Privacy Policy

Last updated March 20, 2026

1. Introduction

VoiceCraft (“we,” “us,” or “our”) operates the VoiceCraft platform, a voice AI service that helps businesses manage phone calls, book appointments, and communicate with customers.

This Privacy Policy describes how we collect, use, share, and protect your information when you use our website and services. It applies to all users of the VoiceCraft platform, including business owners who create accounts and the callers who interact with AI-powered voice agents.

2. Information We Collect

We collect the following categories of information:

Account Information

Name, email address, and password (securely hashed — we never store your password in plain text).

Business Information

Business name, operating hours, services offered, agent configuration, greeting preferences, and tone settings that you provide when setting up your AI voice agent.

Call Data

Caller phone numbers, call duration, call outcome (completed, missed, or escalated), call transcripts, and call summaries.

Appointment Data

Client names, phone numbers, scheduled appointment times, and the type of service booked.

Contact Data

Phone numbers, names, email addresses, and any notes you add to your contacts. We also track call frequency and last contact date to help you manage your client relationships.

Message Data

WhatsApp message content and conversation history between your AI agent (or you) and your customers.

Builder Data

Conversations you have with our AI builder tool when setting up or configuring your voice agent.

Technical Data

IP address, browser type, and device information collected automatically when you use our website.

3. How We Use Your Information

We use your information to:

  • Operate and deliver the VoiceCraft service
  • Power your AI voice agent to handle calls and book appointments
  • Process and route phone calls and WhatsApp messages
  • Sync appointments with your connected calendar
  • Send transactional emails such as account verification and password resets
  • Improve and maintain the security of our service
  • Comply with legal obligations

4. AI and Automated Processing

VoiceCraft uses artificial intelligence to power voice agents, process conversations, and generate agent configurations. Your business information and call conversations are processed by third-party AI providers to deliver these features.

We do not use your data to train AI models. Your information is used solely to provide the service to you.

AI-generated responses and configurations may not always be accurate. You are responsible for reviewing your agent's setup before deploying it to handle live calls.

5. Voice Calls and Call Recording

Inbound calls to your VoiceCraft phone number are handled by an AI voice agent. Call audio is processed in real-time for speech recognition and response generation. Callers interact with an AI assistant, not a human.

Call transcripts and summaries may be stored to provide you with call history and analytics.

You are responsible for complying with applicable call recording and consent laws in your jurisdiction. Some US states require the consent of all parties to a call before it may be recorded or monitored.

6. Third-Party Service Providers

We share data with the following providers to operate the service:

ProviderWhat They ReceivePurpose
AnthropicBusiness descriptions, builder conversationsAI agent configuration
GoogleCall conversations, calendar eventsVoice AI processing, calendar sync
MicrosoftCalendar eventsCalendar sync (Outlook)
DeepgramCall audio streamsSpeech recognition
ElevenLabs / OpenAIText responsesVoice synthesis
Twilio / MetaPhone numbers, messages, appointment detailsPhone calls, WhatsApp messaging
LiveKitCall audio streams, room metadataReal-time voice infrastructure
ResendEmail addressesTransactional emails

Each provider processes data under their own privacy policies and terms of service.

7. Cookies

We use only essential cookies required for the service to function:

  • Session cookie: Keeps you signed in to your account. This cookie is httpOnly and secure.
  • OAuth state cookie: A temporary cookie used during calendar connection that expires after 10 minutes.

We do not use analytics cookies, tracking pixels, or advertising cookies.

8. Data Retention

Account data is retained for as long as your account is active.

Call records, appointments, contacts, and messages are retained to provide you with ongoing service, history, and analytics.

You may request deletion of your data at any time (see Your Rights).

Verification and password reset tokens expire automatically and are deleted after use.

9. Data Security

We take reasonable measures to protect your information:

  • All data is encrypted in transit between your browser and our servers
  • Passwords are securely hashed and never stored in plain text
  • Webhook communications are verified using cryptographic signatures
  • We implement access controls to protect your data

No system is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

10. Healthcare Disclaimer

VoiceCraft is not designed to collect, store, or process Protected Health Information (PHI) as defined under the Health Insurance Portability and Accountability Act (HIPAA).

You must not use VoiceCraft to transmit, store, or process PHI or any information subject to HIPAA.

VoiceCraft does not enter into Business Associate Agreements (BAAs).

The service handles operational business data such as appointment scheduling and call routing — it is not a medical or clinical tool. If you operate in a HIPAA-regulated environment, you are responsible for ensuring your use of VoiceCraft complies with applicable regulations.

11. California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act:

  • Right to know: You may request the categories and specific pieces of personal information we have collected about you.
  • Right to delete: You may request deletion of your personal information.
  • Right to opt-out: We do not sell or share your personal information for cross-context behavioral advertising.
  • Non-discrimination: We will not discriminate against you for exercising your privacy rights.

To exercise these rights, contact us at the email listed in the Contact Us section below.

12. Your Rights

You have the right to:

  • Access: Request a copy of the personal data we hold about you
  • Correction: Request correction of inaccurate data
  • Deletion: Request deletion of your data and account
  • Export: Request a portable copy of your data

Contact us at the email below to exercise these rights. We will respond within 30 days.

13. Children's Privacy

VoiceCraft is a business tool and is not directed at individuals under 18. We do not knowingly collect personal information from children.

14. International Users

VoiceCraft is operated from the United States. Your data is processed and stored in the United States.

By using the service, you consent to the transfer and processing of your data in the United States.

15. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via email to your registered address.

The “Last updated” date at the top of this page will reflect the most recent revision. Continued use of the service after changes constitutes acceptance.

16. Contact Us

For privacy questions or to exercise your rights, contact us at:

[email protected]