Privacy Policy

• Account information, your name, email, password (stored only as a salted hash), and the business details you provide.
• Your knowledge base, the business facts, services, hours, greetings, and other content you add or that we extract from a website URL you submit.
• Call data, phone numbers, call metadata (time, duration), and, where enabled, audio recordings, transcripts, and AI-generated summaries of calls handled by your agent.
• Usage & device data, log data, approximate location from IP, and basic analytics about how the Service is used.
• Payment information, handled by our payment processor; we don’t store full card numbers.
• Sign-in with Google, if you choose it, we receive your name, email, and Google account identifier to create or access your account. We don’t receive your Google password.

• Provide and operate the Service, answer calls, apply your knowledge base, take messages, and schedule.
• Authenticate you, maintain your session, and keep your account secure.
• Transcribe and summarize calls so you can review them.
• Improve reliability and quality, troubleshoot, and develop features.
• Send service, security, and billing communications.
• Comply with law and enforce our Terms.

When call handling, recording, or transcription is enabled, audio and transcripts are processed to operate the Service and made available to you in your console. You are responsible for providing any notice to callers and obtaining any consent that the law in your jurisdiction requires before recording.

We don’t sell your personal information. We share it only as needed to run the Service:

• Service providers (subprocessors), telephony and number provisioning, cloud hosting and storage, AI model providers used to understand calls and build knowledge, and payment processing. They may process data only on our instructions.
• At your direction, e.g. calendars or tools you connect.
• Legal & safety, when required by law or to protect rights, safety, and the integrity of the Service.
• Business transfers, in connection with a merger, acquisition, or sale of assets, subject to this Policy.

We keep information for as long as your account is active or as needed to provide the Service, then for a reasonable period to meet legal, accounting, or security obligations. You can ask us to delete your account and associated data, subject to limited exceptions the law allows.

We use technical and organizational measures to protect your information, including encryption in transit, hashed passwords, and access controls. No method of transmission or storage is perfectly secure, so we can’t guarantee absolute security.

Depending on where you live, you may have rights to access, correct, export, or delete your personal information, and to object to or restrict certain processing. To exercise them, contact us at hello@envoca.app. You can also edit much of your data directly in the console, and unsubscribe from non-essential emails.

We use cookies and browser local storage to keep you signed in, remember your in-progress setup, and understand basic usage. You can control cookies through your browser, though some features may not work without them.

We operate in the United States and may process information there and in other countries where our providers operate. Where required, we use appropriate safeguards for cross-border transfers.

The Service isn’t directed to children under 18, and we don’t knowingly collect their personal information.

We may update this Policy from time to time. We’ll change the “Last updated” date above and, for material changes, take reasonable steps to notify you.

Questions or requests about your privacy? Email us at hello@envoca.app. See also our Terms of Service.