1. Data we collect
Vox Bridge processes the following categories of data to provide its voice receptionist service:
- Call audio and transcripts — Recordings and transcriptions of conversations between an end-user and the voice agent, retained per the tenant's retention setting.
- Lead contact details — Name, email address, phone number, and any message the visitor provides, collected at the point of inquiry or booking.
- Usage data — Call duration, minutes consumed, token usage, billing records, and feature interactions for metering and platform improvement.
- Account information — For registered users: name, email address, organization, and billing information, stored via our authentication provider (Clerk) and payment processor.
- Knowledge base content — Documents, PDFs, and website content you upload or scrape to teach the agent about your business.
2. How we use data
Data is used solely to deliver and improve the service: powering the voice agent's responses, generating transcripts and recordings for quality review, billing and usage metering, and providing you with lead and analytics data within your dashboard. We do not train foundation models on your call audio, transcripts, or knowledge base content without explicit opt-in.
3. Data sharing
We share data only with subprocessors directly required to deliver the service:
- LiveKit — Voice-agent infrastructure (audio routing, room management)
- Google Cloud (Vertex AI / Gemini) — Speech-to-speech inference for live voice conversations
- Cloudflare R2 — Object storage for recordings and uploads
- Clerk — Authentication and identity management
- Telnyx — Phone-network connectivity (PSTN calls)
- OpenAI / Anthropic — LLM inference for non-voice workflows (email drafting, classification, tool calling)
Each subprocessor is contractually bound to process data only on our instructions and to maintain security standards consistent with this policy. We do not sell personal data to third parties.
4. Data retention
Call recordings and transcripts are retained for the duration of the tenant's account plus 90 days, unless a shorter retention period is configured by the tenant administrator. Knowledge base documents are retained until deleted by the tenant. Billing records are retained for the period required by law (typically 7 years). Upon account deletion, all tenant-scoped data (recordings, transcripts, leads, KB content) is deleted within 30 days, subject to billing-record retention requirements.
5. Data security
Data is encrypted in transit (TLS 1.3) and at rest (AES-256). Tenant data is logically isolated server-side: an agency or business only ever sees its own customers' data, and access is gated per authenticated user. We enforce least-privilege access controls across our infrastructure and undergo periodic security reviews.
6. Your rights (GDPR / CCPA)
If you are located in the European Economic Area or California, you have the right to: request access to your personal data, request correction or deletion, object to or restrict processing, request data portability, and withdraw consent where processing is based on consent. To exercise these rights, contact us via the footer form on the home page or email privacy@voxbridgeai.app.
7. Contact
For privacy inquiries: privacy@voxbridgeai.app. For general inquiries: use the contact form on the home page. Our registered office is available on request.