Number masking supports data minimisation: the two parties on a call never see each other's phone numbers, sessions can expire, and recording is optional per number. That helps, but it does not make you GDPR or DPDP compliant on its own. Edesy makes no GDPR compliance claim; you stay responsible for your lawful basis, notices and data requests. This page is general information, not legal advice.
Number masking at a glance
Each party sees only the virtual number. Personal numbers are not shared with the other side.
Sessions can expire after a set number of minutes (up to 30 days) or a set number of calls, and can be ended through the API.
Recording is set per number. If you do not need audio, keep it off and keep only call logs.
Recordings are kept in encrypted cloud storage and opened through signed links.
Workspace members have owner, admin or member roles; API keys are shown once and can be revoked.
Sessions carry your own reference ID, so you can link calls to an order without sending names or addresses to Edesy.
Decide and document why you process phone numbers and, if you record, why you keep audio.
Mention masked calling and any recording in your privacy notice, and play or show a recording notice if you record.
Send only the two phone numbers and an opaque reference. Keep names and other details in your own system.
Plan how you will answer access and deletion requests. Contact Edesy support if a request covers call logs or recordings held by us.
Get started on the self-serve portal. Rs 1.50 per minute plus number rental. New accounts get a Rs 20 welcome credit; no card needed to sign up.