Privacy Policy

Introduction

VoxGrade ("we", "us", or "our") operates the VoxGrade platform (the "Service"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our Service.

By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with this Privacy Policy, please do not use the Service.

Information We Collect

We collect several types of information to provide and improve our Service:

Account Information:

• Email address (used for login and communications)
• Account password (stored as a hashed value)
• Account preferences and settings
• Subscription tier and billing status

Usage Data:

• Voice agent test data (prompts, configurations, phone numbers)
• Call transcripts and analysis results
• LLM evaluation scores and recommendations
• Report data and shareable links
• API keys and integration credentials (encrypted at rest)
• Platform usage statistics (tests run, calls made, features used)

Technical Information:

• IP address and geographic location (country-level)
• Browser type, device type, and operating system
• Session data and authentication tokens
• Error logs and diagnostic information

Payment Information:

• Payment information is processed and stored by Stripe, our payment processor. We do not store full credit card numbers on our servers. We retain only the last 4 digits of your card and expiration date for display purposes.

Cookies and Tracking:

• Session cookies for authentication and account management
• Analytics cookies via Plausible (privacy-focused, GDPR-compliant)
• We do not use third-party advertising or tracking cookies

How We Use Your Information

We use the information we collect for the following purposes:

• Service Delivery: To provide, operate, and maintain the Service, including processing voice agent tests, generating reports, and managing your account
• Authentication: To verify your identity and manage secure access to your account
• Communication: To send service-related emails, including account notifications, test results, billing updates, and security alerts
• Analytics: To understand how users interact with the Service and identify areas for improvement
• Customer Support: To respond to your inquiries, troubleshoot issues, and provide technical assistance
• Product Improvement: To develop new features, enhance existing functionality, and optimize performance
• Security: To detect, prevent, and respond to fraud, abuse, security incidents, and other harmful activities
• Legal Compliance: To comply with applicable laws, regulations, and legal processes

Third-Party Services

We share data with trusted third-party services to operate the Service effectively. These services are subject to their own privacy policies:

Payment Processing:

• Stripe: Processes all subscription payments and stores payment card information securely. View Stripe's Privacy Policy.

Email Services:

• Resend: Sends transactional and service-related emails on our behalf. View Resend's Privacy Policy.

Data Storage and Hosting:

• Upstash: Provides serverless database and key-value storage for account data, test results, and session management. View Upstash's Privacy Policy.
• Vercel: Hosts the application and API endpoints. View Vercel's Privacy Policy.

Analytics:

• Plausible: Provides privacy-focused, GDPR-compliant website analytics without cookies or personal data tracking. View Plausible's Privacy Policy.

Voice AI Platforms:

• Retell AI: Processes voice agent tests when you integrate your Retell AI account. View Retell AI's Privacy Policy.
• Vapi: Processes voice agent tests when you integrate your Vapi account. View Vapi's Privacy Policy.

LLM Providers:

• OpenRouter: Routes LLM requests to various AI model providers for call analysis and evaluation. View OpenRouter's Privacy Policy.

We do not sell, rent, or share your personal information with third parties for their marketing purposes.

Data Retention

Active Accounts: We retain your account information and usage data for as long as your account is active or as needed to provide the Service.

Deleted Accounts: When you delete your account, we will delete or anonymize your personal information within 30 days, except where retention is required by law or necessary to resolve disputes, enforce our Terms of Service, or prevent fraud.

Backups: Deleted data may persist in backup systems for up to 90 days before being permanently removed.

Payment Records: We retain billing and payment records for up to 7 years to comply with tax and financial regulations.

Your Rights and Choices

You have the following rights regarding your personal information:

Access: You can access and download your account data, test results, and reports through your account dashboard.

Correction: You can update or correct your account information at any time through your account settings.

Deletion: You can request deletion of your account and associated data by contacting us at privacy@callsetter.ai. Account deletion is permanent and cannot be reversed.

Export: You can export your data in JSON format through the account settings page.

Opt-Out of Marketing: You can unsubscribe from marketing emails by clicking the unsubscribe link in any email or by updating your email preferences in your account settings. Note that you cannot opt out of service-related emails (e.g., billing notifications, security alerts).

Cookie Control: You can disable cookies in your browser settings, though this may affect your ability to use certain features of the Service.

GDPR Rights (EU Residents):

• Right to access, rectify, and erase your personal data
• Right to restrict or object to processing of your data
• Right to data portability
• Right to withdraw consent at any time
• Right to lodge a complaint with a supervisory authority

To exercise any of these rights, contact us at privacy@callsetter.ai. We will respond to your request within 30 days.

Security Measures

We implement industry-standard security measures to protect your personal information:

• Encryption: All data transmitted between your browser and our servers is encrypted using TLS/SSL. Sensitive data (API keys, passwords) is encrypted at rest.
• Access Control: Access to user data is restricted to authorized personnel only and is logged for audit purposes.
• Authentication: User accounts are protected by secure password hashing (bcrypt) and optional two-factor authentication.
• Monitoring: We continuously monitor for security threats, unauthorized access, and suspicious activity.
• Incident Response: In the event of a data breach, we will notify affected users within 72 hours and take immediate steps to mitigate the impact.

While we take reasonable measures to protect your data, no security system is completely secure. We cannot guarantee absolute security of information transmitted over the internet.

Children's Privacy

The Service is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18 without parental consent, we will take steps to delete that information promptly.

If you believe we have collected information from a child under 18, please contact us at privacy@callsetter.ai.

International Data Transfers

The Service is operated in the United States. If you access the Service from outside the United States, your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate.

By using the Service, you consent to the transfer of your information to countries that may have different data protection laws than your country of residence.

GDPR Compliance: For users in the European Economic Area (EEA), we rely on standard contractual clauses and other lawful transfer mechanisms to ensure adequate protection of your personal data.

California Privacy Rights (CCPA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You have the right to request disclosure of the personal information we collect, use, disclose, and sell.
• Right to Delete: You have the right to request deletion of your personal information, subject to certain exceptions.
• Right to Opt-Out: You have the right to opt out of the sale of your personal information. Note: We do not sell personal information.
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

To exercise your CCPA rights, contact us at privacy@callsetter.ai.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or Service features. When we make changes, we will:

• Update the "Effective Date" at the top of this page
• Notify you via email or in-app notification if the changes are material
• Post the updated Privacy Policy on our website

Your continued use of the Service after changes are posted constitutes acceptance of the updated Privacy Policy. We encourage you to review this Privacy Policy periodically.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: privacy@callsetter.ai

Support: support@callsetter.ai

We will respond to all inquiries within 30 days.