Privacy Policy

Last updated: April 26, 2026 · Operator: CloudVoice AI · Contact: [email protected]

This policy is informational and not legal advice. For regulated use cases (including healthcare), you should involve qualified counsel and execute appropriate agreements before processing PHI.

What we collect

How we use data

We use the above to provide, secure, and improve the service: routing calls, running AI pipelines, billing usage where applicable, customer support, and legal compliance.

Calls, recording, and AI

Voice sessions may be recorded, transcribed, and processed by automated systems to operate the Service. If you use the product for outbound or inbound telephony, you are responsible for obtaining and documenting any consent, notice, and opt-out required in your jurisdiction (including two-party consent states and country-specific rules). We do not provide legal advice on call recording.

Cookies and similar technologies

The dashboard and marketing site may use cookies, local storage, and similar technologies for authentication, preferences, security, and limited analytics. You can control cookies through your browser settings; blocking required cookies may limit functionality.

US state privacy rights

Residents of certain US states (for example California, Colorado, Virginia) may have rights to know, access, delete, or opt out of certain processing. Contact us to exercise applicable rights. We may verify requests and may decline requests where the law allows.

International transfers

If you access the Service from outside the United States, your information may be processed in the United States and other countries where we or our vendors operate, which may have different data protection laws than your country.

Where data is processed

The product is built on Cloudflare (Workers, Durable Objects, D1, KV, Vectorize, and related services) and integrated telephony and AI vendors you enable (for example SignalWire for PSTN, and speech/LLM providers configured on your Worker). Data may be processed in Cloudflare’s global network consistent with your configuration and agreements.

Retention

We retain data as needed to operate your account and as required by law. Exact retention can depend on your plan, configuration, and legal obligations. You may request deletion or export where applicable by contacting us (subject to technical and legal limits).

Healthcare / HIPAA

HIPAA-ready path. For customers who need HIPAA-aligned processing, a Business Associate Agreement (BAA) is available through Cloudflare when your Cloudflare account is on an eligible plan and you have executed Cloudflare’s BAA as Cloudflare offers it. Upgrading your Cloudflare plan to one that supports HIPAA/BAA is part of that path.

Executing a BAA and configuring services appropriately is your responsibility together with ours where we agree in writing. We do not treat this page as a BAA or as a determination that any particular deployment is compliant.

Subprocessors

You acknowledge that the service relies on infrastructure and vendors you or we configure, including without limitation Cloudflare, authentication providers (e.g. Clerk), telephony providers (e.g. SignalWire), and AI/speech providers (e.g. speech-to-text, LLM, text-to-speech) as enabled in your environment.

Security

We implement reasonable technical and organizational measures appropriate to the service. No method of transmission or storage is 100% secure.

Your rights

Depending on your jurisdiction, you may have rights to access, correct, delete, or restrict processing of personal data. Contact us at the email above. We may need to verify your request.

Children

The service is not directed at children under 13, and we do not knowingly collect their personal information.

Changes

We may update this policy from time to time. We will post the updated version on this page and revise the “Last updated” date.