Privacy Policy

Introduction

Voiceyfy.com ("we", "us", "our", operated by Spicyfy Ventures LLC) is committed to protecting your privacy worldwide and handling your data transparently and securely. This Privacy Policy outlines how our application accesses, uses, stores, and shares user data, consistent with global data protection laws.

Our Role

Voiceyfy plays two different roles depending on whose information is involved.

For our business customers: With respect to the companies that sign up for Voiceyfy, we act as a data controller. We determine what account, billing, and usage data is necessary to provide the service, as described in this policy.

For end consumers: With respect to individuals who message a business on WhatsApp or call its phone number, we act as a data processor on behalf of that business. We store and process those conversations solely to enable the business to view and respond to them. The business determines the purpose of the conversation, retention period, and access permissions. If you are a consumer who contacted a business using Voiceyfy and wish to have your data removed, please contact that business directly. If you cannot reach them, you may contact us at support@spicyfy.io and we will forward your request to the appropriate business.

WhatsApp Messaging

Voiceyfy connects to the WhatsApp Business Platform (WhatsApp Cloud API), operated by Meta Platforms, Inc., so that our business customers can send and receive WhatsApp messages from their own verified business phone numbers.

What we receive. When a consumer sends a WhatsApp message to a business using Voiceyfy, Meta delivers that message to us by webhook. We store:

• the consumer's WhatsApp phone number
• the WhatsApp profile name, when the consumer has made one available
• the content of the message (text; and for other message types, the fact that a message of that type was received)
• Meta's message identifier, and delivery states such as sent, delivered, read or failed
• the timestamps that determine whether the business is still inside WhatsApp's 24-hour customer service window

What we send. Replies written by the business, replies generated by its AI assistant, and approved WhatsApp message templates. These are sent to Meta for delivery, and Meta's own terms and privacy policy apply to that delivery.

Why. Solely to operate the WhatsApp channel for the business: to display the conversation to them, to let their assistant answer it, to show whether a message was delivered, and to keep a record they can refer back to.

What we never do. We do not use WhatsApp message content to train AI models. We do not sell it. We do not use it for advertising or profiling. We do not share one business's conversations with another.

Credentials. To send on a business's behalf we hold an access token issued by Meta for that business's WhatsApp account. It is encrypted at rest using AES-256-GCM and is never displayed back, logged, or returned by our APIs. It is deleted with the account.

Meta also holds this data. Messages travel through Meta's infrastructure, and Meta retains its own copy under its own policies. Deleting data from Voiceyfy does not delete Meta's copy. See Meta's WhatsApp Business Data Processing Terms and the WhatsApp privacy policy.

Information We Collect

Account information: Name, email address, phone number, password (stored only as a cryptographic hash), organization name, and role within the organization.

Billing information: Subscription tier, credit balance, transaction history, and invoice records. Payment card details are entered directly with our third-party payment processor and are never stored on our systems.

Voice call data: Call metadata including phone numbers, timestamps, duration, and call outcomes. Audio recordings are stored only where the business has enabled recording functionality, along with transcripts generated from such recordings.

Chat and WhatsApp conversation data: Message content, sender and recipient identifiers, timestamps, delivery status, and automated assistant responses. See "WhatsApp Messaging" section above for additional details.

Contacts and leads: Names, phone numbers, email addresses, and notes that a business uploads or that are captured during conversations.

Knowledge base content: Documents, files, and website content that a business provides to train its AI assistant, including the vector embeddings we generate to enable semantic search functionality.

Payment collection data: Where a business uses Voiceyfy to collect payments from its customers, we store payment link metadata, transaction status, and amounts. Payment gateway credentials provided by the business are encrypted at rest. We do not process or handle the actual payment transactions.

Usage and technical data: Feature usage statistics, API request logs, error diagnostics, IP addresses, browser type, and device information.

