Privacy Policy

Voocara (“we”, “us”) builds and operates AI voice and chat agents for business clients. You can reach us at hello@voocarai.com.

We act in two different roles, and which one applies changes your rights:

• As a controller — for information you give us directly through this website, when you are a prospective or current Voocara client.
• As a processor — for information our AI agents handle on behalf of a client. If an agent called you or answered your call on behalf of a business, that business decides how your information is used. We handle it under their instructions. Contact them first; we will help them respond.

When you contact us through this site. The name, company, email address, phone number and message you enter into our contact form. Only a name plus either an email address or a phone number are required.

When you speak or chat with one of our AI agents. Your phone number, a recording and/or written transcript of the conversation, and anything you tell the agent — which may include your name, your company, your budget, your timeline and your requirements. We also store a short automated summary and an assessment of how likely you are to want to buy.

When you use our client dashboard. Your email address, name, the client organisation you belong to, and your sign-in credentials, which are held by our authentication provider and never in plain text.

Automatically. Your IP address and standard server log data. If website analytics are enabled, our analytics provider also sets cookies to measure traffic — see section 7.

This is the part of our service most likely to matter to you, so we are being specific about it.

• Calls handled by our AI agents are transcribed, and may be recorded, and both are stored.
• Transcripts are stored in full. We do not currently redact or mask personal information inside them, so anything said during a call is retained as spoken.
• The recording or transcript is available to the client business whose agent handled the call, through their Voocara dashboard.
• Our agents disclose at the start of a call that they are an AI assistant and that the call is recorded. If you did not receive that disclosure, tell us — that is a defect and we want to know.
• If you do not consent to being recorded, say so and end the call, or ask to be transferred to a person. You can also ask us to delete the recording afterwards (section 8).

Some jurisdictions require every party to a call to consent to recording. Where that applies, our clients are responsible for ensuring their use of the service meets that requirement, and we provide the disclosure controls to do it.

• To respond to your enquiry and to contact you about our services.
• To answer your call or chat, qualify your enquiry and book meetings on behalf of the client you contacted.
• To pass qualified enquiries to the client business whose agent you spoke with, including into their own CRM where they have configured one.
• To operate, secure and improve the service — including rate limiting and abuse prevention.
• To meet our legal and accounting obligations.

Where the GDPR applies, we rely on legitimate interests for responding to business enquiries and for operating and securing the service, on consent for analytics cookies and for call recording, and on contractual necessity for running an account you hold with us.

We do not sell personal information, and we do not share it for cross-context behavioural advertising.

We share personal information with the following categories of service provider, each only to the extent needed to run the service:

• Supabase — database, authentication and file storage. Contact records, transcripts and account data live here.
• ElevenLabs— conversational AI. Processes call and chat audio and text to produce the agent's responses.
• Twilio — telephony. Carries inbound and outbound calls.
• Google — business email and, where enabled, website analytics.
• The client business whose agent handled your conversation, including any CRM they have connected.

We also disclose information where the law requires it, and to professional advisers or an acquirer in connection with a sale of the business.

Our application servers are in the United States. Our service providers may process information in the United States and the European Union. Where personal information moves out of the UK or EEA, we rely on the provider's standard contractual clauses or an equivalent transfer mechanism.

We use a small number of strictly necessary cookies to keep you signed in to the dashboard. These cannot be turned off without breaking sign-in.

Where website analytics are enabled, Google Analytics sets additional cookies to measure how the site is used. These are not necessary for the site to work. You can block them with your browser settings or a browser extension, and most consent tooling will also block them.

We keep enquiry records and conversation data for as long as we have an active relationship with you or the client you contacted, and afterwards only as long as we need it for legal, accounting or dispute-resolution reasons.

Depending on where you live, you may have the right to:

• Ask what personal information we hold about you and get a copy.
• Ask us to correct anything inaccurate.
• Ask us to delete it, including a specific call recording or transcript.
• Object to or restrict how we use it, and withdraw consent you previously gave.
• Ask us to send it to another provider in a portable format.
• Not be discriminated against for exercising any of these rights.

Email hello@voocarai.com and we will respond within 30 days. If your data was handled on a client's behalf we will route your request to them and support them in answering it. If you are in the UK or EEA and are unhappy with our response, you can complain to your local data protection authority.

Traffic to this site is encrypted in transit. Dashboard access requires an account, and each client organisation's data is isolated from every other one at the database layer. Access to production systems is limited to people who need it.

No system is perfectly secure. If you believe you have found a vulnerability, please report it to hello@voocarai.com rather than disclosing it publicly, and we will work with you on it.

Voocara is a business-to-business service and is not directed at children. We do not knowingly collect information from anyone under 16. If you believe we have, contact us and we will delete it.

We will update this page when our practices change and revise the date at the top. If a change materially affects how we use information you have already given us, we will tell you directly.