Privacy policy

01Who we are and what this covers

9bx is a business software platform built and operated by LogicArray (logicarray.net). In this policy “LogicArray”, “we”, “us” and “our” mean LogicArray, and “9bx” or “the service” means the 9bx platform: the PBX and call centre, 9bx Connect, CRM, helpdesk, HRM, access control and reporting modules, our desktop and mobile apps, and this website.

It applies to everyone who visits this website, signs up for a trial or an account, uses a 9bx workspace or contacts us. It does not cover third-party services you connect to 9bx, such as a WhatsApp Business account or your own telecom carrier. Those services have their own policies.

02Our role and yours

Who is responsible for personal data depends on whose data it is.

• Workspace content. When your business uses 9bx, it decides what goes into its workspace: customer contacts, conversations, call recordings, tickets, employee records and so on. Your business is the controller of that data and LogicArray is its processor. We handle it only on your business’s instructions and to provide the service.
• Accounts, billing and this website. For the people who sign up, administer and pay for accounts, and for visitors to this website, LogicArray is the controller.

If you are a customer or employee of a business that uses 9bx (for example, you called its call centre), please contact that business about your data. We will help it respond to you.

03Data we collect

• Account data. Name, work email, phone number, company name, country and job role, your password (stored only as a hash) and your sign-in security settings.
• Billing data. Plan, modules, invoices, VAT or tax details and payment history. Card and mobile wallet payments are handled by the payment gateway. We receive a payment token, the last digits of the card or the wallet number, and the result of the payment, never your full card number.
• Workspace content. Everything your team adds to or receives in 9bx: contacts and customer records, deals, tickets, messages from WhatsApp, SMS, Messenger, email and web chat, files, employee records, attendance, leave and payroll data, access events from biometric or card devices, and inventory records.
• Call data. Call detail records (CDRs), meaning the numbers involved, time, duration, route, queue and agent of each call, plus voicemail and, where your workspace has recording switched on, call recordings.
• Device and usage data. IP address, browser and app version, device type, sign-in times, actions recorded in the audit log, error reports and performance logs.
• Website data. Pages visited and the details you enter in our forms. Analytics and advertising tags run only if they have been enabled for this site (see Cookies).

Some workspace content can be sensitive: call recordings, payroll data and biometric attendance records, for example. Your business decides whether to collect it, and is responsible for having a lawful basis and for giving any notice its employees or customers are owed.

04How we use data

• Provide the service. Create workspaces, route calls and messages, store recordings, run reports and keep apps and devices in sync.
• Bill you. Calculate charges, apply taxes and coupons, take payments, send invoices and handle failed payments.
• Keep 9bx secure. Authenticate users, detect fraud and toll fraud, investigate abuse and keep audit logs.
• Support you. Answer questions and fix problems you report. We look inside a workspace only when you ask us to or when it is needed to keep the service secure.
• Improve 9bx. Understand which features are used and where things break, using aggregated or de-identified data wherever we can.
• Talk to you. Send service notices about billing, security and changes to these documents and, unless you opt out, occasional product news.
• Meet legal duties. Keep the records the law requires and respond to lawful requests from authorities.

When you use AI features, the content you send to them is processed to give you the result. We do not use your workspace content to train AI models offered to other customers.

05Legal bases

Where the law requires a legal basis for using personal data (for example under the GDPR or similar laws), we rely on:

• Contract. To provide the service you or your employer signed up for, and to bill for it.
• Legitimate interests. To keep 9bx secure, prevent fraud, improve the product and tell business contacts about it, always balanced against your rights.
• Legal obligation. To keep tax and accounting records and to meet telecom and other regulatory duties.
• Consent. For optional analytics or advertising cookies, and for marketing emails where consent is required. You can withdraw consent at any time.

For workspace content, your business is responsible for the legal basis. We process that data on its instructions.

06Call recording

Call recording is off until a workspace admin switches it on for an extension, queue or route. When it is on, recordings are stored with the workspace, on 9bx Cloud, on your own server or on storage your business connects, and can be played back only by users with permission to do so.

Recording laws differ from country to country, and many require callers to be told, or to agree, before a call is recorded. Your business is responsible for knowing and following those rules, including telling callers and agents that calls are recorded. 9bx can play a consent announcement at the start of each call to help you do this.

Admins can download and delete recordings. How long they are kept is your business’s decision, within the rules in How long we keep data and any minimum period set by your local telecom rules.

079bx Click to Dial browser extension

The 9bx Click to Dial extension for Chrome, Edge and Firefox turns phone numbers on web pages into click-to-call links for your 9bx extension. It works only after you connect it to your own 9bx workspace, and only on the websites you allow.

• What it stores in your browser: the connection to your workspace (its address and a token you paste from 9bx), your calling settings and the sites where you switched detection off. This stays in your browser.
• What it sends: when you click a number, that phone number and the token, only to your own 9bx workspace, to place the call. The toolbar shows your recent calls, read from the same workspace.
• What it does not do: it finds numbers on a page inside your browser and never sends page content, browsing history or anything else to us or anyone. It has no analytics or advertising, and we do not sell or share its data.

