1Stream 1Stream
Legal

Privacy Policy

1Stream is a brand of BVoIP, LLC. · Last updated: October 22, 2026

We at BVoIP, LLC (doing business as 1Stream) ("Company", "we", "us", "our") know that our users ("you," "your") care about how your personal information is used and shared, and we take your privacy seriously. Please read the following to learn more about our Privacy Policy. By visiting or using the website (the "Website") or any other features, content, or applications offered from time to time by Company in connection therewith (collectively, the "Services") in any manner, you acknowledge that you accept the practices and policies outlined in this Privacy Policy, and you hereby consent that we will collect, use, and share your information in the following ways.

If you have any questions or concerns please contact us.

1. What Does This Privacy Policy Cover?

This Privacy Policy covers our treatment of personally identifiable information ("Personal Information") that we gather when you are accessing or using our Services. This policy does not apply to the practices of companies that we do not own or control, or to individuals that we do not employ or manage.

We do not knowingly collect or solicit Personal Information from anyone under the age of 13 or knowingly allow such persons to register for our Services. If you are under 13, please do not attempt to register for the Services or send any information about yourself to us, including your name, address, telephone number, or email address. No one under age 13 may provide any Personal Information to us or on the Services. In the event that we learn that we have collected Personal Information from a child under age 13 without verification of parental consent, we will delete that information as quickly as possible. If you believe that we might have any information from or about a child under 13, please contact us.

We gather various types of Personal Information from our users, as explained more fully below. We may use this Personal Information to provide the Services you or your organisation have requested, to respond to requests made through the 1Stream Partner API on a partner's behalf, to keep the Services secure and to investigate problems, to maintain an audit record of configuration changes, to personalize and improve our services, to contact users, to analyze how users utilize the Services, and as otherwise set forth in this Privacy Policy. We may share certain types of Personal Information with third parties, as described below.

2. What Information Does Company Collect?

Information You Provide to Us

We receive and store any information you knowingly provide to us. For example, we collect Personal Information, including but not limited to, your name, title, company, email address, phone number, address, location and browser information. You can choose not to provide us with certain information, but then you may not be able to register with us or to take advantage of some of our features. We may anonymize your Personal Information so that you cannot be individually identified, and provide that information to our partners.

If you have provided us with a means of contacting you, we may use such means to communicate with you. For example, we may send you promotional offers on behalf of other businesses, or communicate with you about your use of the Services. Also, we may receive a confirmation when you open a message from us. This confirmation helps us make our communications with you more interesting and improve our services. If you do not want to receive communications from us, please indicate your preference and contact us. Please note that if you do not want to receive legal notices from us, those legal notices will still govern your use of the Services, and you are responsible for reviewing such legal notices for changes.

Information Collected Automatically

Whenever you interact with our Services, we automatically receive and record information on our server logs from your browser including your IP address, "cookie" information, and the page you requested. "Cookies" are identifiers we transfer to your computer or mobile device that allow us to recognize your browser or mobile device and tell us how and when pages and features in our Services are visited and by how many people. You may be able to change the preferences on your browser or mobile device to prevent or limit your computer or device's acceptance of cookies, but this may prevent you from taking advantage of some of our features. If you click on a link to a third party website, such third party may also transmit cookies to you. This Privacy Policy does not cover the use of cookies by any third parties.

When we collect usage information (such as the numbers and frequency of visitors to the Website), we only use this data in aggregate form, and not in a manner that would identify you personally. For example, this aggregate data tells us how often users use parts of the Services, so that we can make the Services appealing to as many users as possible. We may also provide this aggregate information to our partners; our partners may use such information to understand how often and in what ways people use our Services, so that they, too, can provide you with an optimal experience. We never disclose aggregate information to a partner in a manner that would identify you personally.

Information Received Through the 1Stream Partner API

If you are a partner who connects an AI assistant or other software to the phone systems you manage through the 1Stream Partner API, we receive the requests that software makes on your behalf and return phone-system information you are already entitled to see. We do not receive your conversations with the assistant. Section 9 explains exactly what is received, what is returned, what is recorded and for how long.

