Privacy Policy
Last updated: 1 October 2026
This policy explains how OnCall collects, uses, and protects your data when you use the incident & on-call management platform at oncall-co.com.
What we collect
Account details (name, email, phone, role), operational data you create in the platform (teams, on-call schedules, incidents and their events, notification logs), and basic technical data (sign-in logs, IP address, browser type) for security and operations.
How we use it
To run the service: route incidents to the right on-call person, auto-escalate, send notifications, show metrics, and keep your account secure. We do not sell your data or use it for advertising.
Sharing
We share only the minimum necessary with service providers that operate the platform on our behalf (hosting, and notification channels such as email/SMS when enabled), under agreements that keep your data confidential. We may disclose data where required by law.
Security & data location
We use encryption in transit (HTTPS) and role-based access controls. Data is hosted on cloud servers; we aim to keep it in-region where possible.
Your rights (Saudi PDPL)
You may access, correct, and request deletion of your personal data as permitted by law. To exercise these, reach us via the Contact page.
Retention
We keep data while your account is active and as needed for operational and legal purposes, after which we delete or anonymize it.
Changes
We may update this policy from time to time and will revise the “Last updated” date above.
Contact
For privacy questions, email privacy@oncall-co.com.