Privacy Policy

Last updated: November 3, 2026

1. Information We Collect

We collect information necessary to provide and operate conversational telephony services. This includes account details (name, email, company name, workspace identifiers), telephony numbers, call session logs (duration, status, timestamps), and audio call recordings captured during authorized sessions.

2. Audio Recording & Voice Data Security

All call recordings and voice synthesized audio assets are encrypted and stored in tenant-isolated private disk storage. Audio files are never indexed publicly or made searchable on open networks. Access to audio recordings requires time-limited, HMAC-signed authorization tokens generated exclusively for authenticated workspace users.

3. Carrier & AI Sub-Processors

To deliver voice calls and synthetic speech, we integrate with verified telecommunications carriers (Plivo, Vobiz) and speech synthesis providers (ElevenLabs, Cartesia). Audio streams routed through these sub-processors are transmitted securely via TLS and WSS connections. Tenant API keys (Bring Your Own Key) remain isolated and are never shared across tenant accounts.

4. Retention & Deletion

Call records and recordings are retained strictly according to your active subscription plan retention policy (ranging from 7 to 90 days). Tenants may delete call recordings or request complete account erasure at any time through workspace settings.

5. Contacting the Data Protection Officer

If you have questions regarding this Privacy Policy or wish to exercise data rights, please contact our security team at privacy@zippyera.com or via our Contact Page.