Who We Are

Voicepay (“Voicepay”, “we”, “us”, “our”) provides payments infrastructure that lets AI voice agents take card payments during a live phone call. The controller of personal data described in this policy is Voicent AI LLC, 131 Continental Dr., Suite 305, Newark, DE, 19713.

This policy explains what personal data we collect, why, who we share it with, and what rights you have.

Scope

This policy covers:

Visitors to the Voicepay website;
Waitlist subscribers who give us an email address;
Customers and their personnel who use the Voicepay API, SDKs, or dashboard.

It does not cover the sites and services of third parties you reach from our site, or how our customers handle personal data in their own products. Where a business uses Voicepay to take a payment from its own caller, that business is the controller of the caller’s data and Voicepay acts as its processor; the business’s own privacy notice governs that relationship.

Card Details: What We Never Receive

This is the most important thing to understand about how Voicepay works.

When a caller pays during a call, they type their card details on their telephone keypad. Those tones are captured by the telephony carrier’s payment path. The card details are exchanged for a token before they reach us.

As a result:

We do not receive, process, or store full card numbers, expiry dates, or security codes.
The AI voice agent on the call does not receive them either — the agent’s audio is separated from the keypad tones for the duration of the capture.
What we do hold is a token, the card brand, and the last four digits, which are used to reference the payment and to show a human-readable receipt.

We do not use payment data for advertising, profiling, or model training.

Information We Collect

Information you give us

Waitlist. Your email address and the date you joined. If you choose to answer our optional qualifying questions, we also collect your company name, your role, the voice platform you use, your approximate monthly call volume, and your timeline for going live. Those questions are optional and skipping them does not affect your place in the queue. If you joined through a referral link, we also record which subscriber’s link you used and keep the referral code we issued to you.
Enquiries. Your name, email address, company, and anything you choose to put in a message when you contact us.
Account details. If we grant you access, the name, email address, and credentials of the people you authorise to use the Service.

Information generated by your use of the Service

Call and transaction metadata — a call or session identifier, timestamps, amount, currency, merchant identifier, the outcome of the payment, and the token, brand, and last four digits described above.
Technical logs — API requests, error and diagnostic events, and the identifiers needed to trace a request. Payloads are redacted so that card details are never written to a log line.

Information collected automatically

When you browse the website we receive standard technical information such as your IP address, browser and device type, referring page, and the pages you view. This is used to keep the site available and secure.

We also receive product analytics — which pages you viewed, in what order, what you clicked, whether a form was submitted, and any JavaScript error the page hit. This is described in full under Cookies below.

When you submit the waitlist form we additionally record the IP address and browser user-agent string the submission came from. We use this only to detect and investigate automated signups, duplicate entries, and attempts to abuse the referral system. We do not use it to profile you or to build an advertising audience, and we delete it 90 days after you sign up while keeping the rest of your waitlist entry.

The Waitlist

When you join the waitlist we collect your email address. After you submit it, we ask five optional questions about your company, your role, the voice platform you use, your monthly call volume, and your timeline. Answering them helps us decide who to onboard first and what to build; skipping them costs you nothing and does not change your position in the queue. You can ask us to delete your answers at any time and stay on the list.

Why. To tell you when early access opens and to send closely related product news.
Lawful basis. Your consent, or our legitimate interest in responding to a request you made for a product you asked about.
Confirming your address. We send you a confirmation link and you only join the queue once you click it. Until then we hold your address as an unconfirmed request.
Your place in the queue. We assign each confirmed subscriber a position based on when they confirmed their email address. We tell you your position, and it may change as other people join, confirm, or leave the list.
What we will not do. We will not sell or rent your address, add you to unrelated marketing, or pass it to third parties for their own marketing.
Unsubscribing. Every email includes an unsubscribe link, and you can email us at any time to be removed. We keep a suppression record of the fact that you unsubscribed so that we do not contact you again.
How long. We keep waitlist entries until early access opens and for 24 months afterwards, or until you ask us to remove you, whichever comes first.

Referrals

Each confirmed subscriber gets a personal referral link. If you join through someone else’s link, we record which link you used, which means we hold a record that the other person referred you. We use it for one thing: moving them up the queue when you confirm your email address.

We do not tell your referrer your email address, your company, or your answers to the qualifying questions. They see only a count of how many of their referrals have confirmed. If you would rather we did not keep that connection, email us and we will remove it; your own position is unaffected.

Joining the waitlist does not create an account and does not by itself commit you to the Terms of Service.

How We Use Information

We use personal data to:

operate, secure, and improve the Service, including troubleshooting and capacity planning;
process and reconcile payments initiated through the Service, and support disputes and refunds;
respond to enquiries and provide support;
send service messages such as security, availability, and material change notices;
send early-access and product email where you have asked for it;
detect, investigate, and prevent fraud, abuse, and violations of our terms;
comply with legal, tax, accounting, and card network obligations.

Legal Bases (UK and EEA)

Where UK or EU data protection law applies, we rely on: contract, to provide a service you or your organisation has asked for; legitimate interests, to secure and improve the Service, to understand how the website is used, and to prevent fraud, balanced against your rights; consent, for optional marketing email and for the analytics described under Cookies, which you may withdraw at any time; and legal obligation, where we must retain or disclose data.

