Privacy Policy

1. Introduction

VoiceAI Tech JSC (“VoiceAI Tech”, “we”, “us”) is committed to protecting your personal information. This Privacy Policy explains how we collect, process, share, and secure your information when you use our products and services.

By using VoiceAI Tech services, you consent to the practices outlined here. If you disagree with any part of this policy, please discontinue using our services.

2. Information We Collect

2.1 Personal Information

We collect the following categories of personal data:

• Identity information: Full name, email address, phone number, job title, company address.
• Account credentials: Username, hashed password, profile photo.
• Billing information: Payment instrument details processed via PCI-compliant partners.
• Business information: Company name, tax ID, industry, billing contacts.

2.2 Voice & Audio Data

When you use our speech products, we process:

• Audio files or voice streams you upload or capture via our SDKs.
• Generated transcripts and structured text data.
• Recording metadata such as duration, sampling rate, and language.
• Sentiment scores or acoustic analytics if you enable those features.

2.3 Technical Information

We automatically collect:

• IP address, browser type, device model, operating system.
• Device identifiers and application telemetry.
• Usage logs, diagnostics, crash reports.
• Cookies, beacons, and similar tracking technologies.

3. How We Use Information

We process data for the purposes outlined below:

3.1 Deliver & Improve Services

• Provision voice intelligence products you request.
• Generate transcripts, analytics, and dashboards.
• Train and evaluate AI models (using de-identified or aggregated data whenever possible).
• Develop new functionality and optimize performance.

3.2 Account & Billing Management

• Create and authenticate user accounts.
• Provide fraud prevention and access controls.
• Process invoices, payments, and collections.
• Deliver customer success, onboarding, and training.

3.3 Communications

• Send service announcements, maintenance notices, and legal updates.
• Respond to tickets, feedback, or partnership inquiries.
• Share newsletters or marketing content if you opt-in (with unsubscribe links in every message).

3.4 Safety, Security & Compliance

• Detect and prevent fraud, abuse, or policy violations.
• Protect VoiceAI Tech, our customers, and end-users.
• Comply with applicable laws, regulations, subpoenas, and audits.

4. How We Share Information

We never sell personal data. We share information only in the scenarios below:

4.1 Service Providers

We engage vetted vendors under strict confidentiality obligations:

• Cloud infrastructure (AWS, Google Cloud, Microsoft Azure).
• Payment processors (Stripe, PayPal).
• Analytics and monitoring tools.
• Customer support platforms (Zendesk, Intercom).

4.2 Legal Requirements

• When required by law, court order, or competent authority.
• To enforce our agreements or protect our rights, privacy, or property.
• To investigate or prevent fraud, security incidents, or illegal activities.

4.3 Corporate Transactions

In the event of a merger, acquisition, financing, or sale of assets, we may transfer information to the successor organization while ensuring equivalent safeguards.

5. Data Security

We implement administrative, technical, and physical controls to safeguard your information.

5.1 Technical Safeguards

• Encryption: TLS 1.2+ in transit, AES-256 at rest.
• Access controls: MFA, role-based access, least-privilege reviews.
• Network security: Firewalls, WAF, IDS/IPS, DDoS mitigation.
• Security testing: Regular penetration tests and code reviews.

5.2 Compliance

VoiceAI Tech adheres to global security frameworks, including:

• ISO/IEC 27001
• SOC 2 Type II
• GDPR & UK GDPR
• Vietnam PDPA and other local data-protection laws

6. Data Retention & Deletion

6.1 Retention Periods

We store information only as long as necessary to:

• Deliver contracted services.
• Comply with statutory retention requirements.
• Resolve disputes and enforce agreements.

6.2 Deletion Requests

You may request deletion of your personal data. We will honor verified requests within 30 days unless the law requires extended retention.

7. Your Rights

Depending on your jurisdiction, you may exercise the following rights:

• Access: Request a copy of data we hold about you.
• Correction: Update inaccurate or incomplete information.
• Deletion: Ask us to erase personal data in certain circumstances.
• Restriction: Limit how we process your information.
• Portability: Receive data in a structured, machine-readable format.
• Objection: Opt out of direct marketing or automated decision-making.

To exercise any right, contact privacy@vinhtech.xyz. We may verify your identity before fulfilling a request.

8. Cookies & Tracking Technologies

We use cookies, pixels, and similar tools to remember preferences, analyze usage, and personalize content. You can adjust cookie settings in your browser, but disabling cookies may affect site functionality.

9. International Data Transfers

Your information may be processed in countries other than where you reside. We implement Standard Contractual Clauses, intra-group agreements, and other safeguards to ensure adequate protection.

10. Children’s Privacy

Our services are not directed to children under 13. We do not knowingly collect personal data from children. If you believe we accidentally collected such information, contact us and we will delete it promptly.

11. Policy Updates

We may revise this policy from time to time. We will notify you of material changes via email or in-app notice. The “Last updated” date indicates the latest revision.

12. Contact

If you have questions about this Privacy Policy or our data handling practices, reach out to: