Privacy Policy

Last updated: June 7, 2026

1. Introduction

Movoice AI ('we,' 'our,' or 'us') is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI voice agent platform, websites, and mobile applications (collectively, the 'Services'). By using the Services, you agree to the practices described here.

For the purposes of India's Digital Personal Data Protection Act, 2023 ('DPDP Act'), Movoice AI acts as a Data Fiduciary in respect of personal data we determine the purpose and means of processing. For the purposes of the EU/UK GDPR, we act as a data controller for our account holders and as a data processor for personal data contained in calls our customers place through the Services.

2. Information We Collect

2.1 Personal Information

  • Name and email address (via authentication providers)
  • Phone numbers (for voice call functionality)
  • Business information you provide
  • Payment information (processed securely by third-party providers)

2.2 Usage Data

  • Call logs, call metadata, and transcripts
  • Voice recordings (call audio) and transcripts
  • Agent configurations and settings
  • Analytics and performance metrics
  • Device and browser information

3. Voice Calls & Call Recording

Our Services place and receive voice calls using AI voice agents, and record, store, and transcribe call audio to provide transcripts and analytics, to support and secure the Services, and to help resolve disputes.

  • How recording works: Calls placed through the Services may be recorded and stored on our servers. Whether a given call is recorded depends on how the call is placed rather than a per-agent on/off setting. Every call handled by an AI agent begins with an automated announcement that the call is AI-powered and may be recorded; this announcement cannot be disabled. Calls you conduct personally through the Services carry no automated announcement, and you are responsible for giving any recording notice required where the recipient is located.
  • Retention: Recordings are kept for the life of your account until you choose a retention window in your account settings or delete your account, after which they are permanently deleted, subject to any retention required by law.
  • Customer responsibility: If you use the Services to call or message individuals, you are solely responsible for obtaining all consents and providing all disclosures required by applicable law, including call-recording consent (such as two-party / all-party consent requirements) and, where required, disclosure that the recipient is interacting with an artificial / AI voice.
  • We process call audio and transcripts to operate the Services and, in de-identified or aggregated form, to improve service quality. We do not use the content of customer calls to train third-party foundation models for their own purposes.

4. How We Use Your Information

  • Provide and maintain our AI voice agent Services
  • Process voice calls and generate transcripts and analytics
  • Enable calendar integrations for appointment booking
  • Process payments and manage subscriptions
  • Communicate with you about your account, security, and service updates
  • Improve our Services, develop new features, and maintain safety and security
  • Comply with legal obligations

Where required by the GDPR, we rely on the following legal bases: performance of a contract, your consent, our legitimate interests (e.g., securing and improving the Services), and compliance with legal obligations. Under the DPDP Act, we process personal data on the basis of your consent or for legitimate uses permitted by the Act.

5. Data Sharing & Sub-Processors

We may share your information with trusted service providers ('sub-processors') who process data on our behalf to deliver the Services, including:

  • Telephony: Twilio and other carriers (call connectivity)
  • AI / speech processing: OpenAI, Google (speech-to-text, language models, transcription)
  • Payments: third-party payment processors
  • Authentication & infrastructure: identity and cloud hosting providers

These providers are permitted to use personal data only as necessary to provide their services to us. We may also disclose information where required by law, to enforce our terms, or to protect the rights, safety, and security of Movoice AI, our users, or the public. We do not sell your personal information to third parties.

6. International Data Transfers

We are based in India and use service providers located in other countries, including the United States. As a result, your personal data may be transferred to, stored, and processed outside your country of residence. Where required, we implement appropriate safeguards (such as Standard Contractual Clauses) for such transfers.

7. Data Retention

We retain personal data only for as long as necessary to provide the Services and for the purposes set out in this Privacy Policy, unless a longer retention period is required or permitted by law.

  • Account data: retained while your account is active and deleted within 90 days of account deletion, subject to legal retention requirements.
  • Call recordings & transcripts: kept for the life of your account until you set a retention window in Settings or delete your account, after which they are permanently deleted; you may also delete them or request deletion at any time.
  • Billing records: retained as required by applicable tax and accounting laws.

8. Your Rights & Choices

Subject to applicable law, you have the right to:

  • Access the personal data we hold about you
  • Correct or update inaccurate or incomplete data
  • Delete your personal data ('right to erasure')
  • Restrict or object to certain processing
  • Data portability (receive your data in a structured, machine-readable format)
  • Withdraw consent at any time, without affecting prior lawful processing
  • Nominate another individual to exercise your rights in the event of death or incapacity (under the DPDP Act)
  • Lodge a complaint with your data protection authority (for EU/UK users) or the Data Protection Board of India (under the DPDP Act)

To exercise any of these rights, contact us at privacy@movoice.ai. You can delete your account at any time directly in the Movoice AI app under Settings → Delete Account.

California residents (CCPA/CPRA): you have the right to know what personal information we collect, to request deletion, to correct inaccurate information, and to opt out of the 'sale' or 'sharing' of personal information. We do not sell personal information. You will not be discriminated against for exercising these rights.

9. Security & Compliance

Movoice AI maintains an enterprise-grade security and compliance program. We have been independently assessed by UKASL (UK Quality Assessment & Certification Services Ltd) against the standards below, and we operate in alignment with the following frameworks:

  • ISO/IEC 27001 — Information security management (independently assessed by UKASL)
  • ISO/IEC 27017 — Cloud services security (independently assessed by UKASL)
  • ISO 9001:2015 — Quality management (independently assessed by UKASL)
  • HIPAA-ready — Business Associate Agreements (BAAs) available on request for protected health information
  • GDPR-aligned, and compliance with India's DPDP Act, 2023
  • SOC 2 Type II — our cloud infrastructure is built on SOC 2 Type II certified providers

We implement appropriate technical and organizational measures including encryption in transit and at rest, access controls, and continuous monitoring. Assessment details are available on request. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. SMS / Text Messaging

By providing your mobile phone number, you consent to receive SMS notifications regarding appointments, account verification, and updates. Message and data rates may apply. You can opt out at any time by replying STOP, and reply HELP for assistance.

11. Children's Privacy

Our Services are not directed to individuals under the age of 18, and we do not knowingly collect personal data from children. If we learn that we have collected personal data from a child without appropriate consent, we will delete it. If you believe a child has provided us personal data, contact us at privacy@movoice.ai.

12. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the 'Last updated' date above and, where appropriate, notify you by email or through the Services. Your continued use of the Services after changes take effect constitutes acceptance of the updated policy.

13. Grievance Officer & Contact

If you have questions about this Privacy Policy, or wish to exercise your rights or raise a grievance, please contact:

Grievance / Data Protection Officer
Movoice AI
Email: privacy@movoice.ai

In accordance with the DPDP Act, 2023 and applicable rules, we will acknowledge and respond to grievances within the timelines prescribed by law.