Privacy Policy

This policy covers two different things: what happens when you visit this website, and what happens to a phone call handled by UPC on a client's behalf. They are not the same and we describe them separately.

1. This website

This site sets no cookies, runs no analytics, and has no tracking of any kind. There are no forms and nothing to sign up for. We do not know who visits, how often, or where from.

The site is served by Cloudflare, which processes ordinary request information such as your IP address in order to deliver the page and protect against abuse. That is a technical necessity of serving a website and it is not used by us for anything.

If you choose to book a call, that booking happens on Calendly, which is a separate company with its own privacy policy. Whatever you enter there is governed by their terms, not ours. If you would rather not use it, email us instead.

2. Calls handled by UPC

If you called a business that uses UPC, your call was answered and routed by our system on that business's behalf. Your relationship is with that business; we process the call for them. You can direct any request to them, or to us at info@upchelp.com and we will route it.

What is stored, per call:

• The calling party's telephone number
• A call identifier and timestamps
• Whether the business was open at the time
• The menu selection made
• The outcome of any transfer, and the final call status
• A reference to any voicemail recording

The calling party's telephone number is the only free-text personal identifier UPC records.

What is not collected: names, dates of birth, addresses, insurance identifiers, medical record numbers, and clinical information. This is a consequence of how the system is built — it does not ask for that information and provides no field in which to store it. UPC does not operate a redaction process and does not represent that one exists.

3. How long it is kept

Records are deleted in two stages, by an automated process that runs daily.

• The caller's telephone number is deleted 90 days after the record is written.
• The remainder of the record — timestamps, the routing determination and the outcome, which identifies no individual — is deleted 365 days after it is written.

This happens on a schedule, not on request and not manually. The purge clears UPC's own database. It does not delete audio held by Twilio, which is governed by their retention and can be removed on a client's written request.

4. Who else processes this data

Two companies, and no others:

• Twilio Inc. — telephony, call connection, and voicemail recording storage.
• Cloudflare, Inc. — compute and database.

Each operates under its own terms and security posture. We give our clients written notice before adding any further party that processes call data.

5. HIPAA

UPC does not claim to be HIPAA-compliant and does not offer a Business Associate Agreement. We say so plainly here for the same reason we say it in our client documents: a client needs to know that before it puts us in front of customer calls, not after.

6. Changes

If this policy changes, the date above changes with it. Material changes affecting existing clients are communicated to them directly rather than by quietly editing this page.

7. Contact

Unified Priority Communications LLC — info@upchelp.com