⚡Quick answer -
MyOperator never sells your data. Access is strictly role-based, encrypted, audited, and covered by our ISO 27001 programme. You can self-serve or request export/deletion at any time.
• You’re performing vendor security due diligence (GDPR- or CCPA-related).
• You need to export, delete or review data stored in MyOperator.
Topic | Our Practice |
Data misuse | Never sold, shared, or used for ads. |
Encryption | TLS 1.2+ in transit; AES-256 at rest. |
ISO certification | ISO/IEC 27001:2013 certified ISMS. |
Access control | Least-privilege RBAC + MFA; all actions logged. |
Transparency | Self-serve or assisted export/delete 24×7. |
• Secure AWS infrastructure (VPC isolation, security groups, managed WAF).
• Centralised logging, automated anomaly alerts.
• Annual third-party pen-tests; quarterly vulnerability scans.
• Personnel controls: background checks, mandatory security training.
To: support@myoperator.com
Subject: Data <Export/Delete> Request –
Scope: <account/user/number/timeframe>
Legal basis: Customer request
Requester: <Name, Role, Email, Phone>
I acknowledge identity verification may be required.
Service-level target: acknowledgement within 1 business day; fulfilment inside statutory timelines (≤ 30 days for GDPR).
Alt text: End-to-end flow for export or deletion requests
Data type | Default retention | Deletion on request? | Backup purge |
Call logs | 365 days | Yes | ≤ 30 days |
Recordings | 90 days | Yes | ≤ 30 days |
Billing data | 7 years (legal) | No | N/A |
Success confirmation: email + audit-log entry.
We will refuse or delay deletion/export if:
• What happens if MyOperator receives a government data request?
• How do I configure regional data residency in MyOperator?
• How to enable Multi-Factor Authentication for all agents
Keywords: MyOperator security, GDPR export, data deletion, ISO 27001, TLS encryption