Privacy Policy — Legate Phone System

Effective 10 August 2026

Legate Phone System is a business telephone app built by Basha Systems for employees of Legate. It is not a consumer product and is not offered to the general public.

Who handles your information

The app connects only to Legate's own telephone server, which Legate owns and operates. Your calls, voicemail, and call history live on that server.

Basha Systems does not receive, store, or have access to any of it. There is no Basha Systems account, no analytics service, no advertising, and no crash-reporting service in this app. Nothing you do in the app is reported to the app's developer.

What the app handles, and why

• Your extension and password. Used to sign you in to Legate's phone system. They are stored encrypted on your own device — in the iOS Keychain or the Android keystore — and are sent only to Legate's phone server.
• Phone numbers you call and that call you, along with times and durations. Needed to place calls and to show your call history. Legate's phone system keeps its own record of these, as any business phone system does.
• Call audio. Carried to Legate's phone server so the other person can hear you. See "Call recording" below.
• Voicemail. Stored on Legate's phone server. Voicemail for this business is a shared mailbox, so messages may be heard by any employee with access. Transcripts of voicemail are produced on Legate's own server; voicemail audio is not sent to any outside transcription service.
• A notification token. So Legate's phone server can wake your phone to ring it for an incoming call.
• Your microphone. Only during a call. The app does not listen at any other time.

The app does not collect your location, contacts, photos, health data, or advertising identifiers, and does not track you across other apps or websites.

Call recording

Incoming calls from outside the company are recorded automatically by Legate's phone system, as a matter of Legate's business policy. Recording is performed by the phone system, not by this app; the app only lets you play back recordings of your own calls. Hiding a recording in the app hides it from your view only — the recording itself is retained by Legate.

Questions about why calls are recorded, how long recordings are kept, and who can listen to them are for Legate to answer, not Basha Systems.

Other companies involved

Your information goes to Legate's phone server over a private, encrypted network connection. A small number of third parties are unavoidably involved in making that work:

• Apple (iOS) and Google (Android) deliver the notifications that make your phone ring. They handle a notification token and the fact that a call is arriving. The caller's number and your call audio are not sent through them.
• Tailscale provides the private network the app uses to reach Legate's phone server. Its coordination service handles the information needed to connect your device to that network. Your call audio is encrypted end to end between your phone and Legate's server.

None of these companies is given your calls, voicemail, or recordings to keep.

Keeping and deleting information

Call history and settings are stored on your device and are removed when you sign out or uninstall the app.

Information held on Legate's phone server — call records, voicemail, recordings — is controlled by Legate and kept according to Legate's own policies. The app deliberately provides no way to delete it, because it is business records rather than personal data belonging to any one employee. To request access to or deletion of that information, contact your administrator at Legate.

Children

This app is for Legate employees. It is not directed at children and is not intended for anyone under 13.

Changes

If this policy changes materially, the updated version will be posted here with a new effective date.

Contact

Basha Systems — mkareem20@outlook.com

For anything concerning the call records, voicemail, or recordings held on Legate's phone system, contact your administrator at Legate.