alteration, disclosure, exfiltration, or destruction of data. Invoca restricts access to personal information to those employees or third parties who have a need to know such information for the purpose of effectively delivering Invoca Services by means of user login and password requirements. Invoca routinely evaluates its data security practices to identify security threats or opportunities for improvement. No transmission of data over the Internet or the phones is guaranteed to be completely secure. It may be possible for third parties not under the control of Invoca to intercept or access transmissions or private communications unlawfully. While Invoca strives to protect personal information, it cannot ensure or warrant the security of any information a user transmits. If you have any questions about the security of your personal information, you can contact us at email@example.com.
Special Information for residents of California
If you are a California resident, you may have the right to receive a free, yearly accounting of the following information for the preceding calendar year: (1) information identifying each third-party company to whom we may have disclosed, within the past year, personally identifiable information about you for direct marketing purposes; and (2) a description of the categories of personally identifiable information disclosed. You may make such a request by emailing firstname.lastname@example.org.
You may have a right to know about personal information about you that we have collected, disclosed, or sold, including:
Please note that Invoca does not collect, use, or sell personal information about minors between 13 and 16 years of age without their affirmative authorization, and we do not collect, use, or disclose personal information about children under 13 without verifiable parental permission.
In addition, upon receipt of a verifiable request from you establishing your identity, you may have the right to know about the specific pieces of personal information that we have collected about you and/or shared with third parties in the preceding 12 months.
You may also have the right to request deletion of personal information about you that we have collected or maintain, which we will honor subject to certain limitations set forth in California law.
Prior to honoring a request to know information about specific pieces of information or a request to delete Personal Information, Invoca will verify your identity. If you have a password protected account, we will verify your identity using that account. Otherwise, Invoca will ask you to provide one or two pieces of information (e.g., proof of name, address, or phone number) to protect your privacy.
For more information or to submit a request to know or delete Personal Information, please call 1-877-541-3424, or contact our us at email@example.com. We will respond to all such requests in a timely fashion and comply with such requests as and to the extent required by applicable data protection law. We reserve the right to reject such requests to the maximum extent allowable by applicable law.
Special Information for Biometric Information Privacy Act (BIPA)
Invoca or its vendor(s) may collect, store, and use customer biometric data for the purpose of voice identification as part of its service offerings.
Invoca’s policy is to protect and store biometric data in accordance with applicable standards and laws, including, but not limited to, the Illinois Biometric Information Privacy Act. An individual’s biometric data will not be collected or otherwise obtained by AAI without prior written consent of the individual.
Invoca will not disclose biometric data unless (a) consent is obtained, (b) disclosure is required by law, or (c) disclosure is required by a subpoena.
Invoca will store, transmit, and protect biometric data using a reasonable standard of care and in a manner that is the same as or exceeds the standards followed in maintaining other confidential and sensitive information.
Invoca will permanently destroy any biometric identifiers or information from its systems, or the systems of its vendor(s), when the initial purpose for collecting or obtaining such identifiers or information has been satisfied.
Special Information for residents of the European Economic Area (EEA) and Switzerland
Invoca processes data about residents of the EEA and Switzerland in compliance with applicable law including, without limitation, the General Data Protection Regulation and the Swiss Federal Data Protection Act.
Lawful Basis; Controller and Processor Arrangements
Invoca processes Personal Data about Clients and consumers in the EEA and Switzerland as a Controller on its own behalf and as a Processor on behalf and at the direction of our Clients. In each case, our processing of Personal Data is based on the legitimate and proportionate interests of Invoca and/or its Clients. In certain cases, such as where Personal Data may be used for marketing purposes, we will seek your consent for processing, and that consent may be withdrawn at any time
Transfer and Storage of Personal Data
Transfers from other countries. When we transfer personal information outside countries other than those in the EEA, the UK, and Switzerland, we strive to comply with the cross-border data transfer rules of those countries, such as by cooperating with that country’s data protection authority or providing a written agreement to each customer that meets the data protection requirements of the country.
EU-US Data Privacy Framework. Invoca participates in the EU-U.S. Data Privacy Framework and its Swiss and UK extensions (“DPF”) and commits to complying with the DPF’s detailed set of privacy obligations. This includes, for example, privacy principles such as purpose limitation, data minimisation and data retention, as well as specific obligations concerning data security and the sharing of data with third parties.
Invoca adheres to the DPF principles for onward transfers of personal data to third parties and remains liable for damages caused by third parties under the DPF unless Invoca did not cause the event giving rise to damage. Invoca may be obligated to arbitrate claims as set forth in Annex I of the DPF Principles. To learn more about the DPF program, and to view our certification, please visit https://www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt0000000TNsuAAG&status=ActiveJon.
With respect to Personal Data received or transferred pursuant to EU-US Data Privacy Framework, Invoca is subject to the regulatory enforcement powers of the U.S. Federal Trade Commission. In certain situations, Invoca may be required to disclose Personal Data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.
If you have an unresolved privacy or data use concern that we have not addressed satisfactorily, please contact our U.S.-based third party dispute resolution provider (free of charge) at https://feedback-form.truste.com/watchdog/request.
Data Subject Rights
As a resident of the EEA or Switzerland, you may have certain rights with respect to Invoca’s processing of Personal Data about you.
In order to make such a request of us, please call 1-877-541-3424, or contact our us at firstname.lastname@example.org. We will respond to all such requests in a timely fashion and comply with such requests as and to the extent required by applicable data protection law.
As mentioned above, Invoca’s website offers publicly accessible blogs or community forums. Any user of the Invoca website should be aware that any information provided in these areas may be read, collected and used by others who access these sites. Our blog is also managed by a third-party application that may require you to register to post a comment. We moderate information posted to the blog. To request removal of any personal information from the Invoca blog or other community forum, contact us at email@example.com.
Invoca will only post Client testimonials with the Client’s consent to do so. If you wish to update or delete your testimonial, you can contact us at firstname.lastname@example.org or submit a request through the Invoca Community portal at https://community.invoca.com/.
Third-Party Web Features