Back to VoxLead
Data Protection & Confidentiality

Privacy Policy

Version 2.1 • Last Updated: 2026 • Dedicated to Zero-Retention Architecture

Our Core Privacy Commitment: We do not sell your data or your callers' data. Call audio is recorded only if your firm turns recording on, and recordings are kept in private storage that only your firm can open.

1. Information We Collect

We collect information to provide our 24/7 AI voice receptionist services:

  • Account & Onboarding Data: Firm name, business contact telephone, authorized administrator email address, practice areas, and configuration preferences.
  • Integration Credentials: API keys and OAuth tokens for your CRM or calendar (GoHighLevel, HubSpot, Cal.com) and telephony attorneys (Twilio). All credentials are encrypted at rest using AES-256 encryption.
  • Telephony Metadata: Inbound caller phone number, call duration, timestamp, and call routing status (e.g. consultation booked, transferred).

2. Ephemeral Audio Processing (Zero-Retention Standard)

Unlike traditional call centers or call recording software, VoxLead is engineered as a data-in-transit conduit:

  • Inbound caller audio is streamed directly to secure voice workers via SRTP/TLS encryption.
  • Speech-to-text, reasoning, and text-to-speech synthesis execute strictly in volatile memory (RAM).
  • Once a call terminates, raw audio buffers are purged from runtime memory. Audio files are not archived on VoxLead servers unless you specifically opt into customer-hosted cloud storage.
  • We do not use your callers' voice audio or consultation queries to train foundational public LLMs.

3. How We Use and Share Information

We process information solely to:

  • Deliver automated telephone answering and consultation scheduling for your firm.
  • Relay captured intake and consultation details directly to your connected CRM or booking calendar.
  • Enforce subscription billing and monitor system health, latency, and uptime.

We never sell, rent, or monetize your contact records or client interactions.

4. Data Security

We employ strict industry-leading administrative, technical, and physical security measures:

  • TLS 1.3 encryption across all public endpoints and WebRTC media channels.
  • AES-256 encryption at rest for all stored credentials and database volumes.
  • Tenant isolation with strict row-level authorization enforcing zero cross-tenant visibility.
  • Regular automated vulnerability scans and continuous audit logging.

5. Your Rights & Contact Us

Depending on your jurisdiction (including state privacy laws such as CCPA, and GDPR), you have rights to access, rectify, or request the deletion of your account and operational records.

For privacy or compliance inquiries, please contact our Data Protection Officer at: privacy@voxlead.ai.