Regulatory issues and security concerns are realities for all companies today. Protecting data – yours, as well as the data belonging to your customers – is of the utmost importance to ESI. (For ePhone GO 2™ privacy policy click here.)
ESI's data centers are designed to keep your data safe.
ESI data centers are designed to adhere to domestic and international compliancy and environmental standards. Annual audits verify our compliance.
The Payment Card Industry Data Security Standard (PCI DSS) is a proprietary information security standard administered by the PCI Security Standards Council, which was founded by American Express, Discover Financial Services, JCB International, MasterCard Worldwide and Visa Inc.
PCI DSS applies to all entities that store, process, or transmit cardholder data (CHD) or sensitive authentication data (SAD), including merchants, processors, acquirers, issuers, and service providers. The PCI DSS is mandated by the card brands and administered by the Payment Card Industry Security Standards Council.
We adhere to Google OAuth API Scopes to safeguard your data. Our requests for access are limited to Google-approved application types, and any data we collect is solely for the purpose of enhancing your user experience and improving our features. Your data is not shared without your explicit consent, except when necessary for security, legal compliance, or during company transitions, with your prior approval. Your data is only accessed by humans when required for security or legal reasons or with your explicit permission. We do not sell or misuse your data for advertising, credit assessment, or lending purposes. Our team is dedicated to upholding these principles and maintains robust security measures, including annual security assessments. Your data security is our top priority.
Any use and sharing of information obtained from Google APIs to other applications are subject to Google API Services User Data Policy, including the Limited Use requirements.
Payment Card Industry Data Security Standard is a requirement designed to protect cardholder data and the environments in which cardholder data is stored, processed or transmitted. ESI’s managed hosting and colocation services are in compliance with the latest PCI DSS standards and are certified annually by a PCI Quality Assessor.
The Health Insurance Portability and Accountability Act instituted regulations protecting the privacy and security of certain health information. ESI provides a HIPAA-compliant environment for our customers.
ESI’s SOC 2 Type II reports not only confirm that ESI’s data center security and operational procedures have been reviewed and tested by an independently certified auditor, but they also validate that our facilities’ controls and processes are designed to safeguard our customers’ data.
ESI's hosted virtual fax services can be encrypted to ensure all faxes are secure, assisting end-users with their security requirements such as HIPAA. Email- to-Fax, Fax-to-Email, PC-to-Fax, Web-to-Fax and Fax-to-Fax are all TLS encrypted. For end- users without TLS enabled mail services, SSL fax is available that enables end-users to securely download any fax they receive via the portal.
ENERGY STAR is a joint program of the U.S. Environmental Protection Agency (EPA) and the U.S. Department of Energy. Founded in 1992 for the purpose of saving money and protecting the environment through energy-efficient products and practices, the ENERGY STAR label is now on major appliances, office equipment, lighting, home electronics and more. ESI’s Dallas data center in Plano, TX and New York/New Jersey data center in Secaucus, NJ, both achieved the ENERGY STAR rating.
Leadership in Energy and Environmental Design is a building rating achievement given to facilities that meet the standards of the U.S. Green Building Council. ESI’s facilities are LEED Accredited Professional. ESI’s New York/New Jersey facility in Secaucus, NJ is LEED Platinum certified and our Dallas facility is LEED Gold certified.
Payment Card Industry Data Security Standard is a requirement designed to protect cardholder data and the environments in which cardholder data is stored, processed or transmitted. ESI’s managed hosting and colocation services are in compliance with the latest PCI DSS standards and are certified annually by a PCI Quality Assessor.
Company is very concerned for the privacy of the users of our products. To this extent, no user information is collected except when necessary for using a specific feature of our products (Apple Push Notification Service, Firebase Cloud Messaging) and is never shared with any third parties. The only time information is requested other than listed here is for use in troubleshooting technical issues and of course, the user has the option to refuse in that case (though that may negatively affect our ability to resolve any issues).
This privacy policy contains the full list of features built into the Application that in any way process users’ private information. Whether a feature is enabled or not, and thus whether the private information required for the feature to work is accessed, depends solely on the SIP account configuration in the Application.
In order for Push Notifications to work, we must register your account remotely when the Application is in the background or closed on your iOS or Android device. To accomplish this, we transmit your SIP account details to SIPIS (our server that handles push notifications) over a https – secure connection. This information is shared with no one and is erased immediately when the push instance expires (usually within 3-6 days, depending on SIP account configuration) or the user disables Push Notifications in the Application. If the SIP account is configured to use one of our methods for multitasking instead of Push Notifications, this information is not sent to SIPIS.
This part of the privacy statement describes how the Company collects and uses the contact information you provide by granting the contacts access permission
in the Application. It also describes the choices available to you regarding our use of your information and how you can access and update this information.
We access the following personal information from your address book:
We use this information to:
We will only use your Contacts information for the specific reason for which it was provided to us.
This part of the privacy statement describes how the Company uses the location information you provide by granting the Location access permission in the Application.
We ask the location access permission only if the SIP account is configured to do so, and only in the following use cases:
We will only use your Location information for the specific reason for which it was provided to us.
This part of the privacy statement describes how the Company uses media files and documents shared with the Application. Depending on the operating system, you may need to grant additional file access related permissions to the Application in order for the Application to access files.
We process your files such as photos, videos, documents; only if the SIP account is configured to do so, and only in the following use cases:
We will only use your files for the specific reason for which they were provided to us.
The Company may collect aggregate data that no longer identifies individual users for purposes of usage and performance analysis. This may include diagnostic data such as login counts, screen view counts or crash information.
For the sole purpose of troubleshooting, the Company might ask users to provide debug logs from the Application. The debug logs contain full network traffic information for application provisioning, calls, messaging and other network in-app events generated by user activity.
We maintain your personal information in our regular business records while you are a customer of your Service. We may also maintain this information for a period of time after you are no longer a customer if the information is necessary for the purposes for which it was collected or to satisfy our legal requirements and/or obligations. These purposes typically include business, legal, or tax purposes. If there are no pending requests, orders, or court orders for access to this personal information, we may destroy the information once it becomes unnecessary to those purposes for which it was collected.
The security of personal information is important to us. We take commercially reasonable measures and follow generally accepted standards to protect the information you provide us, both during transmission and once we receive it. For example, the information you provide is transmitted via encryption using technologies such as secure socket layer technology (SSL).
We do not share or sell your personal information to third parties.
We disclose information only in the following cases: as required by law, such as to comply with a subpoena or similar legal process when we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, to investigate fraud, or to respond to a government request if we are involved in a merger, acquisition, or sale of all or a portion of its assets, you will be notified via email and/or a prominent notice through our app of any change in ownership or uses of your personal information, as well as any choices you may have regarding your personal information to any other third party with your prior consent to do so.
We may update this privacy statement to reflect changes to our business or this app as it pertains to the information collected from you and our use of it. If the change impacts how we use or handle information collected from you, we will email you and/or your company’s Google administrator, or post a notice where you first access this app prior to the change becoming effective. We encourage you to periodically review this page for the latest information on our privacy practices.
As a user, you can request the following:
Company support will respond to requests in a timely manner (within 30 days of request).
Company support might ask you for further information, such as username or a phone number, in order to determine what information has been collected about you.
If you have any questions or concerns about our privacy policy, please contact us at support@esi-estech.com.
0455-0044 Rev. B (last updated in September 2022.)
Estech Systems, Inc (ESI)
3701 E. Plano Parkway, Ste. 300
Plano, TX 75074-1819
P: 972-422-9700 | F: 972-422-9705