Skip to content

Privacy Policy

What personal data PacketExchange collects, why, who it is shared with, how long it is kept and the rights you have over it.

Last updated
24 October 2026
Version
2026-10-24
Applies to
Members, visitors and people whose calls we carry
Operated by
Minutes Network FZ-LLC

Who we are

Minutes Network FZ-LLC, registered in the Ras Al Khaimah free zone, United Arab Emirates (Licence No. 47016932), runs the PacketExchange platform (the “Platform”) and is the controller of personal data about account holders, their team members, website visitors and people who contact us. Our UK and EU contact is Minutes Network Limited, Leeds, United Kingdom (company no. 13955776).

When we carry calls and messages for a member, or store recordings, messages and contact lists for them, we act on that member’s behalf as their processor under our Data Processing Addendum. If your question is about how a member uses your data, for example a call you received from them, contact that member. We will help them respond.

For anything in this policy, contact support@packetexchange.io.

What we collect

Category
Account details
What it includes
Name, email address, company, phone number, country, profile photo, tax ID and tax country.
Where it comes from
You and your team
Category
Sign-in and security
What it includes
Your password (stored only as a one-way hash), two-factor settings, your Google account ID if you sign in with Google, sign-in times, IP addresses and browser details.
Where it comes from
You, your browser and Google
Category
Payments
What it includes
Top-ups, invoices and withdrawals, the wallet address or bank details you give for payouts, and blockchain transaction IDs. Our card payment processor collects card details; we keep only a reference to the card.
Where it comes from
You and our payment providers
Category
Call and message records
What it includes
Calling and called numbers, caller ID, times, duration, route, price, IP addresses, call signalling and call quality measurements.
Where it comes from
Created as traffic passes through the Platform
Category
Message content
What it includes
The text of SMS messages sent or received through the Platform.
Where it comes from
Members and the people they message
Category
Content members store
What it includes
Call recordings, voicemails, call menu prompts and audio files, dialer contact lists, do-not-call lists, AI agent instructions and rate sheets.
Where it comes from
Members
Category
Activity on the Platform
What it includes
API requests (endpoint, time, IP address and result) and account actions such as purchases, settings changes and approvals.
Where it comes from
Created as you use the Platform
Category
Communications
What it includes
Support requests, emails with us and status page subscriptions.
Where it comes from
You
Category
Product analytics
What it includes
Inside your account: the pages you open, how long you spend on each, the buttons and links you click (by their name, such as “Add funds”), forms you submit and whether any field was flagged, and errors you run into. Never anything you type.
Where it comes from
Your browser, as you use the Platform
Category
Website visits
What it includes
The pages you view, the site or campaign that sent you, your country (looked up from your IP address, which is not stored), your device type (computer, phone or tablet) and a code that changes every day, so we can count visitors without storing an identifier in your browser. If you allow Analytics, also a random visitor ID. If you sign up, the campaign that brought you is kept with your account.
Where it comes from
Your browser

How we use it

Purpose
Providing the Platform: running your account, carrying and billing traffic, storing your content and paying out earnings
Legal basis under the UK and EU GDPR
Performing our contract with you
Purpose
Protecting the Platform and the telephone network: detecting fraud, artificial traffic and account takeover, blocking abusive traffic and enforcing our policies
Legal basis under the UK and EU GDPR
Our legitimate interests, and those of other members and carriers, in security and fraud prevention
Purpose
Meeting legal obligations: tax and accounting records, sanctions rules, lawful requests from authorities and US voice compliance
Legal basis under the UK and EU GDPR
Legal obligation
Purpose
Communicating with you: service, billing and security emails, status updates you subscribe to and replies to support requests
Legal basis under the UK and EU GDPR
Performing our contract with you, or your consent for status subscriptions
Purpose
Improving the Platform: understanding how features are used, fixing faults and producing market statistics that identify no one
Legal basis under the UK and EU GDPR
Our legitimate interests in running and developing the Platform
Purpose
Product analytics: seeing where account holders get stuck, which pages are slow or confusing and which errors they hit, so we can fix them
Legal basis under the UK and EU GDPR
Our legitimate interests in running and improving the Platform; your consent, on public pages
Purpose
Measuring our website and marketing: counting visits, and seeing which pages and campaigns lead to signups
Legal basis under the UK and EU GDPR
Our legitimate interests, for counts that store nothing in your browser; your consent, for the Analytics visitor ID and for Advertising

We do not sell personal data. If you allow Advertising cookies, the ad platforms we use learn that you arrived from one of their ads and whether you then signed up, verified your email, created an API key, made a first API call or topped up (with the amount), so we can see which ads work. Without that permission nothing about you is shared with them. We do not use call audio, recordings or message content to train AI models.

