Privacy Policy

1. Introduction

VoiceConsole, a product of Tested Media LLC ("Company", "we", "us", or "our"), is committed to protecting the privacy of our users. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform at voiceconsole.ai (the "Service").

This policy applies to all users of the Service, including account holders, team members, and visitors to our website. By using the Service, you consent to the data practices described in this policy.

We comply with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable data protection laws.

2. Information We Collect

We collect the following categories of information:

2.1 Personal Information

• Name and email address (provided during registration)
• Company name and job title (optional)
• Billing information (processed by Stripe; we do not store credit card numbers)
• Profile information and account preferences

2.2 Usage Data

• Pages visited, features used, and time spent on the platform
• Browser type, device type, operating system, and screen resolution
• IP address and approximate geographic location
• Referring URLs and search terms

2.3 Call Data

• Call metadata (duration, timestamps, agent IDs, outcomes)
• Call transcripts and recordings (synced from your voice AI platform)
• AI-generated analytics (sentiment scores, call scores, keywords)
• Campaign and lead data associated with calls

2.4 Cookies & Tracking

• Essential cookies: Required for authentication and core functionality
• Analytics cookies: Help us understand how the Service is used (can be disabled)
• Preference cookies: Remember your settings and preferences

3. How We Use Your Information

We use the information we collect for the following purposes:

• Service delivery: To provide, maintain, and improve the VoiceConsole platform
• Analytics: To generate call analytics, performance reports, and AI-powered insights
• Communication: To send account notifications, billing alerts, and service updates
• Support: To respond to your support requests and troubleshoot issues
• Security: To detect, prevent, and address fraud, abuse, and security threats
• Legal compliance: To comply with applicable laws, regulations, and legal processes
• Product improvement: To analyze usage patterns and improve features (using anonymized, aggregated data)

4. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), we process personal data under the following legal bases:

• Contract performance: Processing necessary to provide the Service you subscribed to
• Legitimate interests: Improving the Service, preventing fraud, and ensuring security
• Consent: Where required, such as for marketing communications and optional analytics cookies
• Legal obligation: Processing required to comply with applicable laws

5. Data Sharing & Third Parties

We do not sell your personal data. We share information only in the following circumstances:

• Service providers: We use trusted third parties to help operate the Service, including:
  • Stripe (payment processing)
  • Vercel (hosting and deployment)
  • Supabase (database and authentication)
  • Resend (transactional email)
  • Retell AI and Vapi (voice AI platform integration)
• Legal requirements: When required by law, subpoena, or government request
• Business transfers: In connection with a merger, acquisition, or sale of assets
• With your consent: When you explicitly authorize sharing with a specific third party

6. Data Retention

We retain your data for as long as necessary to provide the Service and fulfill the purposes described in this policy:

• Account data: Retained for the duration of your account, plus 30 days after deletion to allow for recovery
• Call data: Retained according to your subscription tier (7 days to unlimited)
• Billing records: Retained for 7 years as required by tax and financial regulations
• Usage logs: Anonymized and aggregated after 90 days; raw logs deleted after 12 months

You may request deletion of your data at any time (see Section 8).

7. Data Security

We implement industry-standard security measures to protect your data:

• All data transmitted between your browser and our servers is encrypted using TLS 1.3
• Data at rest is encrypted using AES-256 encryption
• Access to production systems is restricted and audited
• Regular security assessments and penetration testing
• Multi-factor authentication available for all accounts
• Automatic session expiration and secure cookie handling

While we strive to protect your data, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security but commit to promptly notifying affected users in the event of a data breach.

8. Your Rights (GDPR)

If you are located in the European Economic Area (EEA), you have the following rights under the GDPR:

• Right of access: Request a copy of the personal data we hold about you
• Right to rectification: Request correction of inaccurate or incomplete data
• Right to erasure: Request deletion of your personal data ("right to be forgotten")
• Right to data portability: Request your data in a structured, machine-readable format
• Right to restriction: Request that we limit the processing of your data
• Right to object: Object to processing based on legitimate interests or direct marketing
• Right to withdraw consent: Withdraw consent at any time where processing is based on consent

To exercise any of these rights, contact us at privacy@voiceconsole.ai. We will respond within 30 days.

9. CCPA Rights (California Residents)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

• Right to know: Request information about the categories and specific pieces of personal information we have collected about you
• Right to delete: Request deletion of your personal information, subject to certain exceptions
• Right to opt-out: We do not sell personal information. If this changes, we will provide an opt-out mechanism
• Right to non-discrimination: We will not discriminate against you for exercising your CCPA rights

To exercise your CCPA rights, contact us at privacy@voiceconsole.ai or use the contact form on our website.

10. International Data Transfers

Our servers are located in the United States. If you access the Service from outside the United States, your data will be transferred to, stored, and processed in the United States.

For EEA users, we ensure adequate protection for international data transfers through:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Data Processing Agreements (DPAs) with all sub-processors
• Technical and organizational measures to protect data in transit and at rest

11. Children's Privacy

VoiceConsole is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child under 18, we will take steps to delete that information promptly.

If you believe that a child has provided us with personal information, please contact us at privacy@voiceconsole.ai.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes:

• We will update the "Last Updated" date at the top of this page
• We will notify you by email or through a prominent notice on the Service
• Material changes will take effect 30 days after notification

We encourage you to review this policy periodically. Your continued use of the Service after the effective date of any changes constitutes your acceptance of the updated policy.

13. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: