UvioCallPrivacy Policy
Last updated 8 November 2026. This is the privacy policy for UvioCall only. It is separate from the policy for the Uvio camera app.
Who we are
UvioCall is operated by Verge Technologies Pty Ltd, an Australian company ("we", "us"). Contact us about privacy at support@uvio.au.
What UvioCall is
UvioCall is a video calling service. Hosts have an account and start calls. Guests join from a link with a name and nothing else. Guests do not need an account.
What we collect
Host accounts: your name, email address, organisation name, role, and a hashed password (we cannot read your password). We also keep the sign-in sessions on your devices (a device label and the time you last used it) and short-lived sign-in and reset codes. When you create an account yourself we also keep the date and version of the Terms of Use you accepted, and we send a welcome email once your email address is verified.
Sign-up protection: the sign-up form uses Cloudflare Turnstile to tell people from automated programs. Cloudflare receives your IP address and some browser details to do this. We do not store them, and we do not use Turnstile for advertising. We also refuse sign-ups from known disposable email addresses and limit how many sign-ups can come from one IP address in an hour.
Plans and minutes used: each account belongs to an organisation with a plan (Free, or a paid plan). We keep the minutes used each month, worked out from the time people were connected to calls, so we can apply plan limits and send you a notice and an email when you have used 75, 90 and 100 percent of your minutes. Monthly totals are kept even if a call is later deleted from the call log.
Payments: paid plans on our website are paid by card through Stripe, and plans and extra minutes bought in the iPhone, iPad or Android app are paid through the Apple App Store or Google Play. Your card details are entered on Stripe's page and never reach our servers. Stripe holds the billing name, email address, card details and invoices. For app purchases, Apple or Google holds your payment details and receipts; we receive only a purchase reference, the plan and its renewal or expiry date. We keep only the Stripe or store customer and subscription reference, the plan, the number of extra hosts and the renewal date.
Calls: the call link code, title, host name, and start and end times. For a guest we handle the display name they type, only while they wait or take part in the call.
Scheduled calls: when a host schedules a call we keep the title, date, time, time zone, any notes the host adds, and the email address of each person invited. We use the invitee email addresses only to send the invitation, calendar file and a reminder about 15 minutes before the call.
Call log: for each call we keep a log of the host's name, email address, organisation and IP address; each guest's display name and IP address; when each person joined and left, the length of the call and the most people on at once; and any star rating given when leaving a call. Guests do not need an account, and the name they type is not checked.
Address book: hosts and admins can save contacts (name, email address, and optionally mobile number, company and notes) to send invitations faster, or import and export them as a CSV file. These are details about other people that the host chooses to enter. An address book is private to the person who created it: other hosts, Admins and Super Admins cannot see it, and we do not use it for anything else.
Invitations from a call: a host can send a call link to an email address, or on paid plans to a mobile number, that they type in. We use the address or number only to send that one message. We do not keep it: we keep a one-way fingerprint of it (so the same address or number is not contacted again and again), the time, the call code and the sending account, and for texts whether the text was delivered, to apply the limits and investigate misuse.
Audio and video: your camera and microphone are sent to the other people in the call through our media server. We do not record calls. Audio and video are encrypted in transit and are not stored.
Technical data: our servers keep ordinary logs such as IP address, time, and the page or request, used to run and secure the service.
Website analytics: the public pages of our website (uviocall.au: home, features, pricing, FAQ, blog and similar) use Google Analytics to count visits and see which pages people read and how they found us. Google sets cookies and receives your IP address and details such as the pages you view, your browser, device and approximate location. It is not used on the sign-in, account or call pages, in call links, or inside the UvioCall apps. We do not use it for advertising, and we have turned off Google's advertising features. You can block it with your browser's privacy settings or Google's opt-out add-on.
We do not sell personal information and we do not use it for advertising.
Why we use it
To run calls, let hosts sign in and manage their organisation, send sign-in codes and invitations, apply plan limits, take and manage payments, keep the service secure, and respond to support requests. The call log lets a host's Admin and our Super Admins review call activity, investigate misuse and handle support and quality issues.
If you are a host, please make sure you have a proper reason to hold and use the contact details you save, and tell people if you keep their details.
Who else handles it
Hosting: our servers are in Sydney, Australia, hosted by Linode (Akamai).
Email: sign-in codes, password resets, invitations and reminders are sent through SendGrid (Twilio), which processes the recipient's email address, name and the message. SendGrid may process data outside Australia, including in the United States.
Payments: Stripe Payments Australia Pty Ltd and its related companies process payments and may process data outside Australia, including in the United States. Stripe's, Apple's and Google's privacy policies apply to the information they hold. We keep a record of each purchase of extra minutes (the organisation, the number of minutes, the amount and the date) so we can apply the minutes to your account.
Text messages: text invites are sent through Mobile Message (Australia), which receives the mobile number, the text and its sender name to deliver the message, and keeps its own delivery records under its privacy policy.
Website analytics: Google LLC and its related companies provide Google Analytics for the website pages described above and may process data outside Australia, including in the United States.
Sign-up check: Cloudflare, Inc. provides the Turnstile check described above and may process data outside Australia, including in the United States.
Calls travel between participants through our server and, where needed, a relay service we run ourselves. We may also disclose information when the law requires it.
How long we keep it
Account details are kept until you delete your account. Sign-in sessions expire after 90 days. Sign-in codes expire within minutes. Waiting-room details are held in memory only for as long as someone is waiting. Scheduled calls and your address book are kept until you delete them or your account is deleted. The record of the Terms you accepted is kept with your account. Billing records are kept by Stripe and by us for as long as tax and accounting law requires (currently seven years in Australia), even if you delete your account. The call log (including guest names and IP addresses) is kept until a Super Admin deletes it. It is not removed when an account is deleted, but you can ask us to delete the entries about you by emailing support@uvio.au.
Your choices and rights
You can change your name in Settings and delete your account there at any time. Deleting an organisation owner's account deletes the whole organisation, its hosts and its calls, scheduled calls and address books. You may also ask us to access or correct the personal information we hold about you, or to make a privacy complaint, by emailing support@uvio.au. In Australia you can also complain to the Office of the Australian Information Commissioner (oaic.gov.au). If you are in the European Economic Area or the United Kingdom, you have further rights, including access, correction, deletion and objection, and the right to complain to your local data protection authority.
The mobile app
The UvioCall app asks for camera, microphone and notification permissions so calls work. If you sign in on a phone, the app can ask for your face, fingerprint or screen lock before opening. That check is done by your phone, and we never receive your biometric data.
Children
UvioCall is for people aged 18 and over. It is not intended for children.
Health and regulated use
UvioCall is a general video calling service. It has not been independently certified or security-tested for clinical or other regulated use, so please do not use it for health care delivery that requires such certification.
Changes
If we change this policy we will update the date above and, for significant changes, tell hosts by email or in the app.
If your email address is in someone's address book or on an invitation and you do not want to receive invitations, tell the host or email us.