Privacy Policy
Last updated: May 2026 (DRAFT)
1. Introduction
VoiceOps (operated by [Company Name], “we”, “us”, “our”) provides autonomous AI-powered phone-call handling services to businesses and consumers. This Privacy Policy explains how we collect, use, disclose, and protect information when you use VoiceOps — whether as a business subscriber who routes calls through the platform or as a consumer who uses VoiceOps to place calls on your behalf.
This is a DRAFT document. It has not yet been reviewed by legal counsel and should not be relied upon as legal advice. It will be updated before the service launches publicly.
By using VoiceOps, you agree to the collection and use of information in accordance with this policy.
2. What We Collect
2.1 Account information
When you sign up for VoiceOps using Google OAuth, we receive your name, email address, and Google account identifier from Google. We do not receive your Google account password. We store this information to identify your account and to deliver service notifications.
2.2 Call recordings and transcripts
When VoiceOps handles a phone call on your behalf — whether answering an inbound call to your VoiceOps number or placing an outbound call at your instruction — we record the audio of the conversation and generate a text transcript. Recording and transcription are core features of the service: they enable you to review the outcome of every call.
Call recordings are held for [retention period — to be specified before launch] days and then automatically deleted. Transcripts are stored in our database and are associated with your account for the lifetime of your subscription plus a post-closure grace period (see Section 5: Data Retention).
2.3 Usage data
We collect metadata about every call processed through VoiceOps: call direction (inbound or outbound), timestamp, duration, caller phone number, call outcome (e.g. appointment booked, message taken, no answer), and the phone number provisioned to your account. We also collect general usage patterns within the VoiceOps dashboard, such as pages visited and features used, to help us improve the product. We do not sell any of this data to third parties.
3. Call Recording and Consent
VoiceOps is a call-recording service. All calls handled by VoiceOps — both inbound and outbound — are recorded. The VoiceOps voice agent is programmed to disclose, at the start of every call, that (a) it is an AI assistant and (b) the call is being recorded. This disclosure occurs before any information is collected from the other party.
Many jurisdictions require all parties to a telephone conversation to consent to recording before it takes place. These are commonly referred to as “two-party consent” or “all-party consent” laws. In the United States, such laws apply in California, Florida, Illinois, Maryland, Michigan, Montana, Nevada, New Hampshire, Oregon, Pennsylvania, and Washington, among others. Similar requirements exist in Canada, Australia, the United Kingdom, and various other countries.
It is the sole responsibility of the VoiceOps subscriber to ensure that their use of the service complies with all applicable recording-consent laws in the jurisdictions in which calls are made or received. VoiceOps’s built-in AI and recording disclosure is designed to facilitate consent, but we make no warranty that it satisfies the specific legal requirements of every jurisdiction or use case. You should obtain independent legal advice if you are uncertain about your obligations.
For outbound calls placed by VoiceOps on behalf of a consumer user, the agent similarly discloses its AI identity and the fact that the call is being recorded at the outset of the conversation.
4. How We Use Your Data
We use the information we collect for the following purposes:
- To provide and improve the VoiceOps service — answering and placing calls, generating transcripts, syncing confirmed appointments to your Google Calendar, and delivering call-outcome notifications via Telegram.
- To process your subscription and billing through Stripe, including issuing receipts and managing plan changes.
- To send you account-level communications, such as service updates and billing notices, to the email address associated with your account.
- To diagnose technical issues, monitor service reliability, and prevent abuse.
- To comply with applicable legal obligations, including responding to lawful requests from government authorities.
We do not use your call recordings or transcripts to train AI models without your explicit, separately obtained consent.
5. Data Retention
Call recordings are automatically deleted after [X days — to be specified before launch]. Transcripts and call metadata (timestamps, outcomes, phone numbers) are retained for the lifetime of your account plus [Y days] after your account is closed. Billing records (invoices, payment history) are retained for seven years as required by financial regulations.
You may request deletion of your personal data at any time by contacting us at contact@voiceops.ai. We will fulfil deletion requests within 30 days of receipt, subject to any legal obligations to retain data and to any legitimate interests in retaining data to resolve disputes or enforce our agreements.
6. Third-Party Processors
VoiceOps uses the following third-party service providers to operate the platform. In each case, we share only the data necessary to deliver the relevant service, and each provider is subject to data-processing terms consistent with applicable data protection law.
- Telnyx LLC — telephony infrastructure, call routing, phone-number provisioning, and voice AI processing. Calls are routed through Telnyx’s network. Caller phone numbers and call audio are processed by Telnyx. Telnyx Privacy Policy.
- Stripe, Inc. — payment processing and subscription management. Stripe handles payment card data and billing information on our behalf. We do not store full payment card details on our servers. Stripe Privacy Policy.
- Deepgram, Inc. — speech-to-text transcription. Audio from calls may be sent to Deepgram’s API to generate text transcripts. Deepgram Privacy Policy.
- ElevenLabs, Inc. — text-to-speech voice synthesis. Text responses generated by the AI agent may be sent to ElevenLabs to produce natural-sounding speech for delivery to callers. ElevenLabs Privacy Policy.
- Anthropic, PBC — large language model (AI) processing. Conversation context and structured prompts are sent to Anthropic’s API to generate the agent’s responses. Anthropic does not use API inputs to train its models by default. Anthropic Privacy Policy.
- Google LLC — Google Calendar integration (if you connect your calendar) and Google OAuth for account sign-in. When you authorise Google Calendar access, VoiceOps can create and read calendar events on your behalf. Google OAuth data is used only to authenticate your account. Google Privacy Policy.
7. Your Rights
Depending on your jurisdiction, you may have one or more of the following rights regarding your personal data:
- Access: the right to request a copy of the personal data we hold about you.
- Correction: the right to request correction of inaccurate or incomplete personal data.
- Deletion: the right to request that we delete your personal data, subject to legal retention obligations.
- Portability: the right to receive your personal data in a structured, machine-readable format and to transfer it to another controller.
- Objection / restriction: the right to object to certain processing activities or to request that we restrict processing while a complaint is considered.
To exercise any of these rights, please contact us at contact@voiceops.ai. We will respond within 30 days. If you are located in the European Economic Area or the United Kingdom, you also have the right to lodge a complaint with your local data protection supervisory authority.
8. Contact
For privacy-related questions, data requests, or complaints, please contact us:
Email: contact@voiceops.ai
[Company legal name and registered address — to be completed before launch.]