You can disconnect a browser at any time in 9bx (Profile menu, Browser extension, Disconnect), which revokes its token, or remove the extension. Calls placed through it are handled like any other call, as described in this policy.

08Sharing and sub-processors

We share personal data only with those who need it to run 9bx, and only as much as they need:

• Infrastructure providers that host our servers, storage and backups.
• Payment gateways and banks that process card and mobile wallet payments.
• Telecom carriers and SIP trunk providers that connect your calls and deliver your SMS.
• The messaging channels you connect, such as WhatsApp, Messenger and email, to send and receive your messages.
• Email and SMS providers we use to send sign-in codes, invoices and service notices.
• Support and monitoring tools we use to answer tickets and detect errors.
• Professional advisers, such as lawyers and auditors, who are bound by confidentiality.

Every sub-processor is bound by a written agreement that limits its use of the data to the work we engage it for and requires appropriate security. Business customers can ask us for the current list of sub-processors.

We may also disclose data when the law requires it, for example in response to a valid court order or a request from a regulator. Where we are allowed to, we will tell the affected customer first. If LogicArray is involved in a merger or acquisition, data may pass to the new owner, who will remain bound by this policy.

We do not sell personal data, and we do not share it with third parties for their own marketing.

09International transfers

LogicArray is based in Bangladesh, and 9bx Cloud and our providers may process data in other countries. When data moves across borders, we protect it as this policy describes, using safeguards such as contractual commitments with our providers, and we follow the transfer rules that apply to you. If your data must stay in a particular country, you can run 9bx on your own server or ask us about hosting options.

10How long we keep data

• Active subscriptions. We keep workspace content for as long as the subscription is active, unless your admins delete it sooner.
• Lapsed subscriptions. If a subscription ends or a payment lapses, the workspace becomes read-only and nothing is deleted for 30 days. After that, and after we have given the account owner notice, we may permanently delete the workspace and its content.
• Backups. Deleted data can remain in backups until those backups roll off under our backup schedule. We restore from backups only to recover from a failure.
• Records the law requires. We keep invoices, payment and tax records, and CDRs where telecom rules require them, for the period the law sets, even after a workspace is deleted.
• Website and support. Form submissions and support conversations are kept while they are useful to our relationship with you, then deleted or anonymised.

11Security

We protect data with measures designed for a multi-tenant business platform, including tenant isolation in the database, encryption in transit, role-based access, audit logs and regular backups. Our staff access customer workspaces only when needed to support or protect the service. Read more on our Security & data page.

No system is perfectly secure. If we become aware of a breach that affects personal data, we will notify the affected customers without undue delay and as the law requires.

12Self-hosted deployments

If your business runs 9bx on its own server, your workspace content, including call recordings, CDRs and employee data, stays on that server and under your control. We have no access to it unless you give it to us, for example during a support session.

A self-hosted installation sends us only what we need for licensing, billing and support: the licence key, installation and version details, the modules and number of users or extensions in use, and basic health information. Anything you share with us while asking for support is handled under this policy.

The same applies when a 9bx Cloud workspace stores its call recordings on your own storage: the files live in your storage, and 9bx reads and writes them only on your instructions.

13Your rights

Depending on where you live, you may have the right to:

• Access the personal data we hold about you and get a copy of it.
• Correct data that is inaccurate or incomplete.
• Delete data we no longer need or have no right to keep.
• Export your data in a commonly used, machine-readable format.
• Object to, or ask us to restrict, certain uses, including direct marketing, which you can stop at any time.
• Withdraw consent you have given, without affecting anything done before.

Workspace admins can view, export, correct and delete most workspace content themselves in 9bx. For anything else, contact us using the details in Contact. We may need to confirm your identity first, and we will reply within the time the law allows, usually 30 days.

If your data is in a workspace run by another business, we will pass your request to that business, because it decides how its data is handled. You can also complain to your local data protection authority.

14Children

9bx is a service for businesses and is not intended for anyone under 18. We do not knowingly collect personal data from children. If you believe a child has given us personal data, contact us and we will delete it.

15Cookies and analytics

This website and the 9bx app use cookies and similar browser storage that are strictly necessary: to keep you signed in, remember your settings and protect forms against abuse. These cannot be switched off.

Analytics and advertising tags, such as web analytics, a tag manager or an advertising pixel, load only if they have been enabled for this site and, where the law requires consent, only after you agree. You can also block or delete cookies in your browser settings. The site will still work, though you may need to sign in again.

16Changes to this policy

We may update this policy as 9bx and the law change. The date at the top of this page shows when it last changed. If a change materially affects how we use personal data, we will tell account owners by email or in the app before it takes effect.

17Contact

Send questions, requests or complaints about privacy to LogicArray: