Privacy Policy

Last updated 3 November 2026 · voicy, by Intellecsys

1. Who we are
2. If you talked to an agent
3. What we collect
4. How we use it
5. Who we share it with
6. How long we keep it
7. Your rights
8. Security
9. Where data is processed
10. For businesses using voicy
11. Children
12. Changes and contact

1. Who we are

voicy is run by Intellecsys, Inc. (“Intellecsys”, “we”, “us”). This policy explains how we handle personal data when you use voicy’s website, app and API (the “Service”), and when you talk to a voice agent that a business built on voicy.

The short version: we use personal data to run and improve the Service. We don’t sell it and we don’t use it for advertising. We don’t store call audio or use your content or your callers’ conversations to train AI models, unless you agree to it in an agreement with us.

2. If you talked to an agent

Each voice agent on voicy belongs to a business (our customer). When you talk to one, that business decides what the agent asks and what happens with your answers: it is responsible for your data, and we process it for them, on their instructions. For questions about what you told an agent, or to have it corrected or deleted, contact that business first. If you can’t reach them, write to us and we will help.

3. What we collect

• Your account. When you sign in with Google: your name, email address and profile picture. Then your access level, plan, credits and usage.
• What you give us to build agents. Descriptions, the conversation in which you build an agent, requested changes, opening lines, documents you upload, and the settings, tools, webhooks and phone numbers you connect.
• Conversations. Speech goes through our voice service in real time, so it can be understood, answered and spoken back. By default we don’t store the audio. We store it only where an agreement with the business provides for it (for example some partner agreements), and the business must then tell callers that calls are recorded. We store a text transcript of conversations with your agents, with their time and length, and, for phone calls, the phone numbers involved and a short summary.
• Details your agents collect. What callers tell an agent that is set up to take their details — for example a name, a phone number and what they need. These go to the business’s Inbox, and to its Telegram or webhooks if it connected them.
• Payments. Payments are handled by Stripe. We receive what we need for billing, such as your plan, amounts and payment status. We never see or store your full card number.
• Technical data. IP address, browser and device type, times of use, response-time measurements and error logs. Each change to an agent’s instructions is recorded with the account, the time and the IP address it came from, for safety and abuse prevention.
• Browser storage. We use your browser’s storage to keep you signed in and to remember a few settings. We don’t use advertising or analytics trackers.

4. How we use it

• To run the Service: build and run your agents, carry conversations, deliver the details they collect, and show you your history.
• To bill you and manage your plan and credits.
• To keep the Service and its users safe: we check agent instructions automatically for abuse, may review them by hand, and use technical data to stop misuse.
• To make the Service work better. While voicy is in early access, our team may read conversation transcripts and collected details to find and fix problems. We keep this to the people who need it and use it for nothing else.
• Where an agreement with the business allows it, to improve our speech and AI models with the conversations that agreement covers. Without such an agreement, we don’t use conversations or your content to train AI models.
• To answer you and to send messages about the Service, such as changes to these terms or to your plan.
• To meet legal obligations.

Where the law asks for a legal basis (for example in the EU and UK), we rely on our contract with you, our legitimate interest in running and protecting the Service, your consent where we ask for it, and legal obligations.

5. Who we share it with

Only with the providers we need to run the Service, under contracts that limit them to doing that:

• cloud hosting, database and sign-in (Google Cloud and Firebase);
• AI services that recognise speech, write replies and agent instructions, and produce voices;
• telephony providers, for phone lines and calls;
• Stripe, for payments;
• Telegram, for alerts — the business’s own alerts when it connects a chat, and our team’s internal service alerts.

Details your agents collect also go wherever the business sends them (its webhooks or apps). We may disclose data when the law requires it, to protect people or the Service, or as part of a merger or sale of our business, in which case this policy keeps applying. We don’t sell personal data and don’t share it for advertising.

6. How long we keep it

• Account, agents, documents, transcripts and collected details: while your account is open. You can delete agents and collected details yourself at any time.
• When an account is closed: we delete its agents, documents, transcripts, collected details and connections within 30 days.
• Records of instruction changes: 365 days after the account is closed, for safety and abuse investigations.
• Billing records: as long as tax and accounting law requires.
• Technical logs: for a limited time, for security and troubleshooting.
• Audio: not stored, unless an agreement with the business provides for it; then for as long as that agreement says.

7. Your rights

Depending on where you live, you can ask to see the personal data we hold about you, correct it, delete it, get a copy, or object to or limit how we use it, and you can withdraw consent you gave. Email ceo@intellecsys.tech from the address you sign in with. We answer within 30 days, and may ask you to confirm who you are. You can also complain to your data protection authority.

If you talked to an agent, see section 2: the business that runs it is your first contact.

8. Security

Data travels encrypted (HTTPS and secure WebSockets). API keys are stored only as hashes, webhooks are signed, access to data is limited to people who need it, and we monitor the Service for abuse and outages. No system is perfectly secure; if a breach affects your data, we will tell you without undue delay, as the law requires.

9. Where data is processed

We and our providers process data in the United States and other countries. Where the law requires it, we use safeguards such as standard contractual clauses for transfers. By agreement, we can keep an enterprise customer’s data on servers in a specific country — for example in Kazakhstan — with our local hosting partners.

10. For businesses using voicy

When your agents talk to people, you decide what they collect, and you are responsible for doing it lawfully: telling callers they are talking to an AI where the law requires it, giving the privacy notices the law asks for, and getting consent where it’s needed — especially for health or other sensitive information, and for call recording or marketing calls. If your business must keep personal data in a particular country (for example under data-localisation laws), ask us for in-country hosting before you collect it with voicy. We process your callers’ data only to provide the Service to you, and we will sign a data processing agreement on request.

11. Children

The Service is not for anyone under 18, and we don’t knowingly collect children’s data. Agents must not be used to collect data from children unless the law allows it. If you think a child gave us personal data, tell us and we will delete it.

12. Changes and contact

We may update this policy. We will post the new version here with its date, and tell you in the Service or by email before a material change takes effect.

Questions or requests: Intellecsys, Inc. · ceo@intellecsys.tech. See also our Terms of Service.