Last updated: 27 October 2026 - Provider: Circle Of Bytes ApS (circleofbytes.com)
OrgConnect is an enterprise application that gives an organization's employees an offline-capable corporate directory and a corporate caller ID for known work numbers. This policy explains what data OrgConnect processes and how. OrgConnect is provided to organizations that license the OrgConnect service; your employer is the data controller for your directory data, and Circle Of Bytes ApS acts as the data processor on the employer's behalf.
You sign in with your existing Microsoft Entra (Azure AD) work account. Authentication is delegated to Microsoft; OrgConnect never sees, receives, or stores your password. We receive an access token and standard identity claims (such as your user object identifier and tenant identifier) needed to authorize you and deliver your organization's directory.
If your organization has not activated the OrgConnect service, you can still use Personal mode.
After you sign in and approve Microsoft's consent prompt, the app reads, directly on your device
and with your own delegated permission, your basic profile, your organization's basic user list (names, work
email, work phone, job title, department), the people you work with most, and your Outlook work contacts
(Microsoft Graph permissions User.Read, User.ReadBasic.All, People.Read
and Contacts.Read). Once Personal mode is active, this data goes only from Microsoft to your
device. It is not sent to, stored on, or processed by any OrgConnect or Circle Of Bytes server, and Circle Of
Bytes is not a data processor for it. The initial sign-in check may send your sign-in token and the
per-installation device identifier to the OrgConnect service to confirm whether your organization has
activated it; no directory data is sent. It is stored encrypted on your device and removed when you sign out.
To show a corporate name on an incoming call, OrgConnect writes a local list of known work numbers and
short labels into an on-device Call Directory extension, which you enable once in
Settings > Phone > Call Blocking & Identification. Apple's CallKit performs the match
entirely on the device. OrgConnect and Circle Of Bytes never see who calls you.
Data is used solely to provide the directory and caller-ID features to you as an authorized employee. OrgConnect does not sell your data, does not use it for advertising, and does not track you across apps or websites. There is no third-party advertising or analytics SDK that identifies you.
If you choose Save to Contacts on a colleague's profile, OrgConnect writes that one colleague into your device Contacts after you grant permission. OrgConnect never reads your device address book.
Directory data is processed on Microsoft Azure infrastructure used to operate the OrgConnect service. We do not share your personal data with any party except as necessary to provide the service to your employer, or where required by law.
OrgConnect does not create a separate account for you; your identity is your employer-managed Microsoft work account, whose lifecycle (creation, changes, deletion) is governed by your organization. To remove OrgConnect's data from your device at any time, use Sign out of all in the app, which deletes all locally stored data, and/or delete the app. For requests about the underlying directory data (access, correction, deletion), contact your organization (the data controller); we assist controllers with such requests as their processor. You may also contact us at the address below.
On-device data persists only while you are signed in and is removed on sign-out. Service-side, directory snapshots are retained only as needed to operate the service and are refreshed from your organization's directory; diagnostics are retained for a limited period for reliability purposes.
OrgConnect is a workplace tool intended for an organization's employees and is not directed to children.
We may update this policy; material changes will be reflected by the "last updated" date above.
Circle Of Bytes ApS - [email protected] - circleofbytes.com