Privacy Policy
Last Updated: November 5, 2025
Effective Date: November 5, 2025
Zlavox AI ("we," "us," "our," or "Zlavox") is committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you access our website (zlavox.ai), use our AI voice agent services, or otherwise interact with us (collectively, the "Services").
This Privacy Policy is designed to comply with the UK General Data Protection Regulation (UK GDPR) and other applicable data protection laws. By using our Services, you agree to the collection and use of information in accordance with this Privacy Policy.
Quick Links
1. Information We Collect
1.1 Information You Provide Directly
We collect information you provide when you:
- Create an account: Name, email address, phone number, company name, job title, billing information
- Use our Services: Voice recordings, conversation transcripts, queries, feedback
- Contact support: Support requests, correspondence, attachments
- Participate in surveys: Responses and feedback
1.2 Information Collected Automatically
When you use our Services, we automatically collect:
- Device information: IP address, browser type, operating system, device identifiers
- Usage data: Pages visited, time spent, clicks, interactions
- Cookies: See our Cookies Policy for details
- Call logs: Date, time, duration, and outcome of voice interactions
1.3 Information from Third Parties
We may receive information from third-party services you connect to our platform (e.g., CRM systems, calendaring tools, analytics providers).
2. How We Use Your Information
We use your information for the following purposes:
- Service Delivery: Provide, maintain, and improve our AI voice agent services
- Personalization: Customize and optimize your experience
- Communication: Send service updates, respond to inquiries, provide support
- Analytics: Analyze usage patterns to improve functionality
- Security: Detect fraud, prevent abuse, and ensure platform security
- Legal Compliance: Meet regulatory and legal obligations
- Marketing: Send promotional materials (with your consent)
- AI Training: Improve AI models (you can opt out—see Section 8)
3. Legal Basis for Processing (UK GDPR)
Under the UK GDPR, we process your personal data on the following legal bases:
- Contract Performance: To fulfill our contractual obligations to you
- Consent: Where you have given explicit consent (e.g., marketing communications)
- Legitimate Interests: For business operations, fraud prevention, and service improvement
- Legal Obligation: To comply with applicable laws and regulations
4. Data Retention
We retain personal data only as long as necessary for the purposes outlined in this Privacy Policy or as required by law:
Account information: Duration of your account + 7 years
Voice recordings: 90 days (or as configured in your settings)
Conversation transcripts: 2 years
Usage logs: 1 year
Marketing data: Until you opt out or withdraw consent
5. Your Rights Under UK GDPR
As a UK data subject, you have the following rights:
Right to Access
Request a copy of your personal data we hold
Right to Rectification
Correct inaccurate or incomplete personal data
Right to Erasure ("Right to be Forgotten")
Request deletion of your personal data in certain circumstances
Right to Restrict Processing
Limit how we use your personal data
Right to Data Portability
Receive your data in a portable format and transfer it to another provider
Right to Object
Object to processing based on legitimate interests or for direct marketing
Right to Withdraw Consent
Withdraw consent at any time where processing is based on consent
Right to Lodge a Complaint
File a complaint with the Information Commissioner's Office (ICO)
To exercise your rights, contact our Data Protection Officer at:
6. Voice Data Processing
Special Category Data
Voice recordings may contain sensitive information. We process voice data with additional security measures and only for the purposes you authorize.
How We Handle Voice Data:
- Encryption: All voice data is encrypted in transit and at rest
- Storage: Stored securely for up to 90 days (configurable)
- Access Controls: Strict access controls limit who can access recordings
- Anonymization: Voice data used for analytics is anonymized
- Deletion: You can request deletion of specific recordings at any time
7. Data Security
We implement robust technical and organizational measures to protect your personal data:
Technical Measures
- • End-to-end encryption
- • Secure servers and databases
- • Regular security audits
- • Intrusion detection systems
- • Multi-factor authentication
Organizational Measures
- • Employee training on data protection
- • Strict access controls
- • Data processing agreements
- • Incident response procedures
- • Regular compliance reviews
8. International Data Transfers
Your personal data may be transferred to and processed in countries outside the United Kingdom. When we transfer data internationally, we ensure adequate safeguards are in place, including:
- Standard Contractual Clauses approved by the UK authorities
- Adequacy decisions recognizing equivalent data protection
- Binding Corporate Rules where applicable
9. AI Training and Model Improvement
We may use anonymized voice data and conversation transcripts to improve our AI models. If you wish to opt out of having your data used for AI training:
Opt-out options:
- Adjust settings in your account dashboard
- Email us at: admin@zlavox.ai
- Contact support at: support@zlavox.ai
10. Children's Privacy
Our Services are not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If we discover that we have inadvertently collected data from a child, we will delete it promptly.
11. Updates to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes by:
- Posting the updated policy on our website
- Updating the "Last Updated" date
- Sending email notifications to registered users
12. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Information Commissioner's Office (ICO)
If you believe we have not handled your data appropriately, you have the right to lodge a complaint with the UK's supervisory authority:
Wycliffe House, Water Lane
Wilmslow, Cheshire, SK9 5AF
Tel: 0303 123 1113
Website: ico.org.uk
Email: casework@ico.org.uk