Privacy Policy
How Woyce AI collects, uses, and protects your personal data.
1. Information we collect
Information you provide directly
When you fill in a contact form, book a discovery call, apply for a job, or partner with us, we collect your name, email address, company name, role, and any message content you submit.
Usage data
When you visit woyce.ai, we automatically collect standard server log data: IP address, browser type and version, pages visited, referring URL, and timestamps. This data is anonymised before any analysis.
Communication data
If you use a Woyce-powered Voice AI or chatbot product on behalf of a client engagement, voice recordings, transcriptions, and chat messages may be processed to deliver the service. These are covered by a separate Data Processing Agreement signed with each client.
2. How we use your information
- Respond to enquiries and deliver the services you request
- Schedule and run discovery calls and project engagements
- Send transactional emails (booking confirmations, invoices, project updates)
- Improve our website, products, and internal processes
- Comply with applicable laws and prevent fraud
We do not use your data for advertising, profiling, or sale to third parties.
3. Data sharing & third parties
Service providers
We share data only with processors who support core functions such as email delivery, cloud hosting (AWS/GCP), analytics, and project management. All processors are bound by data processing agreements and may not use your data for their own purposes.
Legal requirements
We may disclose data if required by law, court order, or to protect the rights and safety of Woyce and its clients.
Business transfers
In the event of a merger or acquisition, personal data may be transferred as part of the business assets. You will be notified before your data becomes subject to a materially different privacy policy.
4. Data security
- Data in transit is encrypted with TLS 1.2+
- Data at rest is encrypted using AES-256
- Access to personal data is restricted on a need-to-know basis
- We conduct periodic security reviews aligned with OWASP guidelines
- We do not store payment card data — all payments are handled by PCI-DSS compliant processors
No transmission over the internet is 100% secure. We apply industry-standard controls but cannot guarantee absolute security.
5. Data retention
We retain enquiry and contact form data for 24 months or until you request deletion, whichever is earlier. Project-related data is retained for the duration of the engagement plus 7 years as required by financial regulations. Server logs are purged after 90 days.
6. Your rights
- Access: request a copy of the personal data we hold about you
- Rectification: ask us to correct inaccurate data
- Erasure: request deletion of your data where we have no legal obligation to retain it
- Restriction: ask us to pause processing while a dispute is resolved
- Portability: receive your data in a structured, machine-readable format
- Objection: object to processing based on legitimate interests
To exercise any of these rights, email info@woyce.ai. We will respond within 30 days. You may also lodge a complaint with your local data protection authority.
8. Children's privacy
Our services are intended for business use and are not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, contact us immediately at info@woyce.ai.
9. Changes to this policy
We will post any material changes to this policy on this page with an updated effective date at least 14 days before they take effect. Continued use of woyce.ai after that date constitutes acceptance of the updated policy.