Oncall Privacy Policy

Last updated: 2026-07-18

Oncall is an incident-response and on-call scheduling tool operated by Observiply ("we", "us"). This policy describes what data the Oncall apps (web, iOS, and Android) collect and how it is used.

Information we collect

• Account identity: name, email address, username, and team/group membership, provided by your organization's identity provider when you sign in.
• Contact methods: phone numbers or other destinations you or your organization add so Oncall can reach you for on-call notifications (call, text, or push).
• Incident and schedule data: the incidents, triggers, schedules, and related content your organization manages in Oncall.
• Push notification tokens: a device token issued by Apple (APNs) or Google (FCM) used to deliver on-call alerts to your device.
• Diagnostic data: standard request logs (e.g. IP address, timestamps) used for security and reliability. We do not log email addresses or contact destinations.

How we use this information

Data is used solely to operate Oncall: authenticating you, routing on-call notifications, displaying incident and schedule information to authorized teammates, and maintaining the security and reliability of the service. We do not sell your data or use it for advertising.

Who can see your data

Access is controlled by your organization's role-based permissions. Email addresses and contact destinations are visible in full only to your organization's administrators and to you (for your own contact methods); other teammates see a redacted form.

Third-party processors

We use the following services to operate Oncall, each of which processes a limited slice of the data above on our behalf:

• Apple Push Notification service and Google Firebase Cloud Messaging — device push delivery.
• SMS/voice provider (Twilio) — call and text notification delivery, when configured by your organization.
• Your organization's identity provider — authentication.

Data retention

Data is retained for as long as your organization's Oncall account is active, or as required to comply with legal obligations, resolve disputes, and enforce agreements.

Children's privacy

Oncall is a business tool intended for use by adult employees of organizations and is not directed at children.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the date above.

Contact us

Questions about this policy or your data can be sent to [email protected].