Product analytics for account holders

To find out where the Platform is hard to use and what breaks, we record how people move through it. This is our own measurement, run on our own servers. No outside analytics company receives it, and no screen recording is made.

TopicWhat it means
What we recordThe pages you visit inside your account (with any account or record numbers in the address removed), how long you actively spend on each page and how far you scroll, the buttons, links and tabs you click by their visible name, forms you submit and how many fields were flagged as needing a fix, repeated clicks on something that did not respond, and errors you hit, such as a page that failed to load or a request the server refused (the error type and the page, never what was sent).
What we never recordAnything you type, the values in any form field, the text in search boxes, passwords, API keys and other credentials, the query string or anything after “#” in a web address, and the content of what you send or receive.
Browser storageA random session ID, the time of your last activity and a counter, kept in your browser’s session storage for the tab you are using. It is not a cookie and is cleared when you close the tab. A new session starts after 30 minutes of inactivity.
Public pagesOn our public website this runs only if you allow Analytics in the cookie banner. Inside your account it always runs, because it is part of operating the service. If your browser sends Global Privacy Control, public pages are never linked to your account.
Who sees itOur own staff only, to support you and to improve the Platform. It is not shared with advertisers or other members and not used for advertising.
How long we keep itThe detailed record of pages, clicks and errors for 90 days. A summary of each visit (when it started and ended, time spent, counts of clicks and errors, device type and country) for 13 months. After that only daily totals per page that identify no one are kept.
Legal basisOur legitimate interest in running and improving the service, balanced by recording no content and nothing you type. On public pages, your consent. You can object at any time by emailing the privacy contact below.

To object or to ask for a copy of what we hold, email support@packetexchange.io.

AI features

Some features use AI. When you use one, the content it needs is sent to an AI provider to produce the result:

  • AI voice agents. The live audio of the call is converted to text, answered by an AI model and converted back into speech.
  • Imports. Rate sheets and contact lists you upload are read by an AI model so they can be imported.
  • Assistants. The support assistant and the assistants in the dialer and the Switch read your questions and the account information needed to answer them.

None of these features makes decisions about you that have legal or similarly significant effects. Fraud and traffic controls can block calls or hold funds automatically, and a person reviews any suspension or withheld payout if you ask.

Who we share it with

  • Service providers that run parts of the Platform for us, under contracts that limit what they can do with the data. They are listed by category below.
  • Carriers and other members. The carriers and sellers that carry a call or message receive the numbers, caller ID and signalling needed to connect it. Buyers and sellers see the records of traffic between them. If you exchange details with another member through Connect, we share what you choose to share.
  • The caller ID testing network. When you run a caller ID test, the caller ID and route under test go to the testing network, and the handset holder there receives the test call.
  • Payment networks. Card payments go through our card payment processor. Cryptocurrency payments are recorded on public blockchains, where wallet addresses and amounts are visible to anyone and cannot be erased.
  • Authorities. Law enforcement, regulators and courts, where the law requires it, as described in our Law Enforcement Guidelines.
  • Professional advisers, such as lawyers and accountants, under a duty of confidentiality.
  • A buyer of our business, if the Platform is sold or merged, with the same protections in place.
Service
Data centre hosting
What it does
Runs the Platform’s servers and databases
Data involved
All data held on the Platform
Where
Germany
Service
Phone numbers and messaging
What it does
Provides phone numbers and carries the calls and SMS on them
Data involved
Phone numbers, call and message records, SMS content, and registration documents for numbers that need them
Where
European Union
Service
Speech processing
What it does
Turns speech into text and text into speech for AI voice agents
Data involved
Live call audio and the words spoken
Where
United States
Service
AI models
What it does
Powers AI voice agents and assistants, and reads uploaded rate sheets and contact lists
Data involved
Conversation text, questions and the content of uploaded files
Where
United States
Service
Email delivery
What it does
Sends account, billing, security, number activity and status emails
Data involved
Email addresses, names and the content of the emails
Where
United States
Service
Voice CLI Testing
What it does
Places test calls to real handsets and reports the caller ID received
Data involved
The caller ID and route under test
Where
Worldwide
Service
Card payments
What it does
Takes card payments and Switch subscriptions
Data involved
Name, email address, card and billing details, payment amounts
Where
United States and European Union
Service
Cryptocurrency payments
What it does
Settles stablecoin payments made by wallets and software agents
Data involved
Wallet addresses and payment amounts
Where
Public blockchain networks
Service
Sign in with Google
What it does
Lets you sign in with a Google account
Data involved
Name, email address, profile photo and Google account ID
Where
United States

