Privacy Policy
Last updated: January 2, 2026
On this page
This Privacy Policy explains how Cosmo Suite LLC ("Company", "we", "us", or "our") collects, uses, discloses, and protects your personal information when you use Sonafone ("Service"), our cloud-based VoIP calling platform.
By using Sonafone, you consent to the practices described in this Privacy Policy. If you do not agree with this policy, please do not use our Service.
Information We Collect
We collect various types of information to provide and improve our Service.
Information You Provide
| Category | Data Collected | Purpose |
|---|---|---|
| Account Information | Name, email address, phone number, password | Account creation, authentication, communication |
| Payment Information | Payment card details, billing address | Processing payments via Stripe |
| Profile Information | Profile picture, display name, preferences | Personalization and user experience |
| Contact Data | Contacts you add to your address book | Enable quick dialing features |
| Communication Data | Support tickets, feedback, correspondence | Customer service and product improvement |
Information Collected Automatically
| Category | Data Collected | Purpose |
|---|---|---|
| Call Metadata | Call duration, timestamps, destination numbers, caller ID used, call status | Service delivery, billing, quality assurance |
| Device Information | Browser type, operating system, device identifiers | Service optimization, security |
| Usage Data | Features accessed, pages visited, interactions | Product improvement, analytics |
| Log Data | IP addresses, access times, error logs | Security, troubleshooting, fraud prevention |
| Browser Fingerprint | Device characteristics for identification | Fraud prevention, trial abuse prevention |
Call Recording Data
If you use our call recording feature:
- Audio recordings of your calls
- Recording metadata (duration, participants, timestamps)
- Transcriptions (if applicable)
Important: You are responsible for obtaining consent from all parties before recording calls. Please review our Call Recording Disclosure for details.
Third-Party Information
We may receive information about you from third parties, including:
- Authentication providers (Google OAuth) when you sign in
- Payment processors (Stripe) regarding payment status
- Twilio regarding call delivery status
How We Use Your Information
We use the information we collect for the following purposes:
Service Delivery
- Provide, maintain, and improve our VoIP calling service
- Process and complete transactions
- Manage your account and subscriptions
- Enable call recording and playback features
- Facilitate workspace collaboration
Communication
- Send transactional emails (receipts, password resets, account notifications)
- Respond to support inquiries
- Send service updates and security alerts
- Marketing communications (with your consent)
Security and Fraud Prevention
- Detect, prevent, and address fraud and abuse
- Verify account ownership and prevent unauthorized access
- Monitor for suspicious activity
- Enforce our Terms of Service and Acceptable Use Policy
Legal and Compliance
- Comply with legal obligations
- Respond to lawful requests from authorities
- Protect our rights and property
- Maintain records as required by telecommunications regulations
Analytics and Improvement
- Analyze usage patterns to improve our Service
- Develop new features and functionality
- Conduct research and analysis
- Generate aggregated, non-identifying analytics
How We Share Your Information
We do not sell your personal information. We may share your information in the following circumstances:
Service Providers
We share information with third-party service providers who assist us in operating our Service:
| Provider | Purpose | Data Shared |
|---|---|---|
| Twilio | Voice calling infrastructure | Phone numbers, call metadata, caller ID |
| Stripe | Payment processing | Payment details, billing address |
| Sentry | Error monitoring | Technical logs, device information |
| Resend | Email delivery | Email address, email content |
| Neon | Database hosting | All account and call data |
| Upstash | Caching and rate limiting | Usage patterns, session data |
| Vercel | Application hosting | Access logs, request data |
Twilio Data Processing
Our calling service is powered by Twilio. When you make calls through Sonafone, certain data is processed by Twilio in accordance with:
Legal Requirements
We may disclose your information if required by law or in response to:
- Valid legal process (subpoenas, court orders, warrants)
- Requests from law enforcement or government agencies
- Protection of our rights, property, or safety
- Protection of users or the public from harm
Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity. We will notify you of any such change.
With Your Consent
We may share your information for other purposes with your explicit consent.
