Privacy Policy
This policy describes how MissCall (operated by IP Beauty s.r.o.) processes personal data. Compliance: GDPR (EU 2016/679) and Czech Act 110/2019 Coll. Last updated: 5 May 2026.
1. Data Controller
IP Beauty s.r.o., Vítězná 462, 272 01 Kladno, Czech Republic. Company ID: 24157406. Contact: misscall@ipbeauty.cz
2. What Data We Collect
2.1 From the user (account)
- Email address (for login, account recovery, billing)
- Phone number(s) of devices managed under your account
- Templates of SMS texts that you create
- Schedule and rule configurations
- Billing information (for paid subscriptions)
2.2 From callers (third parties)
- Phone numbers of incoming callers (only when the call is missed)
- Date and time of missed call
- Which template was sent in response
We do NOT store the body of sent messages — only the template ID. Templates themselves are stored under the user's account.
3. Legal Basis for Processing
- Account data: Contract performance (GDPR Art. 6/1/b)
- Caller phone numbers: Legitimate interest (GDPR Art. 6/1/f) — operating the SMS reply service for the account holder
- Billing: Legal obligation (GDPR Art. 6/1/c — Czech accounting law)
- Audit logs: Legitimate interest (Art. 6/1/f) — fraud prevention, EU-only enforcement
4. Geographic Scope of Data Processing
EU-Only Service
MissCall is provided exclusively to users located in the European Union. All data processing activities are designed to comply with:
- General Data Protection Regulation (EU) 2016/679 (GDPR)
- Czech Act No. 110/2019 Coll. on Personal Data Processing
We do NOT process personal data in compliance with non-EU regulations including:
- California Consumer Privacy Act (CCPA)
- Brazilian Lei Geral de Proteção de Dados (LGPD)
- China Personal Information Protection Law (PIPL)
- Any other non-EU data protection regulation
If you are located outside the EU and have provided personal data through this service (in violation of our Terms of Service), please contact us immediately at misscall@ipbeauty.cz to request deletion.
5. Data Hosting Locations
All personal data is processed and stored exclusively within the European Union:
- Primary servers: Czech Republic (Prague — Wedos) and Germany (Frankfurt — Firebase europe-west3)
- Backup servers: Germany (Frankfurt)
- No data is transferred to third countries
6. Data Retention
| Data type | Retention period |
|---|---|
| Phone numbers of callers | 90 days, then auto-deleted |
| User account data | Until account deletion + 30 days |
| SMS history (metadata) | Until account deletion + 30 days |
| Audit logs (registration attempts) | 12 months |
| Billing data | 10 years (Czech accounting law obligation) |
7. Security Measures
- AES-256 encryption at rest
- TLS 1.3 in transit
- Firebase Authentication (email + password, BCrypt hashing)
- Regular security audits
- Access controls (only authorized personnel)
8. Your Rights (GDPR)
You have the right to:
- Access your personal data (Art. 15)
- Rectify inaccurate data (Art. 16)
- Erase your data ("right to be forgotten", Art. 17)
- Restrict processing (Art. 18)
- Data portability (Art. 20)
- Object to processing (Art. 21)
- Lodge a complaint with the supervisory authority (Czech Office for Personal Data Protection — uoou.gov.cz)
To exercise these rights, email misscall@ipbeauty.cz. We respond within 30 days as required by GDPR.
9. Third-Party Processors
- Google Firebase (Frankfurt) — authentication, database. DPA in place.
- Wedos.cz (Prague) — web hosting. DPA in place.
- Creem.io (EU-based) — payment processing. PCI-DSS compliant.
- ip-api.com — IP geolocation (only IP address, no personal data persistence).
10. Cookies
See our Cookie Policy for details on cookies and similar technologies.
11. Changes to This Policy
Material changes will be communicated via email at least 30 days before they take effect.
12. Contact
IP Beauty s.r.o.
Vítězná 462, 272 01 Kladno, Czech Republic
Email: misscall@ipbeauty.cz