Privacy Policy
Applies to the CallEazy mobile application and related services.
Effective date: 1 December 2025 | Last updated: 22 August 2026 | Version 1.1
1. Introduction
CREATECH INFORMATION TECHNOLOGIES (PRIVATE) LIMITED ("Company", "we", "us" or "our") is committed to protecting your privacy and the security of your personal information. This Privacy Policy explains how we collect, use, disclose, store and protect your personal data when you use the CallEazy mobile application and related services (the "Service").
Company details
- Legal name: CREATECH INFORMATION TECHNOLOGIES (PRIVATE) LIMITED
- Registered address: Flat No. 1205, Floor No. 12, Block No. 04, Khudadad Heights, Sector E-11, Islamabad Urban, Islamabad Capital Territory, Pakistan
- Application name: CallEazy
- Services provided: VoIP calling, virtual numbers and eSIM data services
By using our Service you consent to the collection and use of your information in accordance with this Privacy Policy. If you do not agree with this Privacy Policy, please do not use our Service.
2. Information we collect
2.1 Information you provide directly
Account registration information
- Full name
- Email address
- Phone number
- Date of birth
- Username and password
- Government-issued identification documents, where required for regulatory compliance
- Billing address
Payment information
- Credit or debit card details, processed through secure third-party payment processors
- Billing address
- Transaction history
- Payment method preferences
2.2 Information collected automatically
Device information
- Device type, model and manufacturer
- Operating system and version
- Unique device identifiers, including IMEI, UDID, Android ID and Advertising ID
- Mobile network information
Usage data
- App usage patterns and features accessed
- Call duration, frequency and timestamps
- Data usage statistics
- Crash reports and error logs
3. How we use your information
3.1 Service provision and improvement
- Account management: creating, maintaining and authenticating your account
- Service delivery: providing VoIP calling, virtual number and eSIM data services
- Service quality: monitoring and improving performance, reliability and quality
- Feature development: developing new features and improving existing functionality
3.2 Communications
- Transactional messages: service notifications, confirmations and updates
- Customer support: responding to enquiries and providing assistance
- Security alerts: notifying you of suspicious activity or security incidents
4. Legal basis for processing (EEA and UK users)
- Contractual necessity: processing required to perform our contract with you
- Legitimate interests: service improvement, fraud prevention and security
- Legal obligation: compliance with telecommunications regulation and other legal requirements
- Consent: for marketing communications, precise location and non-essential cookies
5. Information sharing and disclosure
We do not sell your personal information to third parties. We share information only in the circumstances below.
5.1 Service providers and business partners
- Cloud hosting and data storage providers
- Payment gateway providers
- Analytics platforms, including Google Analytics and Firebase
- Customer support tools
5.2 Legal and regulatory requirements
- The Pakistan Telecommunication Authority (PTA)
- Law enforcement agencies
- Valid subpoenas, court orders or other legal process
- Emergency situations involving imminent danger to life
6. Data retention
- Active accounts: retained while your account remains active
- Inactive accounts: retained for 12 months after last activity, then deleted
- Transaction records: retained for 7 years to comply with financial regulations
- Call detail records: retained for 12 months as required by PTA regulations
7. Data security
- TLS/SSL encryption for data in transit
- AES-256 encryption for data at rest
- Multi-factor authentication for employee access
- Continuous security monitoring
- Regular security audits and assessments
8. International data transfers
Your personal information may be transferred to, stored in and processed in countries other than Pakistan. Where this occurs we put appropriate safeguards in place, including Standard Contractual Clauses and other approved transfer mechanisms.
9. Third-party services and links
Our Service may integrate with, or link to, third-party services. We are not responsible for the privacy practices of those services and we encourage you to review their privacy policies.
10. Your privacy rights
- Right of access: confirmation of processing and access to your personal data
- Right to rectification: correction of inaccurate or incomplete information
- Right to erasure: deletion of your personal data
- Right to restrict processing: limiting how we process your data
- Right to data portability: receiving your data in a portable format
- Right to object: objecting to processing based on legitimate interests
- Right to withdraw consent: withdrawing consent at any time
11. Account and data deletion
You can request deletion of your CallEazy account and the personal data associated with it at any time:
- In the app: open Settings → Account → Delete account and confirm the request.
- By email: write to info@createchagency.com from the email address registered to your account, with the subject line "Account deletion request".
What is deleted: your profile, contact details, identification documents, saved payment preferences, call and message history, and any virtual numbers or eSIM plans attached to the account.
What is retained, and why: transaction records are held for 7 years to satisfy financial regulations, and call detail records for 12 months as required by PTA regulations. These are retained in restricted-access systems and are not used for any other purpose.
Timing: requests are acknowledged within 7 days and completed within 30 days.
12. Children's privacy
Our Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children under 18. If we become aware that we have collected such information, we will take immediate steps to delete it.
13. California privacy rights (CCPA)
If you are a California resident you have additional rights under the California Consumer Privacy Act, including the right to know, the right to delete and the right to opt out of the sale of personal information. We do not sell personal information as defined by the CCPA.
14. European privacy rights (GDPR)
If you are located in the European Economic Area, the United Kingdom or Switzerland, you have additional rights under the General Data Protection Regulation. CREATECH INFORMATION TECHNOLOGIES (PRIVATE) LIMITED is the data controller for your personal information.
15. Pakistan-specific provisions
- Electronic Transactions Ordinance, 2002
- Prevention of Electronic Crimes Act, 2016
- Pakistan Telecommunication (Re-organization) Act, 1996
- PTA regulations and directives
16. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. When we make material changes we will update the "Last updated" date above and notify you through the application or by email. Continued use of the Service after changes take effect constitutes acceptance of the revised Privacy Policy.
17. Contact us
General privacy enquiries
CREATECH INFORMATION TECHNOLOGIES (PRIVATE) LIMITED
Flat No. 1205, Floor No. 12, Block No. 04, Khudadad Heights, Sector E-11, Islamabad Urban, Islamabad Capital Territory, Pakistan
Email: info@createchagency.com
Phone: +92 312 9247233
Data Protection Officer
Email: fawadanwar@createchagency.com
Phone: +92 312 9247233
Privacy rights and deletion requests
Email: info@createchagency.com