Privacy Policy

Last updated: 9 April 2026

1. Introduction

VetoCaller ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and mobile application. We operate in compliance with the Personal Data Protection Act 2012 (PDPA) of Singapore and the Personal Data Protection Act 2010 (PDPA) of Malaysia.

IMPORTANT: We do NOT sell your personal data to third parties.

2. Data We Collect

We collect information that you provide directly to us, as well as information collected automatically when you use our services:

  • Account Information: Name, email address, and profile picture provided through social login (Google).
  • Phone Number Verification: Your phone number may be used for authentication.
  • Community Reports: Phone numbers you report, associated tags, comments, and suggested caller names.
  • Device Information: Device UUID, brand, model, operating system version, and unique device identifiers.
  • Usage Data: IP address, access times, and pages viewed for security and anti-abuse purposes.

3. How We Use Your Data

We use the collected data for the following purposes:

  • To provide and maintain the VetoCaller service, including core caller identification.
  • To verify your identity and prevent fraudulent use of our services.
  • To aggregate community reports into a reputation database.
  • Anonymized Analytics: To monitor traffic trends using server-side processing (Cloudflare Zaraz) that removes all identifying information before analysis.
  • To investigate and prevent security threats, spam, and abuse.
  • To comply with legal obligations in Singapore and Malaysia.

4. Data Sharing and Disclosure

We do not sell, rent, or trade your personal data. We only share information in the following circumstances:

  • Legal Requirements: We may disclose data if required by law to comply with a subpoena, court order, or legal process in Singapore or Malaysia.
  • Aggregated Data: We share aggregated, non-personally identifiable information (e.g., "This number has been reported 5 times") as part of our core caller ID service.

5. Data Security

We implement robust technical and organizational measures to protect your data, including:

  • Encryption of sensitive data (SQLCipher for mobile databases).
  • HMAC request signing to prevent request tampering.
  • Strict access controls and firewalls (Cloudflare Origin Pull).
  • Secure hosting with automated backups and regular security audits.

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. Community report metadata may be archived after 2 years to maintain system performance.

7. Your Rights (PDPA Compliance)

Under the PDPA (Singapore and Malaysia), you have the right to:

  • Access: Request a copy of the personal data we hold about you.
  • Correction: Request that we correct any inaccurate or incomplete personal data.
  • Withdrawal: Withdraw your consent to our processing of your personal data at any time (this may limit your ability to use the service).

To exercise these rights, please contact our Data Protection Officer at [email protected].

8. International Transfers

Your data may be stored and processed on servers located outside of your home country (including Singapore and international cloud regions). We ensure that any such transfer complies with the PDPA requirements for data protection standards.

9. Cookies and Analytics

We use strictly necessary technical cookies to improve your experience and ensure the security and functionality of our spam-protection service. These cookies are essential for the Service to function properly and cannot be switched off in our systems. We also use Privacy-Enhanced Analytics via Cloudflare Zaraz.

To protect your privacy, these analytics are configured to:

  • Mask your IP address before any data is processed.
  • Strip search queries (URL parameters) from reports so your search history remains private.
  • Disable all advertising and remarketing features (No Google Audiences).

This allows us to understand traffic volume without tracking your individual identity or search history.

10. Contact Us

If you have any questions about this Privacy Policy, please contact us at:

VetoCaller Support
Email: [email protected]
DPO: [email protected]

We value your privacy

We use strictly necessary technical cookies to improve your experience and ensure security and functionality of our spam-protection service

Privacy Policy Terms