Privacy Policy

Account information

When you sign up, we collect your name, email address, business name, and billing information (processed by Stripe — we never store raw card numbers).

Business configuration

We store the information you provide to configure your AI agent: greeting message, business hours, service descriptions, FAQ content, and voice preferences.

Call data

When your AI agent handles a phone call we collect and store the caller’s phone number, call duration, a full transcript of the conversation, and an AI-generated summary. Audio recordings are processed by our AI voice technology provider in real time and are not stored by Voicesse after transcription.

Google Calendar data

If you connect Google Calendar, we store OAuth tokens (access token + refresh token) and your primary calendar ID. We use these tokens only to check availability and create, update, or delete appointment events on your calendar. We do not read, store, or share the content of existing calendar events.

Usage and log data

We automatically collect standard server logs: IP addresses, browser/device type, pages visited, and timestamps. This data is used for security and to diagnose errors.

Public demo widget

If you try our public demo on the website (no account required), we collect the website URL you provide, your email address, phone number, and IP address. We use this to generate a live demo agent and to enforce a limit of 3 free demos per person — it is not used for marketing unless you separately sign up for an account.

• Provision and operate your AI voice agent (routing calls, generating responses, booking appointments)
• Display call history, transcripts, and performance metrics in your dashboard
• Send transactional emails (account confirmation, password reset, billing receipts)
• Enforce usage limits and process subscription billing through Stripe
• Investigate abuse, detect fraud, and maintain platform security
• Improve our AI models and service quality using aggregated, anonymized data

We do not sell your data or your callers’ data to third parties. We do not use your data for advertising.

Opting out of AI model improvement: you can opt your business out of this use at any time from Settings → Privacy in your dashboard. This only controls whether your data is eligible for the separate, aggregated/anonymized improvement use described above. It does not affect the real-time processing your AI voice technology sub-processor performs to actually operate your agent during a call (see Section 3) — that processing is how the Service functions and can’t be opted out of while keeping the agent active.

To deliver our Service, we share data with the following sub-processors:

Each provider processes your data under their own privacy policy and data processing agreements.

We may engage additional sub-processors as we add features or change providers — for example, scheduling or point-of-sale integrations beyond Google Calendar, analytics or customer-support tooling, or a different underlying AI model provider. When we do, we will update this table before that sub-processor begins processing your data, and where the change is material we will also notify you as described in Section 12.

Your AI agent may record and transcribe phone calls. Every agent automatically discloses at the start of each call that it is an AI assistant and that the call may be recorded. Depending on your jurisdiction or use case, you may still be legally required to obtain additional consent beyond this baseline notice — you are responsible for complying with all applicable call recording and wiretapping laws, including but not limited to state two-party consent laws in the United States.

Voicesse does not currently offer a Business Associate Agreement (BAA) under HIPAA or an equivalent addendum for other regulated data regimes (such as the Gramm-Leach-Bliley Act or attorney-client privilege), and no such agreement is in place with our sub-processors on your behalf. Selecting an industry such as Healthcare, Dental, Legal, or Financial Services when configuring your agent affects its tone and capabilities only — it does not mean the Service is certified or configured to handle Protected Health Information or other regulated data for that industry. See our Terms of Service for the full restriction on submitting this category of data to the Service.

• Call transcripts and summaries — retained for 12 months from the date of the call, then automatically deleted.
• Account data — retained for as long as your account remains open. If you cancel a paid subscription, your account drops to the same minute allowance as a new free trial with no additional time limit, and your agent pauses once that allowance is used (the same way a new trial pauses when its minutes run out) unless you upgrade again. If you close your account entirely, we delete your account data within 60 days (see our Terms of Service) — this covers data we hold directly; it does not extend to the sub-processor-retained call audio or demo-widget data described below, which follow their own retention rules regardless of account status.
• Google Calendar tokens — deleted immediately when you disconnect the integration or close your account.
• Billing records — retained for 7 years as required by financial regulations.
• Call audio — the audio itself (as distinct from the transcript and summary we generate from it) is processed and retained by our AI voice technology sub-processor under its own retention configuration, which we currently set to retain indefinitely rather than on a fixed schedule. We are evaluating tightening this to match our 12-month transcript retention.
• Public demo widget submissions — the email, phone number, and IP address submitted through our public demo are retained indefinitely at this time, used only to enforce the per-person demo limit described above. We are evaluating a fixed retention schedule for this data.

You can request early deletion of your data at any time (see Section 8).

We use industry-standard safeguards: TLS encryption in transit, AES-256 encryption at rest (via Supabase), row-level security policies to isolate each tenant’s data, and short-lived access tokens. No method of transmission over the internet is 100% secure. In the event of a breach affecting your data we will notify you as required by applicable law.

Depending on where you are located, you may have rights to:

• Access (or “Right to Know”) — request a copy of the personal data we hold about you, including the categories collected, sources, and purposes
• Correction — correct inaccurate data
• Deletion — request that we delete your account and associated data (see Section 6 for what this does and doesn't cover)
• Portability — receive your data in a machine-readable format
• Objection — object to processing based on legitimate interests
• Restriction — restrict how we use your data while a dispute is resolved
• Opt-out of sale or sharing — we do not sell or share personal information as defined by the CCPA/CPRA or similar state laws, so there is nothing to opt out of today; this right applies in case that ever changes
• Limit use of sensitive personal information — request that we limit our use of sensitive personal information (as defined by the CPRA) to what is necessary to provide the Service

To exercise any of these rights, email privacy@voicesse.io. We will respond within 30 days (45 days where state law allows an extension).

Non-discrimination. We will not deny you service, charge you a different price, or provide a different level or quality of service because you exercised any of these rights.

Appealing a decision

If we deny your request in whole or in part, you may appeal by replying to our denial or emailing privacy@voicesse.io with “Appeal” in the subject line. We will respond to appeals within 45 days. If we uphold our original decision, we will explain why in writing and, where required by law, tell you how to submit a complaint to your state Attorney General or other applicable regulator.

If you’re a caller, not a Voicesse customer

If an AI agent using Voicesse answered a call from your phone number, you have the same rights described above over the call data we hold — the recording-derived transcript, call summary, and phone number tied to that call. Email privacy@voicesse.io from any address, and include the phone number the call came from if you can. We will locate and act on the request within 30 days. We do not require you to create an account or contact the business you called to exercise these rights.

We use one strictly necessary cookie, set by our authentication provider (Supabase), to keep you signed in across visits. It’s required for the Service to function and can’t be disabled while staying signed in — because it’s strictly necessary, no cookie consent banner is required for it under GDPR/ePrivacy rules.

A few lightweight preferences (like your light/dark theme choice) are still stored in your browser’s local storage rather than a cookie. We do not use analytics or advertising/marketing cookies of any kind.

Voicesse is a business tool intended for adults — our Terms of Service require every user to be at least 18. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us with personal data, contact us and we will delete it promptly.

Our servers are located in the United States. If you are accessing the Service from outside the US, your data will be transferred to and processed in the US. By using the Service, you consent to this transfer. Where required by law, we rely on Standard Contractual Clauses for EU/UK data transfers.

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by displaying a prominent notice in your dashboard at least 14 days before the changes take effect. Continued use of the Service after the effective date constitutes acceptance.

Questions, complaints, or data requests:
Voicesse
Email: privacy@voicesse.io