VOXY Privacy Policy

VOXY ("we", "us", "our") provides an AI-powered phone assistant service that answers calls, screens spam, books appointments, and summarizes conversations on behalf of individuals and businesses ("you", "your").

Contact: contact@voxyassistant.com

Depending on how you use VOXY, we collect:

• Account information: name, email address, phone number, business name (if applicable)
• Call data: caller phone numbers, call recordings, transcripts, AI-generated summaries, call duration and timestamps
• Calendar data: if you connect Google Calendar, we access event availability and create/modify calendar events on your behalf
• Business information (business accounts only): services, pricing, FAQs, hours, and other details you provide to help VOXY answer on your behalf
• Usage data: subscription tier, call volume, feature usage, device and browser information
• Payment information: processed by our payment provider; we do not store full card details ourselves

• To provide the service: answering calls, booking appointments, generating summaries requires processing call and calendar data
• Contractual necessity: to deliver the subscription you signed up for
• Legitimate interest: to improve the service, prevent abuse, and ensure security
• Consent: where required by law (e.g. connecting your Google Calendar, certain call recording disclosures)
• Legal obligation: to comply with applicable law, including call recording consent requirements

VOXY may record and transcribe phone calls to provide its service. Where required by law (including two-party consent states in the US and equivalent rules elsewhere), an audible disclosure is played at the start of a call informing the caller that the conversation may be handled or recorded by an AI assistant. Business account holders are responsible for ensuring their use of VOXY complies with call recording laws applicable in their jurisdiction and the jurisdictions of their callers.

VOXY's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We only access your Google Calendar data to check availability and create/manage appointments on your behalf
• We do not use this data for advertising purposes
• We do not transfer this data to third parties except as necessary to provide the calendar features of the service, or as required by law
• We do not allow humans to read this data except with your explicit consent, to investigate abuse, or to comply with legal obligations
• You can disconnect Google Calendar access at any time from Settings, which revokes VOXY's access to your calendar

To provide VOXY, we share necessary data with:

• Twilio (phone line and call routing)
• Vapi (voice AI processing during calls)
• Anthropic (Claude, for understanding and responding during calls)
• Google (Calendar integration, if connected)
• Supabase (database and infrastructure)
• Our payment processor (subscription billing)

Each of these providers processes data under their own privacy terms and applicable data processing agreements.

VOXY's infrastructure may process and store data in the United States and other countries. Where we transfer personal data from the EU/EEA, UK, or Switzerland to a country without an adequacy decision, we rely on appropriate safeguards such as Standard Contractual Clauses.

• Call recordings and transcripts are retained for as long as your account is active, unless you request earlier deletion
• Account data is retained until you delete your account or as required by law
• Abandoned signups without a completed profile have their associated phone number released automatically after a short grace period, and related data is not retained beyond what's needed for this process

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data ("right to be forgotten")
• Object to or restrict certain processing
• Request a copy of your data in a portable format
• Withdraw consent at any time (e.g. disconnecting Google Calendar)

To exercise these rights, contact us at contact@voxyassistant.com. California residents have additional rights under the CCPA/CPRA, including the right to know what personal information is collected and the right to opt out of the sale of personal information (VOXY does not sell personal information).

VOXY is not directed at children under 16, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

We use industry-standard measures to protect your data, including encryption of sensitive credentials (such as calendar connection tokens) and access controls limiting who can view stored data.

We may update this policy from time to time. Material changes will be communicated via email or an in-app notice.

Questions about this policy or your data: contact@voxyassistant.com