Privacy Policy

This policy explains what personal information Voceo AI Technologies Pvt. Ltd. collects, why we collect it, who we share it with, how long we keep it, and how you can ask us to delete it.

1. Which situation applies to you

Voceo provides AI voice and messaging software to businesses. We handle personal information in two different capacities, and your rights differ depending on which one applies to you.

Situation	Who decides how the data is used	Who to contact
You are a Voceo client, or you visit our website	Voceo. We are the Data Fiduciary.	Us, at privacy@voceo.app
You are a customer of a business that uses Voceo, and received a call or message from them	That business. They are the Data Fiduciary. We act only on their instructions, as a Data Processor.	That business first. We will help them respond.

If a business called or messaged you using Voceo and you want your information corrected or deleted, contact that business directly. They control the data and the instruction has to come from them. If you cannot reach them, write to privacy@voceo.app and we will pass it on and assist.

2. What we collect

From our business clients

Account details: name, work email, phone number, company name, role
Billing details: plan, invoices, transaction records, tax identifiers
Support communications: emails, tickets, feedback

Processed on behalf of our business clients. This is information about their customers, which the client supplies or which arises from conversations our software handles.

Name, phone number and other contact details the business holds
WhatsApp message content, media and documents sent or received
Voice call audio, recordings and transcripts, where the business has enabled them
Information a customer provides during a conversation, such as preferences, enquiry details or appointment choices
Delivery and engagement metadata: timestamps, delivery and read status, call duration, outcome

Collected automatically

IP address, device and browser type, operating system
Pages viewed, actions taken, timestamps
API and webhook activity, error logs, performance and security events

3. Why we collect it

To provide the service: place calls, send and receive messages, generate replies, record outcomes
To create and administer accounts, permissions and integrations
To bill accurately and meet tax obligations
To provide support and respond to queries
To monitor performance, diagnose faults and keep the service running
To detect and prevent fraud, abuse and security incidents
To comply with Indian law and respond to lawful requests

4. Who we share it with

We do not sell personal information, and we do not share it for advertising.

We share it with the following categories of provider, strictly as needed to run the service.

Category	Why
Cloud hosting and database providers	To store and run the platform
Messaging platform providers, including Meta Platforms and WhatsApp	To deliver and receive WhatsApp messages. Their own terms and privacy notices apply to that delivery.
Telephony and voice network providers	To place and receive phone calls
AI, speech recognition and speech synthesis providers	To understand what a customer said and generate a reply
Payment processors	To collect payment from our clients. We do not store full card details.
Professional advisers and authorities	Where legally required, or to establish or defend a legal claim

Each provider is bound by contract to protect the information and use it only to deliver their part of the service. We would also disclose information in connection with a merger, acquisition or sale of the business, subject to equivalent protection.

5. Artificial intelligence

We do not use our clients' conversations, call recordings or customer data to train or improve AI models, ours or anyone else's.

Conversation content is sent to AI providers only to produce a response in that conversation, and we use provider settings and contractual terms intended to prevent that content being used for their model training.

AI output can be wrong. Our clients are responsible for reviewing it and for any decision taken on the basis of it. Nothing our software produces should be relied on as legal, medical or financial advice.

6. How long we keep it

Retention is set in the agreement with each business client, because different industries and contracts require different periods.

Where an agreement does not specify a period:

Conversation data, recordings and transcripts are kept while the client's account is active, and deleted or anonymised within 90 days of the account closing
Operational logs and technical telemetry are kept for a shorter period, typically days to a few months
Billing, tax and audit records are kept for as long as Indian law requires
Information in routine backups is removed as those backups rotate out

A valid deletion request is actioned within 30 days. See our Data Deletion page.

7. How we protect it

Encryption of data in transit and at rest
Role-based access, so staff see only what their job requires
Separation between different clients' data
Access logging, monitoring and alerting
A documented process for responding to security incidents
Confidentiality obligations on everyone with access

No system is completely secure. If a breach affects personal information, we will notify affected clients and the relevant authority as Indian law requires.

8. Your rights

Under the Digital Personal Data Protection Act, 2023 and applicable Indian law, you may ask us to:

tell you what personal information we hold about you, and give you a copy
correct information that is wrong, incomplete or out of date
delete information we no longer need
act on the withdrawal of consent you previously gave
recognise someone you nominate to exercise these rights if you die or become incapacitated
address a grievance, which you may escalate to the Data Protection Board of India if we do not resolve it

Write to privacy@voceo.app. We may need to verify who you are before acting. We respond within 30 days.

If the information concerns a conversation you had with a business that uses Voceo, contact that business first. See section 1.

9. Grievance Officer

As required by the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 and the Digital Personal Data Protection Act, 2023:

Grievance Officer
Voceo AI Technologies Pvt. Ltd.
H.No.70, 3rd Floor, Preet Vihar, Madhuvan Colony
New Delhi 110092, India
CIN: U62099DL2026PTC465295
privacy@voceo.app

We acknowledge grievances within 48 hours and resolve them within 30 days.

10. Children

Our service is for businesses and is not intended for anyone under 18. We do not knowingly collect personal information from children. If you believe we have, write to privacy@voceo.app and we will delete it.

11. Where data is processed

We operate in India and host primarily in Indian data centre regions. Some providers we rely on operate outside India, so some information may be processed abroad. Where that happens we require equivalent protection by contract.

12. Changes to this policy

We may update this policy as our service changes. The date above shows the current version. If a change materially affects your rights, we will notify our clients by email or in the product.

13. Contact

Voceo AI Technologies Pvt. Ltd.
H.No.70, 3rd Floor, Preet Vihar, Madhuvan Colony
New Delhi 110092, India
CIN: U62099DL2026PTC465295
privacy@voceo.app