Legal
Privacy policy.
Last updated April 2026
VOX Labs (“VOX,” “we,” “us”) builds voice AI agents. This policy explains what personal data we collect, how we use it, and the choices you have. We follow GDPR, CCPA, and other applicable laws by default.
Information we collect
- Account data: name, email, hashed password, and authentication identifiers when you sign up.
- Workspace data: agent configurations, system prompts, voice choices, and language preferences you create.
- Conversation data: audio, transcripts, and metadata produced when your agents handle calls or chats — only if you choose to retain it.
- Billing data: processed by Stripe. We never see your full card number.
- Telemetry: anonymous usage events that help us improve the product.
How we use your data
- To operate, secure, and improve VOX.
- To process payments and manage subscriptions.
- To respond to support requests.
- To meet legal obligations.
We do not sell personal data. We do not train foundation models on your customer conversations.
Data retention
Conversation data is retained for the window you set in your workspace (default 30 days). Account data is retained for the life of your account. Backups are deleted on a rolling 90-day schedule.
Your rights
You can access, correct, export, or delete your personal data at any time from your dashboard or by emailing privacy@vox.ai. We respond within 30 days.
Sub-processors
We use a small set of trusted vendors: Supabase (auth, database), Stripe (payments), Vercel (hosting), and our voice synthesis providers. A current list is available on request.
Security
Conversations are encrypted in transit (TLS 1.3) and at rest (AES-256). Access to production systems is limited and audited.
Contact
Questions about this policy? Reach our privacy team at privacy@vox.ai or via the contact page.