Privacy Policy

Our customers' calls. Businesses use VocalMax to ring their own leads and customers with AI voice agents and to follow up with them. For that data (the people they call, the recordings, transcripts and messages) the business is in charge of it (the “controller”), and we handle it only on their instructions to provide the service (as their “processor”). If you received a call or message from a business using VocalMax, contact that business first about your data; we will help them answer you.

Our own data. For our website, demo requests, our customers' accounts and billing, and our own sales calls and messages, VocalMax is the controller.

• Account details: name, work email, company, sign-in records, settings.
• Billing: plan, credits and payment history. Card details are handled by Stripe; we never see or store the full card number.
• Lead and call data (for our customers): the names, phone numbers, emails and other details a customer uploads; call recordings and transcripts; AI summaries and outcomes (for example interested, callback, do-not-call); follow-up messages sent and received by WhatsApp or email.
• Demo and contact requests: what you enter in our forms (name, email, phone, company) and your consent choices.
• Website use: basic technical data (IP address, browser, pages visited) and, where you allow it, advertising cookies such as the Meta Pixel.

• To provide the service: place calls, record and transcribe them, judge the outcome, send follow-ups, and show results (contract with our customer).
• To run accounts, billing and support (contract).
• To keep the service safe: stop fraud and abuse, enforce do-not-call requests, and keep audit logs (legitimate interests, and legal obligations).
• To answer demo requests and, if you agreed, to send you marketing (consent, which you can withdraw at any time).
• To improve the service, using our customers' test calls and our own calls; we do not sell personal data.

Calls are handled by AI voice agents. Speech is turned into text, an AI model decides what to say, and a synthetic voice speaks it. After the call, AI models summarise it and judge the outcome. A business's “AI team” in VocalMax may read its calls, draft scripts and follow-up messages, and suggest actions; changes are approved by the business unless it chooses otherwise. We do not use personal data to make decisions that have legal or similarly significant effects on you.

We use trusted suppliers to run VocalMax. They only get what they need for their part:

• Hosting and database: Vercel, Supabase, Fly.io, Cloudflare.
• Telephony and messaging: Twilio (phone calls), Meta (WhatsApp Business Platform), Resend (email).
• AI: OpenAI, Anthropic and TypeSafe (language and decision models), Deepgram (speech to text), ElevenLabs (voices).
• Payments: Stripe.
• Advertising and tools: Meta (Pixel and Conversions API, for our own ads), Nango and ClickUp (integrations a customer chooses to connect).

We may also share data if the law requires it, or with a buyer if the business is sold (they would be bound by this policy).

Our database and app run in Singapore. Some suppliers process data in other countries, including the United States and the European Union. When data leaves the UK or the UAE, we rely on our suppliers' data protection terms for those transfers.

• Recordings and transcripts: for the period the customer chooses (30, 90, 180 or 365 days; 365 by default), then deleted. Customers can also wipe them at any time. Backup copies in our voice system are deleted within 400 days at the latest.
• Call outcomes, durations and billing records: kept for as long as the account exists, and billing records for as long as tax law requires.
• Do-not-call list: kept so that we keep honouring the request.
• Accounts: while the account is open; on closure, deleted on request except what the law requires us to keep.
• Demo and contact requests: up to 24 months, unless you ask us to delete them sooner.

Depending on where you live (including under UK GDPR and the UAE Personal Data Protection Law), you can ask to see the data we hold about you, correct it, delete it, limit or object to how we use it, take a copy, and withdraw consent. To stop being called or messaged, tell the caller or reply STOP, or write to us; we add you to the do-not-call list. Write to info@vocalmax.io and we will reply within one month.

If you are unhappy with how we handle your data, you can complain to the UK Information Commissioner's Office (ico.org.uk) or your local data protection authority.

Data is encrypted in transit, access is limited to the people and systems that need it, staff accounts use two-step sign-in, and privileged actions are logged. No system is perfectly secure; if a breach affects you, we will tell you and the authorities where the law requires.

We will update this policy when what we do changes, and change the “Last updated” date above. Significant changes will be shown on this page and, for customers, by email.

Questions or requests about your data: info@vocalmax.io.