Privacy Policy

Voicecon is a product of VConekt LLC, a limited liability company registered in the State of Wyoming, United States (“Voicecon”, “we”, “us”). We provide a platform for building AI voice agents, connecting them to phone numbers and business apps, and automating work with no-code workflows. This Privacy Policy explains how we handle personal information when you visit voicecon.ai, use the Voicecon application at app.voicecon.ai, call the Voicecon API, or interact with an agent or chat widget that runs on Voicecon.

We play two different roles, depending on whose data it is:

• Account data. For information about our customers and their team members (for example, names, email addresses and billing details), Voicecon decides how the data is used and acts as the controller.
• Customer data. For information our customers process through Voicecon (for example, the voices, phone numbers, transcripts and messages of the people who call or chat with their agents, and the documents they upload), our customer is the controller. Voicecon acts as a processor or service provider and processes that data only on the customer's behalf and according to their instructions.

Information you give us

• Account details: your name, email address and password. We store only a salted bcrypt hash of your password, never the password itself. You can also add a profile photo, which we re-encode and strip of metadata such as location.
• Sign-in with Google or Apple: if you choose either, we receive your name, email address and a provider account identifier from that provider.
• Company and onboarding details: company name, industry, company size, website, your assistant's name, preferred language and what you want your assistant to do.
• Workspace and team information: workspace names, the email addresses of teammates you invite, and the roles you assign them.
• Billing information: your plan, subscription status and billing history. Card details are entered directly with our payment processor, Stripe. Voicecon does not receive or store full card numbers.
• Content you create: agent settings, prompts, greetings, call flows, workflows, tools, knowledge base files and text, chat widget settings and similar configuration.
• Integration credentials: the OAuth tokens, API keys and webhook URLs you provide to connect third-party apps. We encrypt these at rest.
• Communications: messages you send to support, and your email address if you join our waitlist or mailing list.

Information created when your agents are used

• Call data: caller and called phone numbers, call times, duration, status and direction, audio recordings, transcripts, AI-generated summaries, detected sentiment, topics and intent, and per-call cost details.
• Chat widget data: messages exchanged with a website chat widget, a random visitor identifier stored in the visitor's browser so a conversation can continue, and the browser's user-agent string.
• Workflow and tool data: inputs, outputs and logs of workflow runs and tool calls, which can include information passed to or returned by connected apps.

Information collected automatically

• Technical and log data: IP address, browser and device type, pages and API endpoints requested, timestamps and error details. We use it to operate, secure and troubleshoot the service, including rate limiting.
• Browser storage: see Cookies and browser storage.

We use personal information to:

• provide, maintain and secure Voicecon, including answering and placing calls, running workflows and storing call history;
• create and verify accounts, including sending email verification codes, and manage workspaces and permissions;
• process subscriptions, free trials and usage against plan limits;
• send service messages such as security alerts, invitations, billing notices and changes to our terms;
• respond to support requests;
• monitor performance, fix problems and prevent fraud, abuse and violations of our Terms of Service;
• send product news and marketing emails if you have signed up for them. You can unsubscribe at any time;
• comply with legal obligations and enforce our rights.

Legal bases (EEA, UK and similar jurisdictions)

Where laws such as the GDPR apply, we rely on: performance of a contract to provide the service you signed up for; legitimate interests to secure, support and improve Voicecon and to send relevant service updates; consent where required, for example for marketing emails; and legal obligation where the law requires us to process or keep information.

To run a voice or chat agent, Voicecon processes conversation content in real time:

• caller audio is sent to a speech-to-text provider to produce a live transcript;
• the transcript, the agent's instructions and any relevant knowledge base content are sent to a large language model provider to generate the next reply;
• the reply is sent to a text-to-speech provider to produce the agent's voice;
• after a call, the transcript is sent to a language model to create a summary and to detect sentiment, topics and intent;
• knowledge base documents are split into passages and converted into embeddings so agents can search them.

AI output can be inaccurate. Summaries, sentiment and other insights are generated automatically and should be reviewed before important decisions are based on them. Voicecon does not use these outputs to make decisions that have legal or similarly significant effects on individuals. Customers decide how to use them.

We do not sell personal information, and we do not share it for cross-context behavioural advertising. We share information only as described below.

Service providers

We use trusted providers to run Voicecon. They may process personal information only to provide their services to us.

Apps you connect

When you connect an integration, such as a CRM, calendar, messaging tool or storage service, and configure an agent tool or workflow to use it, Voicecon sends the data you specify to that app. The app's own privacy policy governs how it handles that data.

Your workspace

Information in a workspace, including calls, recordings and transcripts, is visible to members of that workspace according to the roles the workspace owner and admins assign.

