How CyberPhone processes data on behalf of customers in delivering its products and services.
Effective: July 6, 2026
This Data Processing Agreement (DPA) applies where CyberPhone processes personal data on behalf of a customer controller in the course of providing services.
This DPA is between CyberPhone (processor) and the customer (controller), and supplements the Terms of Service. It applies to personal data processed to deliver contracted services.
The customer is the data controller and determines the purposes and means of processing. CyberPhone acts as processor and processes data only on documented instructions from the customer.
Categories may include device identifiers, communications metadata, and location data necessary to provide the contracted monitoring capabilities. The customer is responsible for lawfulness of collection.
CyberPhone applies encryption in transit and at rest, access controls, hardware-level isolation, and documented operational-security procedures consistent with recognized frameworks.
CyberPhone engages subprocessors only with customer authorization and under written agreements imposing equivalent data-protection obligations. A current list is available on request.
On contract end, CyberPhone returns or deletes customer data at the customer's choice, save where retention is required by law.
This platform is provided exclusively to government intelligence agencies, police departments and law enforcement organizations for the authorized monitoring, protection and coordination of their undercover operatives. Every operation requires lawful authority within the acquiring jurisdiction, and the acquiring agency remains responsible for the authorization covering each enrolled device. We do not provide the platform for unauthorized surveillance, stalking, or use outside a lawful investigation. Each request is reviewed before any acquisition, and all deliveries are conditional upon acceptance of our legal notice.