Privacy Policy

TCX Hub ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our multi-instance 3CX management platform (the "Service"). By using the Service, you agree to the collection and use of information in accordance with this policy.

We collect the following categories of information:

Account Information: Name, email address, and password hash when you register. If you use OAuth providers, we receive the profile data they share.

Organization Data: Tenant name, billing details, and team member information you provide when setting up your organization.

3CX System Data: FQDN, authentication credentials (encrypted with AES-256-GCM), and telemetry data (CPU, memory, disk usage, active calls, extension registrations) from connected 3CX systems.

Usage Data: Pages visited, features used, session duration, and IP address for security and analytics purposes.

Payment Information: Processed by Stripe. We do not store credit card numbers - only Stripe customer and subscription IDs.

We use collected information to:

- Provide, maintain, and improve the Service - Process your subscription and billing through Stripe - Monitor connected 3CX systems and deliver real-time telemetry - Send alert notifications based on your configured rules - Provide customer support - Detect and prevent fraud, abuse, and security incidents - Generate aggregated, anonymized analytics to improve the platform

Your data is stored on servers hosted by Hetzner in the European Union. All 3CX credentials are encrypted at rest using AES-256-GCM with scrypt key derivation. Tenant data is isolated in separate PostgreSQL schemas - there is no shared data between tenants. All connections use TLS encryption in transit.

We do not sell your personal data. We share data only with:

- Stripe - for payment processing - Sentry - for error tracking and application monitoring (pseudonymized user identifiers only) - SendGrid (Twilio) - for transactional email delivery (recipient email addresses) - Hetzner - infrastructure provider (data processing agreement in place)

We may disclose information if required by law or to protect our legal rights.

Telemetry data is retained based on your subscription tier (7 days for free, up to 365 days for paid plans). Account data is retained for the duration of your account. When you delete your account, your personal data is permanently deleted from live systems within 30 days. Residual copies in encrypted, access-controlled backups are automatically purged within 35 days as backups rotate. Financial and transaction records may be retained for longer where required by applicable tax and accounting law.

You have the right to:

- Access your personal data - Correct inaccurate data - Request deletion of your data - Export your data in a machine-readable format - Object to processing of your data - Withdraw consent at any time

To exercise these rights, contact us at [email protected].

For privacy-related inquiries, contact us at [email protected].