Privacy policy

Last updated: 2026-09-15.

Who we are

Team Contacts is operated by MB „Virtualus Startas“. Contact: info@virtualusstartas.lt.

What the service does

Administrators upload contact lists of their organization and share access codes. People who enter a code receive that list on their phone, where it is kept up to date. Contacts on phones are read-only.

Data we process

• Administrator accounts: the name, email address and profile picture provided by Google Sign-In, and the time of sign-in.
• Contact lists: the names, phone numbers, email addresses, job titles, departments, companies and notes that administrators upload. The administrator's organization decides what is uploaded and is the controller of that data; MB „Virtualus Startas“ processes it on their behalf.
• Access codes and usage: for each code we record when it was created and last used and which kind of client used it (for example iPhone or the Android app), so administrators can see which codes are in use.
• Connected devices: to apply the plan limit of an organization, each phone is counted through an anonymous device identifier: the Android app generates a random installation identifier, and each downloaded iPhone profile contains a unique user name. We store this identifier together with the organization, the code, the platform, and the first and last sync times. If the person types a name when connecting, that name is stored with the phone's record so the administrator can tell phones apart; it is optional. It contains no personal data, is not linked to a phone number or account, and is deleted automatically 90 days after the last sync. Administrators see only counts, never identifiers.
• Technical logs: IP addresses and request times are kept briefly for security, such as limiting repeated wrong codes.

The Android app

The app stores the access code and the downloaded list on the phone and writes the contacts into the phone's contact storage under its own account. It reads only the contacts it created itself. It sends the access code, the optional name typed on the connect screen and its anonymous installation identifier to the service to fetch updates; it does not upload the phone's own contacts, the phone number, or any other data. The camera is used only while scanning a QR code and no images are stored or sent.

Sharing

We do not sell or share personal data with third parties. Data is stored on servers in the European Union. Google receives the sign-in request when an administrator signs in.

Retention and deletion

Administrators can delete lists, codes and whole organizations at any time; deletion is immediate. Revoking a code stops the phones using it at their next sync. Uploaded spreadsheet files are not kept after import. Employees can remove the list from their phone by deleting the account or profile. A phone's record on the server is deleted automatically 90 days after its last sync, or within 30 days on request; see Delete your data for the steps.

Your rights

Under the GDPR you may request access, correction or deletion of your personal data. If your data was uploaded by your organization, contact your administrator first; you can also write to info@virtualusstartas.lt.