NovoOne Privacy Policy

This Privacy Policy describes how Xiamen Yeastar Digital Technology Co., Ltd. (“Yeastar”, “we”, “us”, or “our”) collects, uses, and discloses information obtained through the NovoOne Cloud Communication Platform (“Platform”), related management portals, client applications, and APIs. NovoOne is a multi-tenant communication platform which provides communication and collaboration services (Services) for Communication Service Providers (CSPs). Users of the Platform include CSPs (“tenant administrators”) and their end users (“extension users”).

NovoOne processes the personal data of the individuals who register for and use the Platform. If you choose to use our Services, then you agree to the collection, use and disclosure of information in relation to this policy. We will not use or share your information with anyone except as described in this Privacy Policy.

This Policy specifically covers the following parts:

  • What information NovoOne collects;
  • How NovoOne uses this information;
  • Under what circumstances NovoOne shares information;
  • Your control and choices regarding personal information;
  • What security measures we take to protect your information.

We hope you read it carefully before using our Services.

INFORMATION WE COLLECT

Account and Registration Information:
When a CSP registers for the NovoOne Platform or when an administrator creates an extension account, we collect the following information, including but not limited to: name, email address, company name, company address, phone number, job title, and billing information. This information is used for account creation, identity verification, and service activation.

Communication Data:
As a communication platform, NovoOne processes the following communication-related data in the course of providing Services:

  • Call Detail Records (CDR) – This includes calling and called numbers, call duration, call time, call type (inbound/outbound/internal), and call result;
  • Voicemail – Voice messages and related data stored on the Platform;
  • Call Recordings – Audio recordings of calls made in accordance with configured rules when the tenant administrator enables the recording feature;
  • Contacts – Contact information stored on the system, including names, company names, email addresses, telephone numbers, postal addresses, and fax numbers;
  • NovoOne Mobile Background Push Notification – This feature enables incoming call notifications when the NovoOne mobile app is not active or running in the background. The data involved includes the caller ID and name. This functionality ensures the basic usability of communication services. Users who wish to protect their privacy can choose to disable push notifications;
  • Trunks – This includes the username, password and DIDs of the trunk;
  • SMTP Server – An SMTP server is required for sending out email notifications as designated by the administrator and other emails as needed. Yeastar or the Service Provider provide a default SMTP server. The SMTP server will not store any email data. You can disable the default server or choose to use a Custom Email Server;
  • Event Notification – When Event Notification is enabled, relevant contacts will be notified via email or phone number as designated by the administrator;
  • Operation Logs – This includes all the operation performed in the Platform and the results;
  • Application Programming Interface (API) – The feature is disabled by default. When enabled, authorized third-party applications may access system data through available API endpoints, including but not limited to CDRs, call recordings, user status information, and account-related data. Any data obtained through the API is processed by the respective third-party application, which is solely responsible for its use, storage, and protection;
  • System Log – When Debug log is enabled, System Log will capture call parties name and number for debugging purpose. Debug log is disabled by default;
  • AI Transcription – This feature is disabled by default. When enabled, audio recordings of phone calls will be sent to a third-party AI model for transcription into text, and the transcribed text will be sent to a third-party AI model to generate a call summary;
  • AI Receptionist – This feature is disabled by default. When enabled, incoming calls will be processed by an AI-powered virtual receptionist provided by a third-party AI service provider. Real-time call audio and related interaction data may be transmitted to the third-party service solely for the purpose of call handling and response generation. The data involved may include real-time audio streams of calls, call numbers, call routing information and configuration data related to the AI Receptionist.;

The aforementioned communication data belongs to the corresponding tenant. NovoOne acts solely as a data processor, handling the data in accordance with the tenant administrator’s configurations and instructions.

Device and Access Information:
Each time you access the NovoOne management portal, client application, or connect via API, we may automatically collect the following information: IP address, device type, operating system version, browser type, client version number, access time, and session ID. This information is used for service availability monitoring, security audits, and troubleshooting.

Configuration Data:
Configuration information created by tenant administrators within the Platform, including but not limited to: extension configurations, queue configurations, call routing rules, feature code settings, and number resource allocation. This data constitutes tenant business configurations, and we process it solely within the scope of service provision.

Usage Data and Logs:
The Platform records administrative operation logs, API call logs, and system event logs for security auditing, fault diagnosis, and service quality improvement.

Cookies and Tracking Technologies:
The NovoOne management portal uses cookies and similar technologies for session management, security authentication, and recording of feature preferences. You can manage cookies through your browser settings, but disabling cookies may affect the normal use of certain portal features.

HOW WE USE YOUR INFORMATION
NovoOne uses the information collected in accordance with this Privacy Policy, specifically for the following purposes:

  • Provide core communication services – To process core platform features such as call routing, number registration, call handling, voicemail, and call recording storage;
  • Account management and billing – To maintain tenant account status, generate call logs, and perform billing and invoicing services;
  • Service Notifications – To notify you via email or the platform of account status changes, service updates, security incidents, and maintenance schedules;
  • Technical Support – For issue diagnosis, troubleshooting, and customer support services;
  • Service Improvement – To conduct aggregated analysis of anonymized usage data to improve platform performance, stability, and feature design;
  • Security and Compliance – To detect abnormal behaviors and prevent fraud, abuse, and unauthorized access;
  • Legal Compliance – To comply with applicable laws and regulations and to respond to lawful requests from government or judicial authorities;
  • Other Purposes with Explicit Consent – For purposes not specified in this Policy, after we notify you and obtain your explicit consent.

