This page summarizes how Gozango retains and deletes phone and messaging data processed through Gozango Portal when your business uses Twilio-backed non-marketing numbers (for example business_direct, personal_direct, and operational extra where enabled). It is designed to support tenant compliance programs and privacy expectations, including references to the GDPR and CCPA. It does not replace legal advice to your business.

1. Scope

Applies to call recordings, voicemail audio, transcripts stored in Gozango that describe those calls or voicemails, and SMS/MMS message bodies (plus delivery metadata we surface in the CRM timeline) for the Twilio non-marketing product surface. Marketing numbers that remain on CTM (CallTrackingMetrics) are out of scope for this policy.

2. Default retention

Retention is measured from completion of the underlying communication (call, voicemail capture, or message delivery) unless a shorter period applies because you successfully requested deletion or a legal hold freezes processing.

Carriers and Twilio may retain data under their own policies; this table governs primary Gozango-visible copies and purge targets.

3. Tenant-initiated deletion (authentication & scope)

• Who may request deletion: authenticated tenant administrators. Verification may include MFA challenges, proof of billing entitlement, or in-bound contact using numbers on file.
• Scope: defaults to removing phone and messaging payloads in §2 for the requesting business tenant. Narrower scopes (date ranges or contact subsets) are supported where the deletion API/UI exposes them.
• Operational targets: acknowledgement within ~5 business days after verification opens; purge within ~30 calendar days absent legal hold or subprocessor incident.
• Preserves: finance/billing artifacts required by law, security telemetry summarized as non-content signals, and data subject to lawful preservation notices.
• Channel:until self-serve deletion ships, submit through the in-product Support Center and reference "phone and messaging data deletion".

4. Audit trail

Authorized deletion flows emit structured audit entries capturing who requested the action, the scope identifiers (including ticket correlation), timestamps in UTC, and success or failure codes suitable for SOC (Service Organization Control) style review. Operators see minimized fields where feasible to reduce re-identification risk.

5. GDPR/CCPA-aligned consumer inquiries

Your business acts as controller for conversations with consumers; Gozango processes phone and messaging payloads as directed by your account. Consumers should contact your privacy team first. When a consumer contacts Gozango directly, we coordinate with your authorized administrators unless applicable law requires an immediate substantive response without your involvement.

6. Changes to this policy

Extending retention beyond the durations above or materially changing deletion obligations will be communicated ahead of the new effective date.

Support Center · Terms of Service