Data Retention
We retain your information for as long as necessary to provide our Service and fulfill the purposes described in this policy.
| Data Type | Retention Period |
|---|---|
| Account information | Until account deletion + 30 days |
| Call records and metadata | 7 years (regulatory requirement) |
| Call recordings | 90 days (or until manually deleted) |
| Payment records | 7 years (tax and legal requirements) |
| Usage logs | 90 days |
| Support communications | 3 years |
After the retention period, data is securely deleted or anonymized.
Deletion Requests
You may request deletion of your data at any time by contacting support@sonafone.com. Note that:
- Certain data may be retained for legal compliance
- Aggregated or anonymized data may be retained indefinitely
- Backups may take up to 30 days to fully purge
Data Security
We implement appropriate technical and organizational measures to protect your information:
Technical Safeguards
- Encryption: Data encrypted in transit (TLS 1.3) and at rest (AES-256)
- Access Controls: Role-based access controls for internal systems
- Authentication: Multi-factor authentication for administrative access
- Monitoring: 24/7 security monitoring and intrusion detection
- Secure Infrastructure: Hosted on enterprise-grade cloud platforms
Organizational Safeguards
- Employee training on data protection
- Incident response procedures
- Regular security assessments
- Vendor security reviews
Despite our efforts, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security of your data.
Your Privacy Rights
General Rights
All users have the right to:
- Access: Request a copy of your personal information
- Correction: Request correction of inaccurate information
- Deletion: Request deletion of your personal information
- Portability: Receive your data in a portable format
- Opt-Out: Unsubscribe from marketing communications
California Residents (CCPA Rights)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):
Right to Know
You can request information about:
- Categories of personal information collected
- Sources of personal information
- Purposes for collecting information
- Categories of third parties we share information with
- Specific pieces of personal information collected
Right to Delete
You can request deletion of personal information we have collected, subject to certain exceptions.
Right to Opt-Out of Sale
We do not sell your personal information. However, you have the right to opt-out of any future sale.
Right to Non-Discrimination
We will not discriminate against you for exercising your CCPA rights.
How to Exercise CCPA Rights
To exercise your rights, contact us at:
- Email: support@sonafone.com
- Write to us at the address below
We will verify your identity before processing your request. You may designate an authorized agent to make requests on your behalf.
Response Timeline
We will respond to verifiable requests within:
- 45 days for CCPA requests (extendable by 45 days with notice)
- 30 days for other requests
Cookies and Tracking Technologies
We use cookies and similar technologies to operate our Service.
Types of Cookies
| Type | Purpose | Duration |
|---|---|---|
| Essential | Authentication, security, preferences | Session/Persistent |
| Functional | Remember settings, improve experience | Persistent |
| Analytics | Understand usage patterns | Persistent |
Browser Fingerprinting
We use FingerprintJS to generate browser fingerprints for:
- Preventing trial abuse
- Detecting fraudulent activity
- Enhancing account security
This technology collects device characteristics (screen size, browser plugins, timezone, etc.) to create a unique identifier without storing cookies.
Managing Cookies
You can control cookies through your browser settings. Note that disabling certain cookies may affect Service functionality.
For more details, see our Cookie Policy.
Children's Privacy
Sonafone is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately at support@sonafone.com.
International Data Transfers
Our Service is operated in the United States. If you access our Service from outside the United States, your information may be transferred to, stored, and processed in the United States where data protection laws may differ from your jurisdiction.
By using our Service, you consent to the transfer of your information to the United States.
Third-Party Links
Our Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.
Customer Proprietary Network Information (CPNI)
As a telecommunications service, we are subject to FCC regulations regarding Customer Proprietary Network Information. Please review our CPNI Policy for information about how we handle your call data.
Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be effective when posted, and we will update the "Last updated" date.
For material changes, we will notify you by:
- Email to your registered address
- Prominent notice on our website
- In-app notification
Your continued use of the Service after changes become effective constitutes acceptance of the updated policy.
Contact Us
If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us:
Cosmo Suite LLC 525 Randall Ave #245 Cheyenne, WY
Email: support@sonafone.com Website: sonafone.com
For privacy-specific inquiries: support@sonafone.com (Subject: Privacy Inquiry)
Last updated: January 2, 2026