Phantom Privacy Policy

Privacy Policy

Movius is committed to maintaining your privacy. We believe that you are entitled to know how Movius will collect, use and protect the personal information you give us. This policy describes how we collect and may disclose personal information, including the following: what personal information we collect from you, how we use your information, how long we maintain your information, when and to whom we disclose your information, how we restrict our use of your information for marketing purposes, and how we protect your rights concerning your information and its disclosure.

Phantom, is a software solution owned and operated by Movius Interactive Corporation that is available through mobile and web applications. Phantom may be made available to enterprise customers either directly by Movius or through an authorized reseller. Enterprise customers make Phantom available to their authorized users, including employees and other personnel. When you access or use Phantom, you may provide personal information directly to Movius and Movius may also collect personal information through the use of Phantom.

Unless applicable laws or regulations (such as GDPR for residents of the EU) require you to contact another person or legal entity (such as your service administrator under GDPR), if you have any questions or concerns regarding these policies, please contact dpo@moviuscorp.com.

SCOPE

What personal information we collect from you.
What personal information we do NOT collect.
What personal information our vendors collect.
What organizations collect the information.
How the information is used.
With whom the information may be shared.
How long information is retained.
What choices are available to you regarding how we collect, use, and distribute the information.
What security procedures are in place to protect information under Movius’ control.
How you can correct any inaccuracies in the information.

TREATMENT OF INFORMATION

Information Collected When We Provide You With Services

Movius collects certain information from you in connection with providing you with services via a mobile and web application. Movius is authorized to collect the personal information that we need to provide and support the services, including diagnostic information to resolve issues with your use of the Movius services. Movius will collect and use personal information only for the purposes described in this Privacy Policy or as otherwise permitted or required by applicable law.

When you establish an account for Phantom, Movius collects only the minimal information necessary to establish and service your account. Movius collects your:

first and last name
email address

If you are provisioned through an enterprise reseller, your enterprise may provide account information to Movius for service administration.

When you first request your services, and when you request any changes or updates to your services, Movius may collect information about the service options that you have chosen. Movius may also collect your personal information when you communicate with us: for example, if you ask for support or maintenance, send us e-mails, respond to our surveys or e-mails, engage in chat sessions with us, register for information, or participate in promotions or contests.

How We Use and Disclose Your Information

Movius considers the personal information contained in our business records to be confidential. However, Movius is authorized to disclose your personal information for two general purposes:

First, we may use or disclose personal information as required by law or legal process to disclose information to law enforcement personnel or to other parties in connection with litigation (as described below in this Privacy Policy). Second, we may use or disclose personal information as reasonably necessary to provide your services. For example, Movius may use your personal information to install, configure, operate, support, and maintain your services, including but not limited to these purposes:

provide your services;
customize your services;
configure service-related devices;
account security;
to provide customer service and support;
manage the network supporting your services;
make you aware of new products or services that may be of interest to you;
service improvements;
detect use or abuse of your services; and
compliance with policies or terms of service.

We may disclose your personal information to our affiliates, to our employees for Movius’ internal business purposes, as well as to outside auditors, professional advisors and service providers, potential business transition partners, and regulators. We make these disclosures only when the disclosure is necessary to provide your services or other services to you or to conduct a legitimate business activity related to them.

Information Collected on Use of Your Services

When you use Phantom, Movius may transmit technical information over our network in order to provide, operate, secure and support the services, such as:

Connection and presence information: the private overlay address assigned to your device, connection attempts, and periodic presence signals used to locate your device and route calls to it.
Call and message signaling: when a call or message needs to wake your device, we record that a notification was requested, the type of notification (call or message), the Phantom identity of the caller, your device type, and push token material. A Phantom identity is an identifier generated by the app rather than your name or telephone number, but it does identify your Phantom account. This signaling metadata is therefore associated with your account and is not anonymous.
Network addresses: your device’s public IP address is used by the tunnel software to maintain the active connection and is visible in the live state of that connection. It is not retained as a browsing history or connection history.
Device type and app version: used to operate and support the service.