3. Will Company Share Any of the Personal Information It Receives?

We neither rent nor sell your Personal Information in personally identifiable form to anyone. However, we do share your Personal Information with third parties as described in this Privacy Policy and in this Section:

Affiliated Businesses and Third Party Websites We Do Not Control

In certain situations, businesses or third party websites we're affiliated with may sell items or provide services to you through the Services (either alone or jointly with us). Also, entities that we collaborate with in an effort to conduct business events and marketing fall under affiliated businesses. You can recognize when an affiliated business is associated with such a transaction or service, and we will share your Personal Information with that affiliated business only to the extent that it is related to such transaction or service. We have no control over the policies and practices of third party websites or businesses as to privacy or anything else, so if you choose to take part in any transaction or service relating to an affiliated website or business, please review all such business' or websites' policies.

Agents

We employ other companies and people to perform tasks on our behalf and need to share your information with them to provide products or services to you. Unless we tell you differently, our agents do not have any right to use the Personal Information we share with them beyond what is necessary to assist us.

AI Assistant Providers and Other Software You Connect

Partners may connect AI assistants (such as Claude) or other software to the 1Stream Partner API. When they do, we return information to that software in response to the requests it makes on the partner's behalf. The provider of that software is chosen by the partner, is not our agent, and handles the information under its own terms and privacy policy. We do not sell information received or produced through the Partner API and we do not share it with advertisers or advertising networks. Section 9 has the details.

Business Transfers

We may choose to buy or sell assets. In these types of transactions, customer information is typically one of the business assets that would be transferred. Also, if we (or our assets) are acquired, or if we go out of business, enter bankruptcy, or go through some other change of control, Personal Information would be one of the assets transferred to or acquired by a third party.

Protection of Company and Others

We reserve the right to access, read, preserve, and disclose any information that we reasonably believe is necessary to comply with law or court order; enforce or apply our conditions of use and other agreements; or protect the rights, property, or safety of Company, our employees, our users, or others. This includes exchanging information with other companies and organizations for fraud protection and credit risk reduction.

With Your Consent

Except as set forth above, you will be notified when your Personal Information may be shared with third parties in personally identifiable form, and will be able to prevent the sharing of this information.

4. Is Personal Information About Me Secure?

We endeavor to protect the privacy of your Personal Information we hold in our records, but we cannot guarantee complete security. Unauthorized entry or use, hardware or software failure, and other factors, may compromise the security of user information at any time.

The Services may contain links to other sites. We are not responsible for the privacy policies and/or practices on other sites. When following a link to another site you should read that site's privacy policy.

5. What Personal Information Can I Access?

Our Services give you access to a broad range of information (including Personal Information) about your account and your interactions with the Service for the purpose of viewing and, in certain cases, updating or deleting that information. The information you can view, update, and delete may change as the Services change. If you have any questions about viewing or updating information we have on file about you, please contact us.

Under California Civil Code Sections 1798.83-1798.84, California residents are entitled to contact us to prevent disclosure of Personal Information to third parties for such third parties' direct marketing purposes; in order to submit such a request, please contact us.

6. What Choices Do I Have?

You can always opt not to disclose information to us, but keep in mind some information may be needed to register with us or to take advantage of some of our special features.

You may request deletion of your information by using the form on the contact us page. Please note that some information may remain in our records, for example in our archives, after your request of deletion of such information. We may use any aggregated data derived from or incorporating your Personal Information after you update or delete it, but not in a manner that would identify you personally. Please also note that comments you post publicly on our Website, such as comments on our blog posts, will remain visible to the public.

Partners who use the 1Stream Partner API can disconnect any AI assistant or other software at any time in the Control Portal. Section 9 explains how long we keep records of Partner API activity.

7. Changes to This Privacy Policy

We may amend this Privacy Policy from time to time. Use of information we collect now is subject to the Privacy Policy in effect at the time such information is used. If we make changes in the way we use Personal Information, we will notify you by posting an announcement on our Website or sending you a message. You are bound by any changes to the Privacy Policy when you use the Services after such changes have been first posted.

8. General Data Protection Regulation (GDPR)

EU Residents

If you are a resident of the European Union ("EU"), United Kingdom, Lichtenstein, Norway, or Iceland, you may have additional rights under the EU General Data Protection Regulation (the "GDPR") with respect to your Personal Data, as outlined below.

