How VirsaTel collects, uses, stores and shares data across our website and the Mobility Management Portal.
VirsaTel is a trade name of Summit Ventures Group LLC, a Colorado limited liability company with offices at 1800 Wazee St., Floor 3, Denver, CO 80202.
This policy covers two things: the public website at virsatel.com, and the VirsaTel Mobility Management Portal (the "Portal") at vmm.virsatel.com, which our customers use to manage their wireless accounts.
If you are a VirsaTel customer, your signed Wireless Consulting and Services Agreement governs our handling of your data. This policy describes our practices and includes the Subprocessor list that agreement refers to. Where the two differ, your signed agreement controls.
To deliver the Services and operate the Portal, we collect, store and process:
Line-level records may include the name of an employee assigned to a wireless line, where the customer provides it. That information belongs to our customer, and we process it on their instructions.
If you browse virsatel.com, request a demo, use the savings estimator or submit a contact form, we collect the information you enter (typically name, business email, company, phone and your message), along with standard analytics data described in section 11.
We do not manage consumer or personal wireless accounts. We do not collect payment card numbers directly; card details are entered into and held by our payment processor. Carrier portal credentials that a customer provides are used operationally by our staff and are not retained in the Portal database.
We use customer data solely to:
We do not sell, rent, or share customer data with third parties for marketing purposes. We do not use customer account data to train machine learning models.
We engage third-party service providers ("Subprocessors") to host, operate and support the Portal and related infrastructure. Customer data may be shared with these providers solely to perform services on our behalf. All Subprocessors are bound by data protection obligations no less protective than those in our customer agreements.
| Subprocessor | Purpose | Data involved |
|---|---|---|
| Anthropic | AI language model powering in-portal assistant features | A limited snapshot of account data per session. See section 5. |
| Supabase | Database, authentication and file storage for the Portal | All Portal data |
| Vercel | Application hosting and content delivery for the Portal | Data in transit, application logs |
| Stripe | Payment processing and subscription billing | Billing contact details, payment methods, invoice amounts |
| Resend | Transactional email delivery, including invoices and notifications | Recipient name and email address, message contents |
| Microsoft | Entra ID single sign-on and mailbox integration, where a customer enables it | User identity, authentication events, related correspondence |
| Reusely | Device trade-in and buyback quoting | Device make, model and condition submitted for a quote |
| CoverageMap | Carrier network coverage lookups | Location or address submitted for a coverage query |
| CPN Hub | Wireless number and port eligibility lookups | Wireless numbers submitted for a lookup |
| Photon (Komoot) | Address lookup and geocoding | Addresses entered into order and shipping forms |
| WP Engine | Hosting for the virsatel.com website | Website form submissions, server logs |
| Sucuri | Website firewall and content delivery | Website request metadata, IP addresses |
| Google Analytics | Website traffic analytics | Website usage data. See section 11. |
We will notify customers of any material change to this Subprocessor roster at least thirty (30) days in advance.
The Portal includes assistant features that use a third-party AI language model provided by Anthropic. When you use one of these features, a limited snapshot of your account data relevant to your question is sent to that provider in order to generate a response.
Data sent to our AI provider is used only to answer the request in that session. It is not used to train the provider's models, and it is not retained by us beyond what is described in section 7.
AI-generated output can be incomplete or incorrect. It does not replace your own verification of carrier data before you make a financial or operational decision.
Customer data is stored on our designated infrastructure, which includes the third-party cloud providers named in section 4. We maintain data in encrypted form at rest and in transit using commercially reasonable security standards.
We maintain administrative, technical and physical safeguards designed to protect customer data from unauthorized access, use or disclosure. These include at minimum:
Carrier portal credentials that a customer provides are accessed operationally by our staff and are not retained within the Portal database.
We retain customer data for as long as necessary to provide the Services and to meet our legal and financial recordkeeping obligations.
On termination or expiration of a customer agreement, data is handled according to this policy and any written instructions from the customer. A customer may request deletion of its data at any time by writing to its designated VirsaTel account manager, or to the address in section 13. Portal user accounts are permanently deleted on written request following termination.
On written request we will provide a customer with an export of its account data in CSV format. Each customer may request one export at no charge per agreement year; additional exports may be subject to a reasonable processing fee.
Where customer data includes personal data of Colorado residents, VirsaTel acts as a data processor under the Colorado Privacy Act, C.R.S. section 6-1-1301 et seq., and processes that data only in accordance with our customer's documented instructions and their agreement with us.
If you are an individual whose personal data appears in a customer's account, the customer is the controller of that data, and requests to access, correct or delete it should be directed to them. We will support our customer in responding.
If you submitted your details through our website, you may ask us to access, correct or delete them by contacting us at the address in section 13.
In the event of a confirmed security incident involving personal data or confidential information, we will notify the affected customer in writing as expeditiously as possible and in no event later than seventy-two (72) hours after discovery, consistent with Colorado H.B. 18-1128 and other applicable state breach notification laws.
virsatel.com uses Google Analytics to understand how visitors find and use the site. This sets cookies that collect pages viewed, approximate location derived from IP address, referral source, and device and browser type. We use this only in aggregate, to improve the website.
The Portal sets cookies that are strictly necessary for the service to work, including keeping you signed in and maintaining your session. These cannot be disabled while using the Portal.
Most browsers let you block or delete cookies. Blocking analytics cookies will not affect your ability to use the website.
We may update this policy as our services and our subprocessors change. The "last updated" date at the top of this page always reflects the current version. For material changes to the Subprocessor list in section 4, customers receive at least thirty (30) days' advance notice as described there.
Questions about this policy, or requests relating to your data:
Summit Ventures Group LLC dba VirsaTel
1800 Wazee St., Floor 3
Denver, CO 80202
info@virsatel.com
(720) 370-9249