How CyberPhone processes data on behalf of customers in delivering its products and services.
Effective: July 6, 2026
This Data Processing Agreement (DPA) applies where CyberPhone processes personal data on behalf of a customer controller in the course of providing services.
This DPA is between CyberPhone (processor) and the customer (controller), and supplements the Terms of Service. It applies to personal data processed to deliver contracted services.
The customer is the data controller and determines the purposes and means of processing. CyberPhone acts as processor and processes data only on documented instructions from the customer.
Categories may include device identifiers, communications metadata, and location data necessary to provide the contracted monitoring capabilities. The customer is responsible for lawfulness of collection.
CyberPhone applies encryption in transit and at rest, access controls, hardware-level isolation, and documented operational-security procedures consistent with recognized frameworks.
CyberPhone engages subprocessors only with customer authorization and under written agreements imposing equivalent data-protection obligations. A current list is available on request.
On contract end, CyberPhone returns or deletes customer data at the customer's choice, save where retention is required by law.
CyberPhone hardware-modified devices are sold exclusively to vetted corporate, investigative, and compliance professionals for lawful monitoring of devices the purchaser is legally authorized to monitor. Use requires legal authority under the applicable jurisdiction. We do not sell for stalking, unlawful interception, or surveillance without consent where required by law. Every request is reviewed before procurement, and all sales are conditional on acceptance of our Legal Notice.