For this section, we use the terms "Personal Data" and "processing" as they are defined in the GDPR, but "Personal Data" generally means information that can be used to individually identify a person, and "processing" generally covers actions that can be performed in connection with data such as collection, use, storage and disclosure. Company will be the controller of your Personal Data processed in connection with the Services. Note that we may also process Personal Data of our customers' end users or employees in connection with our provision of services to customers, in which case we are the processor of Personal Data. If we are the processor of your Personal Data (i.e., not the controller), please contact the controller party in the first instance to address your rights with respect to such data.

If there are any conflicts between this section and any other provision of this Privacy Policy, the policy or portion that is more protective of Personal Data shall control to the extent of such conflict. If you have any questions about this section or whether any of the following applies to you, please contact us.

We collect Personal Data about you when you provide such information directly to us, when third parties such as our business partners or service providers provide us with Personal Data about you, or when Personal Data about you is automatically collected in connection with your use of our Services. This includes information you provide directly (such as name, company name and VAT number, email, mailing address, telephone number, IP address, username, account code, browser information, credit card and CVV, and transaction and billing data), information received from third party sources (such as account information for third party login or social services you connect), and information automatically collected when you use our Services (such as IP address, device identifiers, browser information, page view statistics, browsing history, usage and transaction information, cookies and other tracking technologies, location information, and log data).

How Do We Use Your Personal Data?

We process Personal Data to operate, improve, understand and personalize our Services, including to create and manage user profiles, communicate with you about the Services, process orders, provide support, personalize content, meet contract or legal obligations, respond to inquiries and requests, resolve disputes, protect against fraudulent or harmful actions, and enforce our Terms of Service. We will only process your Personal Data if we have a lawful basis for doing so, including consent, contractual necessity, and our legitimate interests or the legitimate interests of others.

How and With Whom Do We Share Your Data?

We share Personal Data with vendors, third party service providers and agents who work on our behalf, including payment processors, fraud prevention providers, ad networks, analytics providers, staff augmentation and contract personnel, hosting providers, co-location providers, and telecommunications providers. We also share Personal Data when necessary to complete a transaction you initiate or authorize, when you have given consent, and when we believe it is necessary to comply with applicable law or valid legal process, to protect us, our business or our users, and to maintain the security of our products and services. If we choose to buy or sell assets, or are acquired or enter bankruptcy, user information may be among the assets transferred.

How Long Do We Retain Your Personal Data?

We retain Personal Data about you in accordance with legal and additional compliance requirements. In some cases we retain Personal Data for longer, if doing so is necessary to comply with our legal obligations, resolve disputes or collect fees owed, or is otherwise permitted or required by applicable law, rule or regulation. Afterwards, we retain some information in a depersonalized or aggregated form but not in a way that would identify you personally.

Records of requests made through the 1Stream Partner API, and the audit record of configuration changes made through it, are kept for a period of 12 months unless the partner changes retention settings and then deleted or anonymized, unless the law requires us to keep them longer. Access credentials issued to AI assistants expire automatically (access tokens after one hour and the connection after 45 days) and stop working immediately if the partner revokes the connection in the Control Portal. Phone-system configuration data returned through the Partner API is the partner's live service data; it is retained for as long as the partner's service is active and in accordance with the partner's service agreement.

What Security Measures Do We Use?

We seek to protect Personal Data using appropriate technical and organizational measures based on the type of Personal Data and applicable processing activity. For example, we use encryption and tokenization to keep your Personal Data secure.

What Rights Do You Have Regarding Your Personal Data?

You have certain rights with respect to your Personal Data, including access, rectification, erasure, withdrawal of consent, portability, objection, restriction of processing, and the right to file a complaint with your supervisory authority. For more information about these rights, or to submit a request, please contact us. Please note that in some circumstances we may not be able to fully comply with your request, and we may need additional information to verify your identity and the nature of your request.

Transfers of Personal Data

Our website and our corporate systems are hosted and operated in the United States ("U.S.") through Company and its service providers. Phone systems we host for partners, and the 1Stream Partner API, are hosted in the region selected when the partner's service was set up: the United States, Europe or Australia. Requests to the Partner API from an AI assistant hosted by its vendor enter our service through the United States before being routed to the partner's region (see section 9.6). Information about partners and their users may also be accessed from the United States for support, billing and security purposes. Laws in the U.S. may differ from the laws where you reside.