We do not sell personal data, and we do not share it for cross-context behavioural advertising.

We share it with service providers who process it on our behalf under contract:

Telephony and payment capture providers, which operate the keypad capture path;
Payment gateways and acquirers, to authorise and settle transactions — these are typically chosen and contracted by our customer;
Cloud hosting and infrastructure providers, which host the Service and its logs;
Google Fonts, which serves the typeface used on this website; requesting a font discloses your IP address to Google;
Resend, which sends waitlist and product email on our behalf;
Vercel, which hosts this website and runs the code behind the waitlist form;
Neon, which provides the database that stores waitlist entries;
PostHog, our product analytics provider, which receives the page views, clicks and form events described under Cookies, together with the random identifier in the analytics cookie and, once you submit the waitlist form, the reference number of your waitlist entry;
GoHighLevel (HighLevel Inc.), our customer relationship management platform, which holds waitlist and enquiry records so our team can follow up. We send it your email address, the date you confirmed, your answers to the optional questions, and your referral details. We do not send it anything you have not given us.

We may also disclose personal data where required by law or legal process, to protect our rights, property, or the safety of others, or in connection with a merger, acquisition, or sale of assets, in which case we will tell you before your data becomes subject to a different policy.

Cookies and Similar Technologies

The Voicepay website does not set advertising or cross-site tracking cookies, and we do not sell or share what we collect for anyone else’s marketing.

We do use product analytics, provided by PostHog. When you load a page, PostHog sets a first-party cookie holding a random identifier so that repeat page views in the same visit are recognised as one session. We use it to see which parts of the page people read, where they stop, and whether the waitlist form works — that is, to make the site better, not to build a profile of you or follow you to other sites. The identifier is random and meaningless outside Voicepay. Until you submit the waitlist form we make no attempt to connect it to a person; once you do, we link that session to the reference number of your waitlist entry, so that we can tell a completed signup from an abandoned one.

If you would rather not be counted, enable Global Privacy Control or “Do Not Track” in your browser and PostHog will not record you, or block us.i.posthog.com with any content blocker. Nothing on this site stops working if you do.

When you submit your email address to our waitlist or any registration form, you are consenting to our use of analytics cookies, and to our recording that submission as an analytics event so we can measure how many people complete the form. That event is tied to the waitlist entry we create for you, and it is deleted when your waitlist entry is deleted.

If you arrive through a referral link, your browser stores the referral code for the duration of that browsing session so that we can credit the person who referred you when you submit the form. It is cleared when you close the tab, it is not readable by anyone else, and it is not used to track you across sites or sessions.

Data Retention

We keep personal data only as long as we need it for the purposes above:

waitlist entries, as described in the Waitlist section;
the IP address and user-agent recorded with a waitlist signup, for 90 days;
product analytics, for as long as our analytics provider retains them under our plan, after which they are aggregated or deleted;
transaction records and related metadata, for the period required by tax, accounting, and card network rules, typically 7 years;
technical logs, for a short operational window of 90 days;
enquiries, for as long as needed to deal with them and to keep a record of the exchange.

We then delete the data or irreversibly anonymise it.

Security

We use technical and organisational measures appropriate to the risk, including encryption in transit, access controls and least-privilege access, redaction of sensitive fields before logging, and separation of the payment capture path from the AI agent’s audio. No system is completely secure, and we cannot guarantee absolute security. If a breach affects your personal data and the law requires it, we will notify you and the relevant regulator within the required timeframe.

International Transfers

We may process personal data in countries other than your own, including the United States. Where we transfer personal data out of the UK or EEA, we rely on an adequacy decision or on appropriate safeguards such as the UK International Data Transfer Agreement or the EU Standard Contractual Clauses. You can request a copy of the safeguards we use by contacting us.

Your Rights

Subject to your local law, you may have the right to access the personal data we hold about you; to have it corrected or deleted; to restrict or object to our processing of it; to receive it in a portable format; and to withdraw consent at any time without affecting processing already carried out.

UK and EEA. You may lodge a complaint with your local supervisory authority. In the UK this is the Information Commissioner’s Office.

California. If you are a California resident, you may request disclosure of the categories and specific pieces of personal information we have collected, request deletion or correction, and opt out of any sale or sharing. As stated above, we do not sell or share personal information for cross-context behavioural advertising. We will not discriminate against you for exercising these rights.

To exercise any right, contact us using the details below. We may need to verify your identity, and we will respond within the period the applicable law allows.

Children’s Privacy

The Service is intended for business use and is not directed at children. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, contact us and we will delete it.

Changes to This Policy

We may update this policy from time to time. We will change the date at the top of this page and, where the change is material and we hold your contact details, take reasonable steps to tell you.

Contact Us

For any privacy question, or to exercise a right described above:

Email: contact@voicent.ai
Postal: Voicent AI LLC, 131 Continental Dr., Suite 305, Newark, DE, 19713
Data protection contact: dpo@voicent.ai

Privacy Policy