Legal and business reasons

• to comply with law, regulation, legal process or an enforceable government request;
• to protect the rights, safety and property of Voicecon, our customers or others, including to prevent fraud and abuse;
• as part of a merger, acquisition, financing or sale of assets, subject to this policy's protections continuing to apply;
• with your consent or at your direction.

Voicecon does not use advertising cookies or third-party analytics trackers. We use a small amount of browser storage that the service needs to work:

• Sign-in session: the application keeps your access tokens in your browser's local storage so you stay signed in.
• Preferences: we remember interface choices, such as unsaved editor drafts, in local storage.
• Chat widget: the widget stores a random visitor identifier in the visitor's browser so a conversation can continue on later pages.
• Third-party services: Stripe Checkout and Google or Apple sign-in may set their own cookies when you use them, under their own policies.

You can clear local storage and cookies in your browser settings. If you do, you will be signed out and widget conversations will restart.

We keep personal information for as long as your account is active, or as long as needed to provide the service, and then for as long as necessary for the purposes described in this policy. In particular:

• Customer data, such as recordings, transcripts, chat logs and knowledge base files, is kept until the customer deletes it in the application or asks us to delete it, or until the account is closed and the data is deleted as described below.
• Closed accounts: when you delete your account in Settings, we immediately deactivate it, sign out every session and cancel active subscriptions on workspaces you own. We keep the deactivated account's data for 30 days so that an accidental deletion can be reversed, and then permanently erase it, except where we must keep records for legal or accounting reasons. To have it erased sooner, email [email protected].
• Billing and transaction records are kept for as long as tax, accounting and other laws require.
• Logs are kept for a limited period for security and troubleshooting.

We use administrative, technical and physical safeguards appropriate to the data we handle, including:

• encryption in transit with HTTPS and HTTP Strict Transport Security;
• bcrypt hashing for passwords and API keys, and encryption at rest for integration credentials;
• role-based access control within workspaces, and scoped API keys;
• email verification at sign-up, and immediate session invalidation when you change your password or delete your account;
• rate limiting and security headers to reduce abuse.

No system is completely secure. If we learn of a security incident that affects your personal information, we will notify you and the authorities as the law requires. Please report suspected vulnerabilities to [email protected].

Depending on where you live, you may have the right to:

• access the personal information we hold about you and receive a copy;
• correct inaccurate information;
• delete your information;
• restrict or object to certain processing, including direct marketing;
• receive your information in a portable format;
• withdraw consent where we rely on it, without affecting earlier processing;
• not be discriminated against for exercising these rights.

You can update most account information yourself in Settings, export call data as CSV from Analytics, and delete your account from your profile. For other requests, email [email protected] from the address on your account. We may need to verify your identity. We will respond within the time the law requires, usually within 30 days. You may also have the right to complain to your local data protection authority.

California residents: in the past 12 months we have collected the categories of information described in Information we collect for the business purposes in How we use information. We do not sell or share personal information as those terms are defined under California law, and we do not use sensitive personal information to infer characteristics about you.

If your request concerns data that a Voicecon customer controls, such as a recording of a call you made to a business, we will refer you to that customer and support them in responding.

Customers who use Voicecon to talk with their own callers and website visitors are responsible for complying with the laws that apply to them, including:

• giving any notice and obtaining any consent that call-recording and wiretap laws require, which in some places means every party's consent;
• disclosing that callers are speaking with an AI system where the law requires it;
• obtaining consent for automated or prerecorded calls, and honouring do-not-call and opt-out requests;
• providing their own privacy notice that explains how they use Voicecon;
• not uploading sensitive data, such as health, financial account or government ID information, unless they have a lawful basis and the appropriate agreements in place.

See our Terms of Service for the full set of obligations.

Voicecon and our service providers may process information in the United States and other countries whose data protection laws may differ from those where you live. When we transfer personal information from the EEA, the UK or Switzerland, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses, or on another valid transfer mechanism.

Voicecon is a business service and is not directed to children. We do not knowingly collect personal information from children under 16. If you believe a child has provided personal information to us, contact [email protected] and we will delete it.

We may update this Privacy Policy from time to time. When we do, we will change the “Last updated” date above. If a change is material, we will give you notice before it takes effect, by email or in the application. Continuing to use Voicecon after an update takes effect means you accept the updated policy.

The data controller for the information described in this policy is VConekt LLC. For questions about this policy or to exercise your privacy rights, email [email protected]. For anything else, including legal notices and security reports, email [email protected]. You can also write to us at:

• VConekt LLC, 30 N Gould St Ste 25084, Sheridan, WY 82801-6317, USA
• VConekt LLC, Pakland Tower 2, Unit 308, New Blue Area, Islamabad, Pakistan
• Telephone: +1 210 444 2037

If you are in the EEA or the UK and believe we have not addressed your concern, you may also complain to your local data protection authority.