Privacy Policy

1. Introduction

Welcome to our AI Campaign Manager platform ("Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. By accessing or using our Service, you agree to this Privacy Policy.

We are a software agency providing AI-powered voice agent services for outbound campaigns. We are committed to protecting your privacy while delivering exceptional service.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, phone number, company name, and billing information
• Campaign Data: Prospect information (names, phone numbers, emails), campaign scripts, and objectives
• Communication Data: Call recordings, transcripts, SMS messages, and emails sent through our platform
• Integration Data: API keys and credentials for third-party services (Cal.com, OpenAI, Twilio), and access tokens for accounts you connect (such as Google)

2.2 Automatically Collected Information

• Usage Data: Platform activity, feature usage, campaign performance metrics
• Technical Data: IP address, browser type, device information, operating system
• Call Analytics: Call duration, success rates, conversation analytics, voice patterns
• Cookies: Session data, preferences, and authentication tokens

3. How We Use Your Information

We use collected information for the following purposes:

• Service Delivery: To provide, maintain, and improve our AI voice agent services
• Campaign Execution: To make outbound calls, send messages, and manage your campaigns
• AI Training: To improve our AI models and voice agent performance (anonymized data only, and never Google user data — see section 6)
• Analytics: To generate insights, reports, and campaign performance metrics
• Customer Support: To respond to inquiries and provide technical assistance
• Billing: To process payments and manage subscriptions
• Security: To protect against fraud, unauthorized access, and security threats
• Legal Compliance: To comply with applicable laws and regulations

4. AI Processing and Voice Data

Our Service uses artificial intelligence to power voice agents. This involves:

• Processing voice recordings through AI models (OpenAI, ElevenLabs, Google)
• Analyzing conversation transcripts for quality and performance improvement
• Using anonymized data to train and improve our AI models (excluding Google user data — see section 6)
• Storing call recordings for compliance and quality assurance purposes

Important: By using our Service, you consent to AI processing of voice data and grant us a royalty-free, worldwide license to use anonymized conversation data for AI training and service improvement purposes. This license never covers Google user data or anything derived from it (see section 6).

Third-party AI providers: for every AI provider we use (such as OpenAI and Anthropic), we opt out of allowing the provider to use the data we send it to train or improve its models.

5. Third-Party Service Providers

We share data with the following categories of third-party providers:

• AI Services: OpenAI, ElevenLabs, Google (voice and language processing)
• Communication: Twilio, LiveKit (voice infrastructure and telephony)
• Cloud Storage: Azure Blob Storage (call recording storage)
• Email: Mailgun (transactional emails)
• Integrations: Cal.com (appointment scheduling), Google (Contacts, only when you connect it — see section 6)
• Payment Processing: Payment gateway providers

These providers have access only to information necessary to perform their services and are obligated to protect your data.

6. Google User Data

If you connect your Google account to our Service (for example, "Connect Google Contacts"), we request read-only access to your Google Contacts. This section explains how we handle data we receive from Google.

• What we access: the names and phone numbers of the contacts in the Google account you connect.
• How we use it: only to recognize callers. When someone calls your business, we look up the caller's phone number in your Google Contacts so your voice agent can greet them by name and treat them as an existing customer.
• What we keep: your contacts are read at the time of each call and are not copied or stored by us. Only the result for that call (whether the caller was found, and their name) is saved with that call's record, like other call details.
• Sharing: we do not sell or transfer Google user data to anyone, and do not use it for advertising. The matched caller's name is passed to the AI provider handling that call (such as OpenAI) only to provide this feature; we have opted out of that provider using our data to train its models.
• No AI training: Google user data, and anything derived from it (including a caller's name in call transcripts, summaries and recordings), is never used to develop, improve or train AI models — ours or anyone else's — whether raw, anonymized or aggregated.
• Protection: the access token for your Google account is stored encrypted, all data is encrypted in transit (TLS), and access to it is limited to the systems that run your voice agent.
• Retention and deletion: when you disconnect your Google account we delete the stored access token immediately, and no further lookups are made. The per-call result (found / name) is kept with that call's record for the call-record retention period in section 7 and is deleted with it, or when your account is deleted. You can ask us at any time to delete it sooner, including from past calls, by writing to privacy@botpulse.dev.
• Human access: our staff do not read your Google data, except with your permission, for security purposes, or where required by law.
• Disconnecting: you can disconnect your Google account at any time from your VocoAgents account, by contacting us, or at myaccount.google.com/permissions. When you disconnect, we delete the stored access token.

VocoAgents' use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

7. Data Retention

We retain your information for the following periods:

• Account Data: For the duration of your account plus 30 days after deletion
• Call Recordings: Up to 2 years for compliance and quality purposes
• Campaign Data: Up to 1 year after campaign completion
• Analytics Data: Anonymized analytics may be retained indefinitely
• Billing Records: 7 years for tax and accounting purposes

You may request earlier deletion, subject to our legal obligations and legitimate business interests.

8. Your Rights

Subject to applicable law, you have the following rights:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your data (subject to retention requirements)
• Export: Download your data in a portable format
• Object: Object to processing of your data for certain purposes
• Withdraw Consent: Withdraw previously given consent

Note: Some rights may be limited by legal obligations, ongoing investigations, or legitimate business needs. We reserve the right to verify your identity before fulfilling requests.

9. Data Security

We implement industry-standard security measures including:

• Encryption of data in transit (TLS/SSL) and at rest
• Row-level security (RLS) on database access
• Regular security audits and monitoring
• Access controls and authentication mechanisms
• Secure cloud infrastructure

Disclaimer: While we strive to protect your data, no method of transmission or storage is 100% secure. You use our Service at your own risk.

10. Call Recording and Consent

Our Service records phone calls for quality, training, and compliance purposes. By using our Service:

• You represent that you have obtained all necessary consents to record calls in your jurisdiction
• You are responsible for compliance with local recording laws (one-party vs. two-party consent)
• You agree to include appropriate disclosures in your campaign scripts
• You indemnify us against claims arising from inadequate recording consent

Important: Call recording laws vary by jurisdiction. You are solely responsible for ensuring compliance.

11. Liability and Disclaimers

To the maximum extent permitted by law:

• We are not liable for data breaches caused by third-party providers
• We are not responsible for your compliance with telemarketing or privacy laws
• We do not guarantee the accuracy of AI-generated content or transcriptions
• You assume all risks associated with AI voice agent interactions
• Our liability is limited to the amount you paid us in the 12 months preceding any claim

12. Children's Privacy

Our Service is not intended for individuals under 18 years of age. We do not knowingly collect information from children. If you believe we have collected data from a child, please contact us immediately.

13. International Data Transfers

Your data may be transferred to and processed in countries outside your residence. By using our Service, you consent to such transfers. We ensure appropriate safeguards are in place for international transfers.

14. Changes to This Policy

We may update this Privacy Policy at any time. Material changes will be notified via email or platform notification. Your continued use after changes constitutes acceptance of the updated policy.

15. Governing Law

This Privacy Policy is governed by the laws of the jurisdiction where our company is registered, without regard to conflict of law principles. Any disputes shall be resolved in the courts of that jurisdiction.

16. Contact Us

If you have questions about this Privacy Policy or to exercise your rights, please contact us at:

privacy@botpulse.dev

Response time: Within 30 days