Privacy Policy

Introduction

This Privacy Policy describes how our AI-powered voice communication platform ("we," "us," or "our") collects, uses, and protects your information. We are committed to protecting your privacy and ensuring the security of your data.

By using our services, you agree to the collection and use of information in accordance with this policy.

Information We Collect

Account Information

• Email address and password (encrypted)
• Company name and organization details
• User profile information (name, role)
• Login activity and timestamps

Contact and Call Data

• Phone numbers and contact information
• Call transcripts and recordings
• Call metadata (duration, timestamps, status)
• Custom contact fields as configured by you

Agent Configuration Data

• System prompts and conversation settings
• Voice and language preferences
• Custom webhook configurations
• API keys and secrets (encrypted with AES-256-GCM)

Usage and Technical Data

• IP addresses and browser information
• Device and operating system details
• Session data and application logs
• Performance metrics and error reports

How We Use Your Information

We use the collected information for the following purposes:

• Providing and maintaining our voice AI services
• Processing and routing voice calls
• Generating call transcripts and insights using AI language models
• Executing custom webhooks and integrations as configured
• Sending post-call communications (email, SMS) as configured
• Monitoring service performance and quality
• Detecting and preventing fraud or security incidents
• Complying with legal obligations and regulations
• Improving our services and developing new features

Data Storage and Security

We implement industry-standard security measures to protect your data:

• All data is encrypted in transit using TLS 1.2+ (HTTPS)
• Passwords are hashed using bcrypt with secure salt
• API keys and secrets are encrypted at rest using AES-256-GCM
• Database access is restricted and monitored
• Call recordings are stored in secure cloud storage with access controls
• Sensitive configuration data is managed via secure secrets management
• Regular security audits and vulnerability assessments
• Multi-factor authentication available for user accounts

Third-Party Services

Our platform integrates with third-party services to provide functionality. Your data may be processed by:

• Telephony providers for call routing and management
• Speech-to-text services for transcription
• Text-to-speech services for voice synthesis
• AI language model providers (e.g., Google Gemini) for conversation processing
• Cloud infrastructure providers for hosting and storage
• Email and SMS services for communications
• Monitoring and analytics platforms

These services operate under their own privacy policies. We carefully select partners that maintain appropriate data protection standards.

Your Rights

You have the following rights regarding your personal data:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your data (subject to legal obligations)
• Export: Download your call data and transcripts
• Restriction: Limit how we process your data
• Objection: Object to processing of your data
• Portability: Receive your data in a structured format

Data Retention

We retain your data as follows:

• Account data: Retained while your account is active
• Call recordings: Stored for 7 days by default (configurable)
• Call transcripts: Retained indefinitely unless deleted by you
• Contact information: Retained until manually deleted
• Temporary session data: Automatically cleared after 1 hour
• Logs and metrics: Retained for up to 90 days

International Transfers

Your data may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for international data transfers, including:

• Standard contractual clauses approved by regulatory authorities
• Data processing agreements with all third-party providers
• Compliance with applicable data protection regulations
• Regular assessment of data transfer mechanisms

Updates to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the updated policy on our platform
• Updating the "Last Updated" date
• Sending email notifications for significant changes
• Requiring acceptance of updated terms upon login

Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us through your account dashboard or reach out to your account administrator.

For data protection inquiries, you may also contact your organization's data protection officer if one has been designated.