Privacy boundaries

Data roles

• WeChat holds user WeChat accounts, call UI, and some session metadata.
• Your business server holds device–user bindings and business logs; store only what you need.
• WeChat VoIP calling cloud handles real-time transport and connection control; payload encryption follows TiRTC security mechanisms.
• Devices capture audio/video locally; disclose scope and purpose in your privacy policy.

Refer to TiRTC privacy boundaries for WeChat VoIP calling–related privacy and security posture.

Follow the Mini Program security guide for Mini Program privacy and safety.