Privacy Policy

This Privacy Policy explains how Kiyado Labs (“Kiyado Labs”, “we”, “us”) collects, uses, and shares information when you visit voxylo.cloud or use the Voxylo platform, including the dashboard, APIs, embeddable widget, and the voice and chat agents built on it (together, the “Service”).

If you build agents on Voxylo, you are responsible for the people your agents talk to. In that case you act as the data controller for their conversations and we process that data on your behalf, as described in our Terms of Service.

Information we collect

Information you give us

• Account details: your name, email address, password (stored only as a salted hash), and workspace details. If you sign in with Google, we receive your name, email address, and profile picture from Google.
• Workspace content: agent configurations, prompts, conversation flows, knowledge base documents, URLs you ask us to crawl, API and webhook settings, and any credentials you store for integrations.
• Support messages: anything you send us by email or through the Service.

Information created when agents are used

• Conversation data: chat messages, call audio as it is streamed, transcripts, tool calls and their results, and call metadata such as phone numbers, timestamps, and duration.
• Usage and technical data: IP address, browser and device details, request logs, and error logs, which we use to run, secure, and debug the Service.

Information from Google Drive

If you connect Google Drive, Voxylo asks for the drive.filescope. This scope gives us access only to the files you pick in the Google file picker. We read those files so we can add their content to your agent’s knowledge base and keep it in sync. We cannot see any other files in your Drive.

How we use information

• To provide, run, and maintain the Service, including running your agents.
• To authenticate you and keep your account and workspace secure.
• To process knowledge base content so your agents can search and cite it.
• To send account and service emails, such as verification emails, password resets, invitations, and important notices.
• To troubleshoot problems, prevent abuse, and improve reliability.
• To meet our legal obligations and enforce our terms.

We do not sell personal information. We do not use your workspace content or conversation data to train our own or third-party general-purpose AI models.

Google user data

Voxylo’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

• We use Google user data only to provide and improve the user-facing features you asked for, such as signing in and importing your chosen Drive files into your knowledge base.
• We transfer Google user data to others only when needed to provide those features, when required by law, or as part of a merger or acquisition with your consent.
• We do not use Google user data for advertising.
• We do not use Google user data to develop, improve, or train general-purpose AI or machine learning models.
• No person reads Google user data unless you have given us permission for specific files, it is needed for security or to comply with the law, or the data has been aggregated and anonymized for internal operations.

You can disconnect Google Drive in Voxylo at any time. You can also revoke access from your Google Account permissions page.

How we share information

We share information with service providers (subprocessors) only when they need it to run the Service:

• LiveKit: real-time audio transport and phone (SIP) calls.
• AI model providers: depending on the models you pick for an agent, these may include OpenAI, Google, Deepgram, AssemblyAI, Cartesia, and ElevenLabs. They handle language model responses, speech-to-text, and text-to-speech.
• Cloudflare: file storage for uploaded documents and backups.
• Resend: sending account and service emails.
• Google: sign-in and, if you connect it, Google Drive.
• Hosting providers: the servers our application and databases run on.

When you configure webhooks, custom tools, or other integrations, your agents send data to the destinations you choose. Those destinations are responsible for how they handle that data. We may also disclose information when the law requires it, to protect the rights and safety of our users or the public, or as part of a merger, acquisition, or sale of assets. If that happens, we will give you notice.

Retention

We keep account and workspace data for as long as your account is active. Conversation data is kept until you delete it or until your workspace is deleted. When you delete your account, we delete or anonymize your personal information within a reasonable period, unless the law requires us to keep it longer. Backups are removed on their normal rotation schedule.

Security

We protect information with encryption in transit (TLS), hashed passwords, access controls, and rate limiting. No system is perfectly secure. If you believe your account has been compromised, contact us right away.

Cookies

We use cookies that are strictly necessary to keep you signed in and protect your session. This marketing site does not use advertising or cross-site tracking cookies.

Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. You can update most information in the dashboard. For anything else, email us at support@voxylo.cloud. If you talked to an agent built by one of our customers, please contact that business first. We will help them respond to your request. You may also have the right to complain to your local data protection authority.

International transfers

We and our service providers may process information in countries other than the one you live in. Where required, we rely on appropriate safeguards for these transfers, such as standard contractual clauses.

Children

The Service is not directed to children under 16, and we do not knowingly collect their personal information.

Changes to this policy

We may update this policy from time to time. If we make material changes, we will notify you by email or in the Service before they take effect. The date at the top of this page shows when the policy was last updated.

Contact

Questions about this policy? Email us at support@voxylo.cloud.