1. Who we are
Voxvalley Technologies Pvt. Ltd., Hyderabad, India, together with Voxvalley Technologies Pte Ltd (Singapore), provides communications platform services. For data you give us directly (for example when you create an account or contact sales), we are the data controller. For message and call content our customers send through the platform, we act as a data processor on the customer's instructions.
2. Data we collect
Account data: name, business email, phone number, company details, billing information.
Traffic metadata: numbers, timestamps, delivery status, and routing information needed to deliver and bill communications.
Content in transit: messages, call audio, and AI agent conversations processed on behalf of our customers to provide the service.
Website data: device information, pages visited, and cookies used for analytics and security.
3. How we use data
We use data to deliver and route communications, operate AI agent workflows our customers configure, bill usage, prevent fraud and spam, meet legal obligations (including DLT registration and lawful interception requirements), improve service reliability, and respond to enquiries. We do not sell personal data.
4. Sharing
Data is shared only with: telecom carriers and channel providers needed to deliver traffic; sub-processors providing hosting, analytics, and support tooling under contract; regulators and law enforcement where legally required; and professional advisers. A current list of sub-processors is available on request.
5. International transfers
Voxvalley operates from India and Singapore. Where personal data crosses borders, we use contractual safeguards consistent with applicable law, including India's Digital Personal Data Protection Act, 2023, the GDPR for European data subjects, and applicable US state privacy laws.
6. Retention
Account data is kept for the life of the account and as required for tax and audit purposes. Traffic metadata is retained per telecom regulatory requirements. Message and call content is retained only as long as needed to deliver the service and per customer configuration, then deleted or anonymized. Website analytics data linked to cookies or device identifiers is kept in Google Analytics for 14 months and then deleted automatically. Aggregated reports that do not identify individual visitors may be kept longer.
7. Security
We apply encryption in transit, access controls, network segregation, logging, and employee confidentiality obligations. SOC 2 Type II and ISO 27001 certification programs are underway.
8. Your rights
Depending on your jurisdiction, you may request access, correction, deletion, or portability of your personal data, or object to certain processing. Indian users may also nominate a person to exercise rights on their behalf under the DPDP Act. Where we act as processor, we will redirect requests to the relevant customer.
9. Cookies
Our website uses essential cookies and Google Analytics cookies to understand how visitors use the site. Visitors in the European Economic Area, the United Kingdom and Switzerland are asked for consent before analytics cookies are set. Visitors elsewhere have analytics enabled by default and can turn it off by selecting Decline on the cookie banner. We do not use advertising cookies. You can change your choice at any time through Cookie settings in the site footer, or control cookies through your browser settings.
10. Children
Our services are for business use and not directed at children. We do not knowingly collect children's data.
11. Grievance officer and contact
Privacy questions, rights requests, and grievances: legal@voxvalley.com, marked to the Grievance Officer, Voxvalley Technologies Pvt. Ltd., Hyderabad, India. We will acknowledge grievances within the timelines prescribed by applicable law.
12. Changes
We will post updates to this policy here and, for material changes, notify account holders by email.