Members can ask for the named list of providers at support@packetexchange.io.

Where your data is

The Platform’s servers and databases are in data centres in Germany. The company that runs the Platform is established in the United Arab Emirates, some of our providers, including our email, payment and AI providers, process data in the United States and other countries, and calls and messages cross carrier networks in the countries they connect. When personal data leaves the UK or the European Economic Area for a country without an adequacy decision, the United Arab Emirates included, we rely on the European Commission’s Standard Contractual Clauses, with the UK Addendum where relevant, or another transfer mechanism the law recognises.

How long we keep it

RecordHow long we keep it
Signalling traces for each call7 days, then deleted automatically
API request logs90 days, then deleted automatically
Call recordings and voicemailsThe period the member sets for each number (30 days by default), then deleted automatically
Call and message recordsWhile needed for billing, disputes, fraud prevention and legal obligations
SMS message contentWhile the member’s account is open, and after closure until deleted on request
Account detailsWhile the account is open. Name, email address, company, phone number and country are removed when it is closed
Financial recordsFor as long as tax and accounting law requires, including after the account is closed
Website visit statistics (page, referring site, campaign, country, device type)13 months, then only as daily totals that identify no one
Visitor ID records, if you allowed Analytics13 months after your last visit, then deleted automatically
Where an account came from (signup campaign, country and device type, and ad click IDs if you allowed it)For as long as the account record exists
Product analytics: the pages you opened in your account, time on each, buttons clicked and errors you hit90 days, then deleted automatically
Product analytics session summaries (start and end page, time spent, counts of clicks and errors, device type, country)13 months, then deleted automatically. Daily totals per page that identify no one are kept

Members can delete recordings, voicemails and contact lists from their dashboard at any time, and can set how long recordings are kept for each number.

Your rights

Depending on where you live, you can ask us to give you a copy of your personal data, correct it, delete it, restrict how we use it or transfer it to you in a portable format. You can also object to processing based on our legitimate interests, and withdraw consent where we rely on it.

  • Most account details can be changed in your settings, and call records can be exported from your dashboard.
  • You can close your account from your settings. We then remove your name, email address, company, phone number, country and two-factor settings, and keep only what the law, billing or an open dispute requires.
  • For anything else, email support@packetexchange.io from the address on your account. We reply within one month.

If you are in the UK or the EU, you can complain to your data protection authority. We would welcome the chance to resolve your concern first.

Security

  • Connections to the website, dashboard and API are encrypted with TLS.
  • Passwords are stored as bcrypt hashes and API keys as SHA-256 hashes, so neither can be read back.
  • Two-factor authentication is available on every account, and team members get only the permissions they are given.
  • Administrative access to production systems is limited to authorised staff and uses key-based authentication.

If a breach affects your personal data, we tell you and the relevant authorities as the law requires.

Cookies and browser storage

Necessary storage and your preferences are always used, because the site does not work without them. Analytics and Advertising storage is only set if you allow it in the cookie banner, and you can change your mind at any time: . Turning a category off deletes what it set on our site. The product analytics session ID is kept in session storage inside your account, and on public pages only with Analytics; see Product analytics for account holders.

