Privacy Policy
Last updated 31 July 2026
VoiceChat is operated by Caspian Consultancy Services ("we", "us"). We provide AI voice and chat agents that businesses embed on their websites and phone lines. This policy explains what personal data we handle, why, and what you can do about it.
1. Data we collect
From customers
| Data | Why we have it |
|---|---|
| Email address, password (hashed, never stored in readable form) | To create and secure your account |
| Google account identifier, email and display name, if you sign in with Google | To identify you at sign-in. We request only the basic openid, email and profile scopes — we cannot read your Gmail, Drive, Calendar or contacts |
| Workspace name | To label your account |
| Agent configuration, instructions and website domain | To run your agents |
| Documents and URLs you add as knowledge | So your agent can answer from your own material |
| Usage records — voice minutes, message counts, timestamps | To enforce plan limits and show you your usage |
| Billing identifiers from Stripe | To manage your subscription |
We never see or store your card details. Payment information is entered directly into Stripe's hosted checkout and never touches our servers. We hold only Stripe's customer and subscription identifiers.
From visitors talking to an agent
- The conversation itself — what was said, as text, and for voice calls its duration
- The page the conversation started from
- An optional identifier, if our customer chooses to pass one so the agent knows who it's speaking to
- An automated assessment of how the conversation went, used for the customer's analytics
We do not retain voice recordings. Voice is converted to text by our speech provider during the call; we store the transcript, not the audio.
2. Cookies and local storage
We do not use advertising or tracking cookies, and we do not sell data to anyone. The portal stores two things in your browser: a sign-in token so you stay logged in, and your light or dark theme preference. The website widget keeps a short-lived record of the current conversation so it survives a page navigation; it is cleared when the browser tab closes.
3. Who we share data with
We use a small number of providers to run the service. Each receives only what it needs:
| Provider | What they process |
|---|---|
| ElevenLabs | Speech recognition, speech synthesis and the conversation model — receives conversation content and knowledge material |
| Anthropic | Post-conversation analysis — receives conversation transcripts |
| Stripe | Payments and subscriptions — receives your billing details directly |
| Resend | Transactional email such as password resets — receives your email address |
| Hostinger | Hosting and database infrastructure, in Kuala Lumpur, Malaysia |
| Only if you choose to sign in with Google — confirms your identity to us |
We do not sell personal data, and we do not use conversation content to train our own models.
4. Where data is held
Our servers are hosted by Hostinger in Kuala Lumpur, Malaysia. That is where your account details, agent configuration, knowledge material, conversation records and usage history are stored. The providers listed above process data in other countries, including the United States and the European Union, under their own terms.
If you are in the UK or the European Economic Area, this means your personal data is transferred outside that area. Malaysia is not currently covered by a UK or European Commission adequacy decision. If you need a data processing agreement with standard contractual clauses in place before using VoiceChat, email us and we will arrange one.
5. How long we keep it
- Account data — for as long as your workspace exists
- Conversations and usage records — retained so you can review them, until you delete them or close your workspace
- Password reset links — expire within an hour and can only be used once
- Deleted workspaces — permanently erased, including agents, conversations, knowledge and usage history. This cannot be undone
6. How we protect it
- All traffic is encrypted in transit over HTTPS
- Passwords are stored only as scrypt hashes, never in a form we can read
- Each workspace's data is isolated — one customer cannot reach another's
- Sign-in, signup and password reset are rate limited against brute force
- Agents only serve the website domains their owner has authorised
No system is perfectly secure, but we take this seriously and fix problems as we find them.
7. Your rights
Depending on where you live, you may have the right to access, correct, export or delete your personal data, to object to certain processing, or to complain to a data protection authority. Email us and we will help.
If you are a visitor who spoke to an agent on someone's website and want that conversation removed, contact the business whose website you were on — it is their data, and they can delete it. If you contact us instead we will pass your request to them.
8. Children
VoiceChat is a business product and is not intended for children. We do not knowingly collect data from anyone under 16.
9. Changes
If we change this policy we will update the date at the top, and tell customers by email where the change is significant.
10. Contact
Questions, requests or concerns: privacy@voicechat.cloud