Cookies and online data partners

When you visit or log in to our website, cookies and similar technologies may be used by our online data partners or vendors to associate these activities with other personal information they or others have about you, including by association with your email. We (or service providers on our behalf) may then send communications and marketing to these email addresses.

You may opt out of receiving this advertising by visiting https://app.retention.com/optout.

You also have the option to opt out of the collection of your personal data in compliance with GDPR by visiting https://www.rb2b.com/rb2b-gdpr-opt-out.

Data Accessed

Our application may access the following types of user data, according to the permissions and scopes you authorize:

• Account profile information (name, email, profile picture)
• Voice call data and recordings if permitted
• Chat conversations and communications if permitted
• Integration data from connected services if permitted
• Other user data strictly limited to the minimum scope required for Voiceyfy's operation

We only access data that is necessary, and always honor the scope and consent limitations required under applicable law.

Data Usage

We process your user data exclusively to operate and enhance Voiceyfy, including:

• Personalizing your experience
• Facilitating voice agent communication and productivity features
• Authenticating your identity and integrating with connected services

Your data is never used for advertising or profiling.

Service Providers We Share Data With

We work with select third-party service providers to deliver our services. Each provider receives only the minimum data necessary for its specific function.

We also use additional service providers for telephony, AI processing, payment processing, email delivery, and infrastructure services. Each provider is carefully selected and contractually bound to protect your data.

We do not sell personal information, and we do not share it for cross-context behavioral advertising.

International Transfers

Data may be stored or processed on servers outside your home country. We take appropriate measures to protect your rights and comply with cross-border requirements (such as Standard Contractual Clauses under GDPR).

Data Retention

• Account and organization records: Retained for the duration of the active account relationship.
• Conversations, calls, and messages: Retained to enable the business to access historical records. Deleted when the account is closed or when the business initiates deletion.
• Recordings and transcripts: Subject to the same retention policy as conversations. Businesses may disable recording functionality at any time.
• Billing and invoice records: Retained after account closure only to the extent required by applicable tax and accounting regulations.
• Diagnostic logs: Retained for a limited period on a rolling basis, then permanently deleted.

Upon account closure, data deletion is immediate and permanent. See our Data Deletion page for complete details.

Your Rights

Depending on your jurisdiction, you may have the right to access, correct, export, restrict, or delete your personal information, and to withdraw previously granted consent.

Account holders can exercise most of these rights directly through the dashboard. For complete account and data deletion, please refer to our Data Deletion page.

For requests that cannot be completed through the dashboard, please contact us at support@spicyfy.io. We will respond to all requests within 30 days.

If you are an end consumer who contacted a business that uses Voiceyfy, that business acts as the data controller for your conversation. Please contact the business directly. See "Our Role" section above for additional information.

User Control and Consent

You retain control over your data at all times. You may revoke Voiceyfy's access to your connected accounts through your account settings or contact us to delete stored information.

Security

We implement appropriate technical and organizational measures to protect user data from unauthorized access, loss, misuse, or alteration, as required by local and international laws.

Regulatory Compliance

We comply with all applicable privacy laws and regulations wherever Voiceyfy is available, including but not limited to GDPR (EU/EEA), CCPA (California), LGPD (Brazil), PIPEDA (Canada), and equivalent requirements worldwide.

For HIPAA-regulated data, we are actively pursuing compliance and can discuss Business Associate Agreement (BAA) availability. Our platform runs on HIPAA-eligible infrastructure (Google Cloud Platform, Twilio). Contact compliance@spicyfy.io for details or visit our Trust & Security page.

We do not process data restricted by ITAR or other regulatory frameworks unless permitted and with express user consent.

Children's Privacy

Voiceyfy is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately at support@spicyfy.io.

Changes to Privacy Policy

Updates to this Privacy Policy will be posted on our homepage. We recommend checking regularly for the latest information.

Contact Information

Spicyfy Ventures LLC

For questions or data requests, please email support@spicyfy.io.