Name
refreshToken
Type
Cookie, HTTP-only
Category
Necessary
Purpose
Keeps you signed in
How long
7 days, or until you sign out
Name
wmmn_token
Type
Local storage
Category
Necessary
Purpose
A 15-minute access token for the dashboard, renewed while you stay signed in
How long
Until you sign out
Name
wmmn_portal_token, vendor_portal_token
Type
Local storage
Category
Necessary
Purpose
Keeps you signed in to the customer or supplier portal a member invited you to
How long
Until you sign out
Name
px_oauth_state
Type
Cookie, HTTP-only
Category
Necessary
Purpose
Protects a Google or LinkedIn sign-in from being completed in someone else’s browser
How long
10 minutes
Name
px_consent
Type
Cookie
Category
Necessary
Purpose
Remembers your cookie choices
How long
180 days
Name
__stripe_mid, __stripe_sid
Type
Cookie, set by Stripe
Category
Necessary
Purpose
Fraud prevention for card payments, set only when you pay by card
How long
1 year and 30 minutes
Name
px_attr_s
Type
Session storage
Category
Measurement without an identifier
Purpose
The campaign tags, referring site and landing page of this visit, sent with a signup so we know which page or campaign it came from. Holds no identifier and no ad click ID
How long
Until you close the tab
Name
px-workspace, px-switch-mode, px-guide, px.cdr.*, usage-view, px.tz.override, px.switch.listFilter.*, px-api-ref-lang, px-dev-lang, px.routeTest.cli, px.actionRequired.hidden.v1, switch-tour-v1-done
Type
Local storage
Category
Preferences
Purpose
Remembers the product and mode you chose, your place in guided tours, table columns, saved views, your time zone, the code-sample language you picked and notices you dismissed
How long
Until you clear your browser storage
Name
icw:*, pkx:first-call:*, pkx:onboard-customer:*, px_route_draft_v1, wmmn.deck-import.v1, wmmn.add-trunk-wizard.v2.*, switch-ai-control-thread-v1, dialer-talk-thread-v1
Type
Local or session storage
Category
Preferences
Purpose
Keeps unfinished forms, your place in setup guides and assistant conversations, so you can pick up where you left off
How long
Until you finish, or clear your browser storage
Name
wmmn.quick-upload.*, hideVerifyBanner, px-oauth-error-shown
Type
Session storage
Category
Preferences
Purpose
Carries an upload between two steps and remembers a notice you closed
How long
Until you close the tab
Name
px_ux_sid, px_ux_last, px_ux_seq, px_ux_g*
Type
Session storage
Category
Product analytics
Purpose
A random session ID, the time of your last activity and a batch counter, so the pages you open in your account can be grouped into one visit. Set inside your account always, and on public pages only if you allow Analytics. If your browser sends Global Privacy Control, public pages use a separate px_ux_g* session that is never linked to your account. Not a cookie, and holds nothing about you
How long
Until you close the tab, with a new session after 30 minutes of inactivity
Name
px_vid
Type
Cookie
Category
Analytics
Purpose
A random visitor ID, set only if you allow Analytics, so a visit can be linked to an account if you later sign up
How long
13 months after your last visit
Name
px_attr
Type
Local storage
Category
Analytics
Purpose
The first and latest campaign that brought you here and any ad click ID, set only if you allow Analytics or Advertising
How long
Until you withdraw consent or clear your browser storage

Page visits are counted without cookies. Each visit is recorded with a code made from your IP address, browser and a random value that changes every day and is then deleted, so the code cannot be linked to you or to your other days. Your IP address is used only to look up your country in a database on our own servers and is not stored. Country data: IP Geolocation by DB-IP, licensed under CC BY 4.0.

No advertising cookies are in use at the moment. If we start using them, they will only load after you allow Advertising, and this table will list them. The only other third-party cookies are the fraud-prevention cookies our card processor, Stripe, sets when you pay by card.

Children

The Platform is for businesses and is not directed at anyone under 18. We do not knowingly accept children as account holders.

Changes to this policy

We post updates on this page with a new date and version. If a change materially affects how we use your personal data, we tell account holders by email or in the dashboard before it takes effect.

Contact

Legal notices and law enforcement requests
legal@packetexchange.io
Privacy and support
support@packetexchange.io