Privacy Policy

Overview

VolubleAI (“VolubleAI,” “we,” “us”) provides a platform for building and operating AI voice agents that handle phone calls on behalf of our customers (“Customers”). This policy explains what data we collect when Customers and their callers use the platform, how we use it, and the choices available to you.

Where a Customer uses VolubleAI to operate voice agents for their own business, that Customer is the data controller for the calls they handle, and VolubleAI acts as a data processor under the Customer’s instructions. This policy covers our processing on their behalf as well as data we collect directly, such as account and billing information.

Data we collect

• Account data — name, work email, company, and role when you sign up or are invited to a workspace.
• Configuration data — assistant settings, prompts, knowledge base content, and integration credentials a Customer stores in the platform.
• Call data — audio, transcripts, and structured call events generated when an agent handles an inbound or outbound call (see below).
• Usage data — log and telemetry data such as IP address, browser, and in-app actions, used to operate and secure the service.
• Billing data — processed by our payment provider; we do not store full card numbers.

Call recordings & transcripts

When a Customer enables call recording or transcription for an assistant, VolubleAI processes caller audio in real time to generate transcripts and trigger agent actions, and may store the recording and transcript so the Customer can review call quality and outcomes. Customers are responsible for providing any legally required notice or consent to callers before enabling recording in their jurisdiction.

How we use data

We use the data described above to:

• Operate, maintain, and improve the platform and agent runtime.
• Route calls, generate responses, and execute the actions a Customer configures.
• Provide customer support and respond to requests.
• Detect, investigate, and prevent fraud, abuse, and security incidents.
• Meet legal, tax, and accounting obligations.

We do not sell personal data, and we do not use Customer call content to train models shared across other Customers.

Sharing & subprocessors

We share data with infrastructure and model providers that power the platform — including telephony carriers, speech-to-text, text-to-speech, and large language model providers — strictly to deliver the service, under contractual terms that restrict further use of the data. A current subprocessor list is available on request.

Data retention

Call recordings and transcripts are retained according to the retention window configured by the Customer for each assistant, after which they are deleted or anonymized. Account and billing records are retained for as long as needed to operate the account and meet legal obligations.

Security

Data is encrypted in transit and at rest. Access to production systems and Customer data is restricted to authorized personnel on a need-to-know basis and logged. We review our security posture on an ongoing basis as the platform evolves.

Your rights

Depending on your location, you may have the right to access, correct, export, or delete your personal data. If you are a caller and believe a VolubleAI Customer holds data about you, please contact that business directly, as they control the call data. For requests about your own VolubleAI account, contact us using the details below.

Contact

Questions about this policy can be sent to privacy@volubleai.com.