Privacy Policy

1. Introduction

ROOTAPI LLC ("RootAPI," "we," "us," or "our"), located at 75 E 3RD ST STE 7, Sheridan, WY 82801, operates the RootAPI cloud communication platform at rootapi.io. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services.

By using our services, you consent to the practices described in this Privacy Policy. If you do not agree, please discontinue use of our services.

2. Information We Collect

2.1 Personal Information

• Full name and contact details (email address, phone number)
• Company name and business information
• Billing information (processed securely through our payment processors)
• Account credentials (passwords stored as bcrypt hashes)
• IP addresses and device/browser information

2.2 Phone Number Collection and SMS Consent

When you provide your phone number during registration or account use, we collect it for the following purposes:

• Account verification and two-factor authentication
• Sending OTP (one-time password) codes
• Account security notifications
• Service updates and operational alerts
• Customer support communications

SMS Consent: We will only send you SMS messages if you have explicitly opted in by checking the SMS consent checkbox during registration (which is not pre-checked). Your consent to receive SMS is voluntary and not a condition of using our core services.

2.3 Usage Data

• API call logs, request timestamps, and response codes
• SMS send/receive logs and delivery reports
• SIP trunk call detail records (CDRs)
• Webhook delivery logs
• Dashboard usage and feature interaction data

3. How We Use Your Information

• To provide, operate, and improve our services
• To process transactions and manage billing
• To send account notifications, OTP codes, and security alerts via SMS (with your consent)
• To provide customer support
• To comply with legal obligations and regulatory requirements
• To enforce our Terms of Service and Acceptable Use Policy
• To detect and prevent fraud or abuse

4. SMS Communications

Program Name: RootAPI SMS Alerts

Message Types: Account notifications, verification codes (OTP), service updates, billing alerts, and customer support messages.

Message Frequency: Message frequency may vary based on account activity and the services you use.

Rates: Message and data rates may apply. Please check with your mobile carrier for details.

Opt-Out: You may opt out of SMS communications at any time by replying STOP to any SMS message from us. After opting out, you will receive a single confirmation message and no further SMS messages will be sent.

Help: Reply HELP to any SMS for assistance. You may also contact us at contact@rootapi.io.

Re-Opt-In: To resume SMS communications after opting out, you must provide new explicit consent.

5. Third-Party Service Providers

RootAPI uses the following third-party communication providers to deliver SMS, voice, and messaging services. Your data (including phone numbers and message content) may be transmitted through these providers as necessary to deliver the services you request:

• Twilio Inc. — twilio.com
• Infobip Ltd. — infobip.com
• Sinch AB — sinch.com
• Telnyx LLC — telnyx.com
• Plivo Inc. — plivo.com
• MessageBird B.V. — messagebird.com
• Vonage Holdings Corp. — vonage.com
• Telesign Corporation — telesign.com

Each of these providers has their own privacy policies. We do not sell your personal information to these providers; data is shared solely to facilitate service delivery.

We may also use providers for payment processing, analytics, and infrastructure. In all cases, data sharing is limited to what is necessary for service delivery.

6. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information. We may disclose your information:

• To service providers listed above, as necessary to provide our services
• In response to lawful requests from government authorities
• To enforce our Terms of Service or protect the rights of RootAPI, users, or third parties
• In connection with a merger, acquisition, or sale of assets (with notice to you)

7. Data Retention

We retain personal data for as long as your account is active and for a reasonable period thereafter for legal and business purposes:

• Account data: Retained for the life of the account plus 3 years after closure
• SMS logs and call records: 90 days by default (configurable)
• Billing records: 7 years as required by law
• Opt-out records: Retained indefinitely to honor opt-out requests
• API logs: 30 days

8. Security

We implement industry-standard security measures including:

• AES-256 encryption for API keys and sensitive credentials
• bcrypt password hashing
• TLS/SSL for all data in transit
• CSRF protection on all forms
• Role-based access controls
• Regular security audits

9. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your personal data (subject to legal retention requirements)
• Portability: Request your data in a portable format
• Opt-Out of SMS: Reply STOP to any SMS or email contact@rootapi.io
• Restriction: Request restriction of processing in certain circumstances

To exercise any of these rights, contact us at contact@rootapi.io.

10. Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected such information, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or a prominent notice on our website. Continued use of our services after changes constitutes acceptance of the updated policy.

12. Contact Us

For privacy-related inquiries, opt-out requests, or to exercise your rights:

• Email: contact@rootapi.io
• Company: ROOTAPI LLC
• Address: 75 E 3RD ST STE 7, Sheridan, WY 82801