Privacy Policy
Last updated: June 3, 2026
This Privacy Policy explains how VoxCart AI ("VoxCart AI", "we", "us", or "our") collects, uses, shares, and protects information when you use our website, dashboard, voice AI agents, and related integrations (collectively, the "Service"). Because our Service processes voice calls and conversations on your behalf, this policy also describes how we handle call recordings, transcripts, and data from connected platforms such as Shopify. By using the Service, you agree to the practices described here.
01 Who We Are
VoxCart AI provides AI-powered voice and chat agents that handle inbound and outbound calls, customer support, and e-commerce workflows for businesses. When you use the Service to communicate with your own customers, you act as the data controller for your customers' personal data and VoxCart AI acts as a data processor handling that data on your behalf. For information we collect directly about you as our account holder, VoxCart AI acts as the controller.
02 Information We Collect
Account & Identity Data
- Registration details — your name, email address, and password (stored only as a secure hash) when you create an account.
- Google sign-in — if you sign in with Google, we receive your basic profile and email address from Google OAuth.
- Organisation data — the organisation name and team membership you configure, and your role within it.
Voice, Call & Conversation Data
- Call audio & voicemail recordings — audio from inbound and outbound calls handled by your agents, including voicemail captures.
- Transcripts — text transcriptions of calls and chats generated by speech-to-text and language models.
- Phone numbers — caller and recipient phone numbers, call timestamps, duration, and call outcome metadata used for routing, campaigns, and billing.
Content You Provide
- Knowledge base & documents — files, FAQs, prompts, and other materials you upload to train or configure your agents.
- Agent configuration — voice, personality, scripts, and workflow settings you create.
Integration Data
- Shopify & e-commerce platforms — when you connect a store, we access order, product, and customer order details needed to perform tasks such as order tracking, returns, and support lookups.
Billing & Payment Data
- Usage records — call minutes, package balances, and feature usage used to calculate charges.
- Payment processing — payments are processed by Razorpay. We receive transaction and billing metadata but do not store full card numbers on our servers.
Technical & Usage Data
- Device & log data — IP address, browser type, pages viewed, and diagnostic logs.
- Product analytics & error monitoring — interaction events and crash/error reports collected to operate and improve the Service.
03 Voice Recordings & AI Processing
The core of the Service involves recording, transcribing, and analysing voice conversations using artificial intelligence. Call audio and transcripts may be processed by third-party AI providers (see Section 5) to generate real-time responses, summaries, and analytics.
Calls may be recorded. Where you deploy VoxCart AI agents to interact with your customers, you are responsible for providing any legally required notices and obtaining any consent required in your jurisdiction before recording or transcribing a conversation. We provide tooling to support call notices, but compliance with applicable call-recording and consent laws is your responsibility as the operator of the agent.
04 How We Use Information
- To provide, operate, and maintain the Service and your AI agents.
- To transcribe, route, and respond to calls and chats in real time.
- To perform connected workflows such as Shopify order tracking, returns, and customer support.
- To generate analytics, dashboards, and performance insights.
- To calculate usage, process payments, and manage your account balance.
- To send transactional and service-related emails (for example, email verification and low-balance alerts).
- To secure the Service, prevent abuse, and debug issues.
- To comply with legal obligations and enforce our terms.
05 How We Share Information & Sub-Processors
We do not sell your personal data. We share data only with service providers ("sub-processors") that help us deliver the Service, and only to the extent needed to perform their function. These include providers of AI/voice processing, infrastructure, communications, analytics, and payments:
| Sub-Processor | Purpose |
|---|---|
| OpenAI, Anthropic | Large language models powering agent responses and summaries |
| Deepgram, AssemblyAI, Sarvam, Soniox, Google, Azure, AWS | Speech-to-text transcription and related voice AI |
| ElevenLabs, Sarvam | Text-to-speech / voice synthesis |
| Daily | Real-time audio (WebRTC) transport for live calls |
| Amazon Web Services / object storage | Hosting and storage of recordings, transcripts, and documents |
| Razorpay | Payment processing and billing |
| Shopify | E-commerce data for connected stores |
| Resend / SMTP email | Transactional and alert emails |
| PostHog, Sentry, Langfuse | Product analytics, error monitoring, and AI request tracing |
We may also disclose information if required by law, to protect our rights or the safety of others, or in connection with a merger, acquisition, or sale of assets. The specific sub-processors used may change as the Service evolves.
06 Data Retention
We retain personal data for as long as your account is active or as needed to provide the Service. Call recordings, transcripts, and conversation logs are retained according to your account configuration and our operational needs, and may be deleted on request or after account closure, subject to legal and billing record-keeping obligations. Diagnostic logs are kept on a short rolling retention window.
07 Security
We use industry-standard safeguards to protect your data, including encryption in transit (HTTPS/TLS), hashed credentials, access controls, and isolated storage. No method of transmission or storage is completely secure, so while we strive to protect your information, we cannot guarantee absolute security.
08 International Data Transfers
VoxCart AI and its sub-processors may store and process data in countries other than the one in which you reside, including the United States, the European Union, and India. Where data is transferred across borders, we take steps to ensure it remains protected consistent with this policy and applicable law.
09 Your Rights & Choices
Depending on your location, you may have rights to access, correct, export, or delete your personal data, to object to or restrict certain processing, and to withdraw consent. Account holders can update much of their information directly in the dashboard. To exercise any of these rights, contact us using the details below. If you are an end customer of a business using VoxCart AI, please direct your request to that business, which controls your data; we will assist them in responding.
10 Cookies & Tracking
We use cookies and similar technologies to keep you signed in, remember preferences, and measure product usage through analytics tools. You can control cookies through your browser settings; disabling some cookies may affect how the Service functions.
11 Children's Privacy
The Service is intended for businesses and is not directed to children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us data, please contact us and we will delete it.
12 Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, where appropriate, notify you. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.
13 Contact Us
If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at:
vedant.parmar@theonetechnologies.co.in
VoxCart AI — Privacy Team