9. The 1Stream Partner API and AI Assistant Connections

9.1 What the 1Stream Partner API is. The 1Stream Partner API allows our partners (IT and managed service providers who manage phone systems for their customers through 1Stream) to connect software of their choice, including AI assistants such as Claude, to the phone systems they manage. This section explains what information passes through the Partner API and how we handle it. It applies in addition to the rest of this Privacy Policy.

9.2 How a connection is authorised. A partner administrator connects an AI assistant by entering their own 1Stream Partner API key once on a consent page we host. We then issue the assistant short-lived credentials: an access token valid for one hour and a refresh token that is replaced each time it is used. The connection itself is valid for 45 days. The partner can see their active connections and revoke any of them at any time in the Control Portal, after which the assistant can no longer use the Partner API on their behalf.

9.3 What we receive. When an assistant acts for a partner, we receive only the individual requests it makes: the name of the action requested and the values needed to perform it (for example, a phone system identifier or an extension number). We do not receive the conversation between the partner and the assistant, the assistant's memory or chat history, or any files the partner has shared with the assistant. We do not ask for that information, we do not store it, and we do not record it in our logs.

9.4 What we return. In response to a request we return phone-system configuration and operational information that the partner is already entitled to see in the Control Portal. Depending on the request this may include extension and user details (including the names, extension numbers and email addresses of the partner's customers' staff), call queue settings, call history and details about call recordings and voicemails (such as date, time, duration and the numbers involved), lists of permitted or blocked network addresses, and phonebook entries. Where the partner has connected a phone system to their 1Stream account, it may also include the call history and call summaries the 1Stream integration recorded for that system, the CRM contact and support ticket linked to a call, each call's legs, queue login history, and which CRM member each 1Stream user is mapped to. Where the partner has allowed the assistant to make changes, a request may also create, update or remove such configuration, place a call from an extension, or trigger an on-call notification rule the partner has set up.

9.5 Records we keep. For each request we record the date and time, the network address the request came from, the identifier of the API key used, the action requested, whether it succeeded, and a reference number we use to trace the request if the partner reports a problem. Where a request changes configuration, we also keep an audit record of the change and the name of the API key that made it. We keep these records to operate the service, to investigate problems and security incidents, and to show partners what was done on their account. We keep them for 12 months unless retention settings are adjusted by the partner, and then delete or anonymize them, unless the law requires us to keep them longer.

9.6 Where processing happens. Partner API requests are processed in the region where the partner's phone systems are hosted with us: the United States, Europe or Australia. Requests from an AI assistant hosted by its vendor enter our service through our United States entry point before being routed to the partner's region.

9.7 AI assistant providers are separate from us. The provider of the AI assistant (for example, Anthropic for Claude) is not our service provider or agent. It processes the partner's conversation, and the information it requests from us, under its own terms and privacy policy, which the partner accepts when they choose to use that assistant. We do not send information to an AI assistant provider except as a direct response to a request the assistant makes on the partner's behalf. We do not sell information received or produced through the Partner API, and we do not share it with advertisers or advertising networks.

9.8 Our role and your rights. Information about a partner's customers and their staff that we process through the Partner API is processed on the partner's instructions, as a service provider (a "processor" under the GDPR). Individuals with questions about that information should contact the partner that manages their phone system in the first instance. Partners with questions about the Partner API, or who wish to exercise rights on behalf of their customers, can contact us using the details in the Contact section.

Contact

If you have any questions about this Privacy Policy or our data practices generally, please contact us:

BVoIP, LLC (doing business as 1Stream) Compliance

1250 Bethlehem Pike, S247, Hatfield, PA 19440, USA

General: info@bvoip.com

Compliance: compliance@bvoip.com

Data Protection Officer: dpo@bvoip.com

If your information reached us through a 1Stream partner (for example, because your employer's phone system is managed by one of our partners), please contact that partner in the first instance; we will assist them in responding to you. Partners with questions about the 1Stream Partner API can also reach us at compliance@1stream.com.

A current list of our sub-processors is published at 1stream.com/privacy/sub-processors. If you have any questions about it, please contact us.