Privacy Policy.

We collect three categories of data:

• Account data — name, work email, company, billing details.
• Usage data — API logs, request metadata, dashboard activity, device and browser information.
• Customer Data — audio, transcripts, prompts, and metadata you submit through the Services.

We use personal data to:

• Provide, secure, and improve the Services for you.
• Bill accurately and prevent fraud or abuse.
• Send service announcements and, with consent, product updates.
• Meet legal, regulatory, and compliance obligations.

We do not sell personal data, and we do not use Customer Data to train shared foundation models without your written opt-in.

Where GDPR applies, we rely on contract performance (to deliver the Services), legitimate interests (to secure and improve the platform), consent (for optional marketing), and legal obligation (for tax and compliance).

We share personal data only with:

• Sub-processors who help operate the Services (hosting, telecom carriers, observability) under written data protection terms.
• Authorities when required by law, with notice to you unless legally prohibited.
• Acquirers in the event of a merger, acquisition, or asset sale, subject to this Policy.

Vocal is headquartered in the United States. Where personal data is transferred from the EEA, UK, or Switzerland, we use Standard Contractual Clauses and additional safeguards as required.

Account data is retained for the life of your account and up to 7 years after closure for tax and audit purposes. Customer Data is retained per your workspace settings and deleted within 60 days of account termination, subject to legal holds.

We maintain SOC 2 Type II, HIPAA, and GDPR programs. Data is encrypted in transit (TLS 1.2+) and at rest (AES-256). Access is least-privilege, logged, and reviewed quarterly.

Depending on your jurisdiction, you may have the right to access, correct, delete, port, or restrict processing of your personal data, and to object to certain uses. Submit requests to privacy@tryvocal.io. We respond within 30 days.

The Services are not directed to children under 16, and we do not knowingly collect personal data from them. Contact us if you believe a child has provided data and we will delete it.

We may update this Policy from time to time. Material changes will be communicated at least 30 days in advance via email or in-product notice.

Privacy questions can be sent to privacy@tryvocal.io or by mail to TryVocal Labs, Inc., 762 Fulton St, San Francisco, CA 94102. Our EU representative can be reached at eu-rep@tryvocal.io.