Privacy Policy for ERX Blue

Mettle Networks ("we," "our," or "us") provides the ERX Blue application as a Cloud Telephony Service Provider (CTSP) platform. This Privacy Policy explains how we handle data for enterprise users ("you") authorized by your organization ("Enterprise Subscriber"). By using ERX Blue, you acknowledge that Mettle Networks acts primarily as a Data Processor under the instruction of your Enterprise Subscriber (the Data Controller).

To facilitate business telephony and comply with regulatory mandates (including TRAI and RBI guidelines), we collect the following:

• Contact Information: We request access to your device's native address book (Contacts) to allow you to initiate calls to your business contacts directly from the app. This data is used solely for call initiation and caller identification. We do not sell or market your contact list.

• Audio Data (Call Recordings): As a CTSP, we may record calls facilitated through our platform. These recordings are created for compliance, auditing, and quality assurance purposes as mandated by your Enterprise Subscriber and applicable regulations.

• Call Logs & Metadata: We collect usage data including call duration, timestamps, and destination numbers ("Call Detail Records" or CDRs).

Camera Data & Permissions

• Functional Usage: We request access to your device’s camera solely for the purpose of scanning QR codes that contain automated configuration and provisioning details for the service.

• Non-Essential Nature: Camera access is optional. Users may choose to deny this permission and manually enter configuration details if they have access to them through their Enterprise Subscriber.

• Limited Scope: The camera is not used for the app's standard operations, such as voice calling, and the app does not support video calling features.

• No Data Storage: Camera streams are processed locally on the device in real-time for the purpose of decoding the QR code. We do not record, store, or transmit any image or video data to our servers or any third parties.

• Revocation: If you revoke camera permissions after the initial setup, the app will continue to function normally without any degradation in service.

• Service Delivery: To connect VoIP calls and sync with your business workflow.

• Regulatory Compliance: To meet data retention requirements mandated by the Telecom Regulatory Authority of India (TRAI) and other relevant bodies.

• Analytics: To provide your Enterprise Subscriber with reports on usage and performance.

• Short-Term Storage: Call recordings and logs are temporarily stored on Mettle Networks' secure infrastructure (PaaS) to generate immediate analytics and reports.

• Long-Term Archival: Data is subsequently transferred to the Enterprise Subscriber’s designated storage facilities for long-term retention mandated by legal frameworks (e.g., RBI or TRAI). Once transferred, Mettle Networks may purge this data from its active systems.

Your access to ERX Blue is managed via your Enterprise Subscriber’s Single Sign-On (SSO) or directory service. We do not maintain independent personal accounts.

• To Delete Data: When your authorization is revoked by your Enterprise (e.g., upon employment termination), your access is immediately removed. We purge user specific instance identifiers consistent with our agreement with the Enterprise Subscriber. Please contact your IT administrator for specific deletion requests.

For privacy concerns, please contact: erx-app-support@mettlenetworks.com