1Who This Policy Covers

This policy applies to:

• Visitors to belsmart.io
• Customers and users of the Belsmart outbound dialer platform (dashboard, dialing modes, CRM integrations)
• Users of the Belsmart Click-to-Call browser extension
• Contacts/leads whose phone numbers are processed through the Service on behalf of our customers

2Data We Collect

We only collect data that is strictly necessary to operate the Service, deliver the specific features described below, and meet our legal and security obligations. We do not collect data unrelated to these purposes.

Account and Authentication Information

When you create a Belsmart account, we collect your name, work email address, company name, and login credentials (passwords are stored hashed, never in plain text).

Contact and Lead Data (Personally Identifiable Information)

To operate outbound dialing campaigns, we process the contact data our customers upload or sync from their CRM, which may include names, phone numbers, email addresses, and campaign-related notes. This data is provided and controlled by our customers, and we process it strictly on their behalf and instruction.

Call Activity Data

This includes call timestamps, call duration, dialing mode used, call disposition (e.g., answered, voicemail, no answer), and — where enabled by the customer and consented to under applicable law — call recordings and transcripts.

CRM and Integration Data

When a customer connects a CRM (HubSpot, Salesforce, Zoho CRM, Pipedrive, Freshsales, LeadSquared, Bitrix24) or another integration (Zapier, Webhooks, Google Sheets, REST API), we sync call outcomes, dispositions, and related activity data back to that CRM record. We only access the specific CRM fields necessary to log call activity.

Extension Usage Data (Click-to-Call Extension)

The Belsmart Click-to-Call extension detects phone numbers on web pages you choose to use it on (such as CRM records, spreadsheets, or lead lists) in order to convert them into clickable, dialable links. The extension:

• Reads phone-number patterns on the active page strictly to enable the click-to-call feature
• Does not collect, store, or transmit general web browsing history
• Does not operate on pages where you have not initiated a call action
• Transmits only the phone number you click, and the resulting call outcome, back to your authenticated Belsmart account

Technical and Usage Data

Standard web and application logs, including IP address, browser type, device type, and pages visited on belsmart.io, used for security, fraud prevention, and service reliability.

Billing Information

For paid accounts, payment is processed by a PCI-compliant third-party payment processor. Belsmart does not store full credit card numbers on its own servers.

3How We Use Data

We use the data described above only for the following purposes:

• Operating and maintaining the outbound dialing platform and the Click-to-Call extension
• Placing calls, detecting answering machines (AI AMD), and logging call outcomes
• Syncing call activity and dispositions with connected CRM systems
• Maintaining Do Not Call (DNC) list scrubbing, consent logging, and other TCPA-required compliance controls
• Securing accounts, detecting fraud or abuse, and maintaining service reliability
• Providing customer support and responding to inquiries
• Billing and account administration
• Complying with legal obligations, including responding to lawful requests from authorities

We do not sell personal data, and we do not use contact or call data for advertising or marketing to the individuals contacted through our customers’ campaigns.

4Who We Share Data With

We share data only with the following categories of parties, and only as necessary to deliver the Service:

• CRM providers you connect — to sync call activity back to your records, per your configuration.
• Telephony and infrastructure providers — to place and route calls, and provide call recording/transcription.
• Payment processors — to process subscription billing.
• Legal and regulatory authorities — where required by law, subpoena, or valid legal process.
• Service providers under contract — bound by confidentiality and data protection obligations.

We do not share data with data brokers, advertisers, or any party for purposes unrelated to operating the Service.

5Data Security

We handle user data securely, including encryption of data in transit using modern cryptography (TLS). Access to customer and contact data is restricted to personnel and systems that require it to operate the Service. Passwords are stored using industry-standard hashing.

6Data Retention

• Account data is retained for as long as your account is active, and for a limited period afterward for legal/tax/accounting obligations.
• Call recordings and transcripts are retained per the customer account’s configured period, subject to applicable legal minimums and maximums.
• Contact/lead data is retained per the customer’s instructions and deleted upon account closure or request, except where legally required.

7Your Rights and Choices

Depending on your location and applicable law (including GDPR for EU/UK users and CCPA/CPRA for California residents), you may have the right to access, correct, delete, restrict, or port your personal data, and to withdraw consent where processing is based on consent (e.g., call recording).

To exercise these rights, contact admin@belsmart.io. If you are an individual contacted through a Belsmart customer’s outbound campaign, please contact that business directly, as they control the campaign data; we assist our customers in fulfilling such requests as their data processor.

8Limited Use Disclosure

The Belsmart Click-to-Call extension’s use of any data accessed through Chrome or Google APIs adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements. Data accessed through the extension is used solely to enable one-click calling and CRM activity logging — the extension’s disclosed single purpose — and for no other purpose.

9Cookies

belsmart.io uses cookies for authentication, remembering display preferences, and basic site analytics. You can control cookie preferences through your browser settings; disabling cookies may limit some site functionality.

10Children’s Privacy

The Service is intended for business use by adults and is not directed at children under 16. We do not knowingly collect personal data from children.

11International Data Transfers

Belsmart is based in the United States. If you access the Service from outside the U.S., your data may be transferred to and processed in the U.S. or other countries where our service providers operate, using appropriate safeguards where required.

12Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the “Last Updated” date above and, where required, provide additional notice before the changes take effect.

13Contact Us

This document is a general privacy policy template drafted to align with current Chrome Web Store Developer Program Policy requirements and common data protection principles (GDPR/CCPA-style rights). It is not a substitute for legal advice — we’d recommend having this reviewed by a qualified attorney familiar with telecom/TCPA compliance and data privacy law before publishing.