How can I be sure MyOperator won’t misuse or sell my data?

How can I be sure MyOperator won’t misuse or sell my data?

⚡Quick answer -

MyOperator never sells your data. Access is strictly role-based, encrypted, audited, and covered by our ISO 27001 programme. You can self-serve or request export/deletion at any time.

When should I use this guide?

• You’re performing vendor security due diligence (GDPR- or CCPA-related).

• You need to export, delete or review data stored in MyOperator.

📕Table of Contents

  1. Commitments at a glance
  2. How we secure your data
  3. What we never do with your data
  4. Your rights: view, export, delete
  5. Workflow diagram
  6. Data retention & deletion timelines
  7. Flip-side: when data may be disclosed
  8. Related Articles

1. Commitments at a glance

Topic

Our Practice

Data misuse

Never sold, shared, or used for ads.

Encryption

TLS 1.2+ in transit; AES-256 at rest.

ISO certification

ISO/IEC 27001:2013 certified ISMS.

Access control

Least-privilege RBAC + MFA; all actions logged.

Transparency

Self-serve or assisted export/delete 24×7.

Back to top ⬆️

2. How we secure your data

• Secure AWS infrastructure (VPC isolation, security groups, managed WAF).

• Centralised logging, automated anomaly alerts.

• Annual third-party pen-tests; quarterly vulnerability scans.

• Personnel controls: background checks, mandatory security training.

Back to top ⬆️

3. What we never do with your data

  1. Sell or rent it to advertisers or data brokers.
  2. Use it for marketing without explicit consent.
  3. Retain it beyond the period required for service delivery or the law.

Back to top ⬆️

4. Your rights: view, export, delete

Option A – Self-serve (dashboard)

  1. Navigate to Settings → Data & Privacy.
  2. Choose Export or Delete.
  3. Define scope (account, user, phone number, date range).
  4. Confirm via the MFA prompt.
  5. You receive an email when the job is complete.

Option B – Email request (copy-paste template)

To: support@myoperator.com
Subject: Data <Export/Delete> Request –

Scope: <account/user/number/timeframe>
Legal basis: Customer request
Requester: <Name, Role, Email, Phone>
I acknowledge identity verification may be required.

Service-level target: acknowledgement within 1 business day; fulfilment inside statutory timelines (≤ 30 days for GDPR).

Back to top ⬆️

5. Workflow diagram

image.png

Alt text: End-to-end flow for export or deletion requests

Back to top ⬆️

6. Data retention & deletion timelines

Data type

Default retention

Deletion on request?

Backup purge

Call logs

365 days

Yes

≤ 30 days

Recordings

90 days

Yes

≤ 30 days

Billing data

7 years (legal)

No

N/A

Success confirmation: email + audit-log entry.

Back to top ⬆️

7. Flip-side: when data may be disclosed

We will refuse or delay deletion/export if:

  • A legal hold or court order requires preservation.
  • Billing data is needed for statutory retention.
  • The requester cannot pass identity verification.

Back to top ⬆️

8. Related Articles

• What happens if MyOperator receives a government data request?

• How do I configure regional data residency in MyOperator?

• How to enable Multi-Factor Authentication for all agents

Keywords: MyOperator security, GDPR export, data deletion, ISO 27001, TLS encryption

    • Related Articles

    • Data storage policy

      Last verified: July 25, 2025 Applies to: Active MyOperator accounts unless superseded by contract or law. MyOperator retains different kinds of account data for 6 months to 3 years. Recent data (≤ 6 months) stays on primary storage for fast dashboard ...

    • For how long will my data be saved on MyOperator servers?

      ⚡Quick answer: During your active subscription, recent call data remains live and directly accessible in the MyOperator panel for the last 6 months. Older data is moved to an archive for long‑term retention and is available via export on request. ...

    • Where can I access my archived data?

      ⚡Quick answer - Use Reports → Export to download archived logs/notes/users as CSV via email. Use Logs → Advanced/Criteria to filter for archived items and Unarchive if needed. For granular investigation, open Logs and click any row to view the ...

    • Why do callers hear “wrong number/number doesn’t exist” on my MyOperator business line—and how do I fix it?

      ⚡ Quick answer - If you forward a personal SIM/landline to MyOperator, confirm the forwarding target matches the Virtual/Service Number shown in Dashboard → Numbers. If you don’t use forwarding, make sure the number, plan, and KYC status are Active ...

    • When is variable mapping required in MyOperator?

      ⚡Quick answer - Variable mapping appears only when your selected WhatsApp template contains placeholders such as {{1}}, {{2}}. If the template has no variables, the mapping step is skipped and you proceed straight to contact upload. When should I use ...