GDPR Compliance

Last updated: July 7, 2026

This statement explains how LimeCall approaches the General Data Protection Regulation (GDPR) and describes the rights available to individuals in the European Union and the United Kingdom. It should be read together with our full Privacy Policy, which sets out our data practices in detail.

Our commitment to GDPR

LimeCall, operated by PurpleRain Technologies Inc., supports the principles of the EU GDPR and the UK GDPR. We are committed to processing personal data lawfully, fairly, and transparently, to collecting only the data we need, and to keeping that data secure. We aim to make it straightforward for individuals to understand how their data is used and to exercise their rights.

Data controller and contact

The data controller responsible for personal data processed through LimeCall is PurpleRain Technologies Inc.

For any privacy or GDPR matter, you can contact us at support@limecall.com.

LimeCall is operated by PurpleRain Technologies Inc, a company incorporated in the State of California, United States.

Lawful bases for processing

We rely on one or more of the following lawful bases under the GDPR, depending on the activity:

• Consent. For example, when you opt in to marketing communications or allow non-essential cookies. You can withdraw consent at any time.
• Contract. For example, to create and manage your account and to provide the calling, messaging, and related services you request.
• Legitimate interests. For example, to secure our platform, prevent fraud and abuse, and improve our products, where those interests are not overridden by your rights.
• Legal obligation. For example, to meet tax, accounting, and other regulatory requirements that apply to us.

Your rights under GDPR

Subject to the conditions set out in the GDPR, you have the following rights:

• Access. To request a copy of the personal data we hold about you.
• Rectification. To ask us to correct data that is inaccurate or incomplete.
• Erasure. To ask us to delete your personal data in certain circumstances.
• Restriction. To ask us to limit how we process your data in certain circumstances.
• Data portability. To receive certain data in a structured, commonly used, machine readable format, and to have it transmitted to another controller where technically feasible.
• Objection. To object to processing based on our legitimate interests, and to object to direct marketing at any time.
• Withdraw consent. To withdraw consent at any time where we rely on it, without affecting processing carried out before withdrawal.
• Complaint. To lodge a complaint with a supervisory authority, such as your local data protection authority in the EU or the Information Commissioner's Office in the UK.

To exercise any of these rights, email us at support@limecall.com. We will respond within one month of receiving your request. Where a request is complex or we receive a number of requests, we may extend this period and will let you know if we do. We may also need to verify your identity before acting on a request.

Data we process and why

In the course of providing our services, we process data such as account and contact details, service usage and call or message metadata, billing information, and technical data such as device and log information. We use this data to provide and secure the service, to support and communicate with you, to handle billing, and to meet our legal obligations. For a full description of the categories of data we process and the purposes involved, please see our Privacy Policy.

Sub-processors and international transfers

We use vetted third party processors to help operate our service, and we require them to meet appropriate data protection standards. Where personal data is transferred outside the European Economic Area or the United Kingdom, we rely on Standard Contractual Clauses and equivalent safeguards to protect that data. You can find the list of our current sub-processors in the Service Providers and Sub-processors section of our Privacy Policy.

Data protection measures

We apply technical and organisational measures designed to protect personal data against unauthorised access, loss, or misuse. We follow the principle of data minimisation, collecting only the data we need for the purposes described in our Privacy Policy. We also apply retention limits, keeping personal data only for as long as it is needed for those purposes or to meet our legal obligations, after which we delete or anonymise it.

Contact

If you have any question about this GDPR statement, or if you would like to make a GDPR request, please contact us at support@limecall.com. LimeCall is operated by PurpleRain Technologies Inc, a company incorporated in the State of California, United States.