Phantom is end-to-end encrypted peer-to-peer and therefore Movius cannot listen to or view your outgoing or incoming calls or messages, and does not store the content of your communications. If an enterprise customer specifically requires records of conversations, Phantom is then transitioned to a specific governed mode and information is collected/stored to meet that enterprise’s customers’ regulatory requirements. This governed mode is not enabled by default. We may store information about the date and time of diagnostic events for compliance purposes. We could be required to disclose this information along with other personal information about you to comply with law enforcement or legal process.

We may also monitor and/or record the performance of our Services, or perform diagnostics, to manage, maintain, repair, and improve your services. For the purposes of training and/or quality assurance, as permitted by applicable law, we may monitor and record your communications with Movius employees when you contact support.

Third-Party Service Providers

We may contract with third parties and independent contractors to provide specific services and features for Phantom.

Push notification providers: To make your device ring when a call arrives, Phantom relies on Apple Push Notification service, including PushKit VoIP pushes, and on Google Firebase Cloud Messaging. These providers receive only what is needed to wake your device: your device’s push token, the type of notification (call or message), and the Phantom identity of the caller. They do not receive call audio, message content, media, or any traffic carried over the VPN tunnel. Their handling of that information is governed by Apple’s and Google’s own privacy policies.
To the extent that these third parties process personal information on behalf of Movius, they will collect, disclose, and protect your personal information in accordance with their contractual obligations to Movius and applicable law. If, however, you become a direct customer of these third parties, then you will be subject to their terms of service and privacy policies. Movius recommends that you carefully read their terms of service and policies to understand how they may use personal information about you.

Business Transitions

In the event Movius (or any of its affiliates) is involved in a merger, acquisition, or sale of all or a portion of our assets, we may transfer information as part of the transaction. If, as a result of the business transition, the Privacy Policy is changed, you can find those changes in the places indicated in the ‘Notification of Changes to this Policy’ section below.

Software and Configuration

Movius may use information that you provide to assist you with technical support, by collecting and maintaining your information in support software tools and diagnostic tools. The information collected in the support and diagnostic tools is available only to authorized personnel and service providers as necessary for maintaining and supporting the use of your services. Movius may also provide customer contact and support pages that you can use to communicate with Movius about technical support. Movius uses the information provided by you on these pages to support your use of your services.

Preferences

We may store information that you provide to personalize your settings so that you do not have to change these settings each time you use Phantom. We do not share your preferences with third parties except for service providers or other third parties who may provide certain components of your services.

Cookies

Phantom does not use cookies to track personal information.

Legal Disclaimer

We make every reasonable effort to protect customer and subscriber privacy as described in this Privacy Policy. Nevertheless, we may be required by law to disclose personal information about a customer or subscriber without consent and without notice to comply with a valid legal process such as a subpoena, court order, or search warrant. We may also use or disclose personal information about you without your consent to protect our customers, employees, or property, in emergency situations, to enforce our rights in court or elsewhere, or directly with you, and for violations of the Service’s terms of service and policies.

COMMUNICATIONS FROM MOVIUS

Service Announcements

We send subscribers service-related announcements from time to time. For example, we may send you an e-mail announcement about a pricing change, a change in operating policies, or new features of Phantom. You may not opt out of these service-related communications as they are necessary to provide the services.

Customer Service

We communicate with you to provide requested services and support for questions and issues relating to your account. We will reply to your requests for customer service by e-mail, phone, discussion forum, or through any other reasonable means.

SECURITY

Movius takes the security of our customers’ and subscribers’ personal information seriously. We maintain reasonable administrative, technical, and organizational safeguards designed to protect your personal information from unauthorized access, use or disclosure. Phantom communications are protected with end-to-end encryption for peer-to-peer sessions. Traffic between your device and the Movius connection hub is carried inside an encrypted VPN tunnel, and operational logs are accessible only to authorized Movius personnel. However, no security measures can guarantee absolute security or prevent every unauthorized attempt to access, use, or disclose personal information.