We commit to retaining personal information for no longer than is necessary to fulfill the purposes for which it was collected, unless otherwise required by laws.

SHARING AND DISCLOSURE
NovoOne will not rent, sell, or share your personal information with third parties, except in the following circumstances:

  • Service Providers – We may share necessary information with trusted third-party service providers that perform specific functions, such as cloud infrastructure providers, telecommunication carriers (for PSTN access), email service providers, and security service providers. All such third parties are contractually bound to use the information solely for the purpose of providing designated services to NovoOne and must maintain the confidentiality of the information.
  • AI and Enhanced Feature Providers – AI capabilities within the NovoOne platform (such as AI transcription and AI Receptionist) may involve third-party AI service providers processing relevant audio or text data. These providers must process data in accordance with applicable data protection laws and are prohibited from using the data for any other purposes.
  • CSPs (Tenant Administrators) – Communication data of extension users (CDR, recordings, messages, etc.) is accessed and managed by the respective CSP within the tenant data isolation framework, in accordance with their agreement with the end users. NovoOne does not control how tenant administrators process their tenant data.
  • Corporate Transactions – If Yeastar is involved in a merger, acquisition, reorganization, or asset sale, relevant information may be transferred as part of the transaction in accordance with the law. We will provide advance notice to the extent permitted by applicable law.
  • Legal Requirements – We may disclose information when required by law or when we believe in good faith that it is necessary:
    – to comply with valid legal processes (such as subpoenas or court orders);
    – to respond to emergencies involving personal safety;
    – to protect the rights or property of Yeastar and its users;
    – to prevent fraud or unauthorized use of the Platform;
    – to submit information to external auditors or regulatory authorities.

TENANT DATA ISOLATION
NovoOne employs a multi-tenant architecture, with each tenant’s data strictly isolated logically. The administrator of one tenant cannot access the data of another tenant. As the Platform operator, Yeastar accesses tenant data only when necessary for technical support, troubleshooting, or legal compliance, and always under strict authorization controls.

CROSS-BORDER DATA TRANSFER
NovoOne provides Services to CSPs worldwide. Your information may be stored and processed in countries or regions where Yeastar, its affiliates, and its service providers are located. We will ensure that such cross-border transfers comply with applicable data protection laws and implement appropriate contractual safeguards.

DATA RETENTION
We retain your information for no longer than is necessary to fulfill the original purpose of collection or as required by legal, tax, or regulatory obligations. The retention periods for communication data such as call recordings and CDRs are configured by the tenant administrator within the Platform, and Yeastar acts in accordance with the tenant’s instructions. After your account is deactivated, we will delete or anonymize the relevant personal information within a reasonable timeframe.

YOUR RIGHTS AND CHOICES
Depending on the applicable laws in your jurisdiction, you may have the following rights:

  • Right of Access – To know what personal information we hold about you;
  • Right to Rectification – To request the correction of inaccurate personal information;
  • Right to Erasure – To request the deletion of your personal information under specific conditions;
  • Right to Restriction of Processing – To request the restriction of processing of your data under specific circumstances;
  • Right to Data Portability – To receive your data in a structured format;
  • Right to Object – To object to data processing based on legitimate interests.

To exercise the above rights, please contact us via the contact information provided at the end of this policy. Extension users who need to exercise the above rights should generally first contact the administrator of their CSP, as the CSP is the primary controller of their data.

You may choose not to provide certain information, but this may result in our inability to provide some or all of our Services.

SECURITY
We implement appropriate technical and organizational security measures to protect your information, including but not limited to:

  • Transmission encryption (TLS/SRTP);
  • Encryption of static data;
  • Access controls and permission management;
  • Security monitoring and intrusion detection;
  • Regular security audits;
  • Employee privacy and security training.

However, no security measure can provide absolute assurance. You are responsible for safeguarding your account credentials and promptly reporting any suspicious security incidents to us.

CHILDREN’S PRIVACY
NovoOne is a B2B communication platform designed for enterprise users and does not provide services to children under 13. We do not knowingly collect personal information from children under 13. If you discover any such circumstances, please contact us, and we will delete the relevant information as soon as possible.

CHANGES TO THIS PRIVACY POLICY
Yeastar reserves the right to update this Privacy Policy from time to time. When there is a material change to this policy, we will notify you via Platform notifications or email. We encourage you to review this policy periodically to stay informed about our latest data processing practices.

RISKS AND DISCLAIMERS
The NovoOne Platform may contain links to third-party services or websites. Your access to such third-party services is at your own risk, and we are not responsible for the privacy practices of the third parties.

The quality of Services provided by the Platform, such as call quality and call recording completeness, may be affected by network conditions. Yeastar assumes no liability for any data incompleteness resulting from network issues.

HOW TO CONTACT US
If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us via the information provided below:

Xiamen Yeastar Digital Technology Co., Ltd.
Email: info@yeastar.com
Official Website: https://www.yeastar.com/
Phone Number: +86-592-5503301

Last Updated: June, 2026

Grow together with Yeastar.

Bring real results to your customers.

Become a Partner

Grow the Next Power

Celebrating 20 years of leadership in business communications, Yeastar doesn’t just build easy-first UC platforms; we build growth engines for service providers.

Discover How