CORRECTING AND ACCESSING INFORMATION

Unless applicable laws or regulations (such as GDPR) require you to contact another person or legal entity (such as your service administrator under GDPR), if your personal information changes, you may update the records by contacting dpo@moviuscorp.com.

You may contact us at dpo@moviuscorp.com to find out what personal information Movius has collected about you or if you wish to delete personal information collected, stored, and used in connection with Movius’ website. To ensure that our records are accurate, you may examine and copy personal information we collect and maintain relating to you upon reasonable notice during regular business hours. If you wish to inspect those records, please contact us by email at dpo@moviuscorp.com, to arrange an appointment (or, if applicable laws or regulations (such as GDPR) require you to contact another person or legal entity (such as your service administrator under GDPR), please contact such person or legal entity in accordance with such laws or regulations). We will need a reasonable period (usually not more than 45 days) to locate and, if necessary, prepare the information for your review. You will only be permitted to examine records that contain information about you and no one else. Please note that, unless otherwise required by applicable laws or regulations, we may be unable to provide you with records without a subpoena, court order, or search warrant. If allowed under applicable laws and regulations, Movius reserves the right to charge a fee to produce any documents that you request. Also, Movius will provide such information no more than twice per year, unless required by applicable laws or regulations to provide more often.

We will correct our records on a going-forward basis when the personal information we have collected about you is inaccurate. Please note, it is not possible for us to correct information appearing in our or our vendors’ directory lists until the next available publication of those directory lists. Further, we may have no control over information appearing in the directory lists or directory assistance services of directory publishers or directory assistance providers not affiliated with Movius.

If you exercise any of your rights under this section, Movius will not discriminate against you in connection with any goods or services routinely sold by Movius to individuals like you.

RETENTION OF INFORMATION

Movius maintains your personal information in our regular business records while you are a customer or subscriber of Phantom. Because Phantom does not require personal contacts or phone numbers, the personal information retained by Movius is limited to minimal technical and support data. Operational logs generated by the Phantom connection service, described above under “Information Collected on Use of Your Services”, are rotated and retained for approximately seven days. We may also maintain this information for a period after you are no longer a customer or subscriber if the information is necessary for the purposes for which it was collected or to satisfy legal requirements. These purposes typically include business, legal, or tax purposes. If there are no pending requests, orders, or court orders for access to this personal information, we may destroy the information after it is no longer necessary for the purposes for which it was collected. If required by applicable laws or regulations, Movius will delete your personal information from our databases when you request deletion by contacting us at dpo@moviuscorp.com. Please note that we may be unable to provide the Movius services to you after the deletion of your personal information from our databases. Also, please note that any information that we have obtained about you may remain in backup storage for some period of time after a deletion request or after a retention period has expired. This may be the case even though we will not use or access such information. Any data we are required to retain for legal, regulatory or security purposes will not be deleted and retained in accordance with applicable law.

LINKS FROM MOVIUS’ WEBSITE

If you access and utilize Movius’ website at https://movius.ai and https://moviusgov.ai, the website may contain links to other websites. Some of these websites may be co-branded with Movius and may look like part of the Movius website, but Movius is not responsible for the privacy practices of these other sites. We encourage you to be aware that the privacy policies described here do not apply when you leave the Movius website and we recommend that you read the privacy policies of every website that collects personal information about you, whether the site is co-branded with Movius or not.

NOTIFICATION OF CHANGES TO THIS POLICY

If we change this Privacy Policy, we will post those changes on https://movius.ai/phantom-privacy-policy/ or in other places we deem appropriate, so that you can be aware of what information we collect, how we use it, and under what circumstances, if any, we disclose it. If you decide to continue receiving your services after we make any changes to this Privacy Policy, you shall be deemed to have given express consent to the changes in the revised policy.