This Privacy Policy explains how vobit.ai (“Vobit”, “we”) collects, uses, stores, and shares information when you use our call analysis platform (the “Service”).
1. Information We Collect
We collect three categories of information:
- Account information — name, email, company, and authentication credentials you provide when signing up or being invited.
- Customer Data — the call recordings, transcripts, and CSV/Excel metadata (caller ID, state, ZIP, buyer, publisher, etc.) you upload for analysis.
- Usage data — server logs, IP addresses, and product analytics covering how the Service is used. We use these to operate, secure, and improve the Service.
2. How We Handle Recordings
Recordings are the most sensitive thing you give us. Here's exactly what we do with them:
- Audio is stored in private, tenant-scoped cloud storage. We do not make recordings publicly accessible.
- Transcripts are generated by an enterprise speech-to-text provider and then automatically scanned for PII (names, payment cards, SSNs, etc.). The PII tokens are replaced with redaction markers (e.g.
[REDACTED_NAME]) before the transcript is stored or shown in the UI. - Caller phone numbers are encrypted at rest using AES-256-GCM with keys held in our hosting environment's secure variable store, never in the database.
- AI analysis (disposition, failure reasons, compliance flags) is generated by an enterprise large language model provider. That provider does not retain customer data and does not use it to train its models.
3. Tenant Isolation
Vobit is multi-tenant. Every database table that carries customer data is keyed to the uploader's email domain, and every query is filtered by that domain. You will never see another customer's buyers, playbooks, calls, or transcripts, and they will never see yours.
4. Sub-Processors
We use a small, vetted set of enterprise infrastructure providers to operate the Service. These cover the following functional areas:
- Authentication, database, and object storage (United States).
- Application hosting and serverless compute (United States).
- Speech-to-text transcription. Contractually bound to zero training on customer data.
- Large language model for analysis, redaction, and the in-app assistant. Contractually bound to zero retention and zero training on customer data.
- Background job orchestration.
A complete, named list of our current sub-processors is available to customers on request — email privacy@vobit.ai.
5. How We Use Information
- To provide the Service — transcribing, analyzing, and surfacing your batches.
- To bill you accurately for usage.
- To send service-related emails (login confirmations, password resets, invites).
- To monitor security, prevent abuse, and debug issues.
We do not sell your data, run cross-customer aggregations, or use Customer Data to train any AI model.
6. Retention
- Recordings, transcripts, and analyses are retained for as long as your account is active, plus 30 days after termination.
- You can request earlier deletion of a specific upload at any time.
- Anonymized usage logs may be retained longer for security and capacity planning.
7. Your Rights
Depending on where you (or your callers) live, you may have rights under GDPR, CCPA, or similar laws to access, correct, delete, or port personal data we hold about you. To exercise these rights, contact us at the address below and we will respond within 30 days.
8. Security
We use TLS 1.2+ in transit, AES-256-GCM at rest for caller identifiers, row-level security in the database, and least-privilege service-role keys. No system is perfect; if you discover a vulnerability, please email security@vobit.ai.
9. Children
The Service is not directed to children under 16. We do not knowingly collect personal information from minors.
10. International Transfers
Vobit operates from the United States. By using the Service you understand that your information may be processed in the United States, which may have different data protection rules than your country of residence.
11. Changes
We will post material changes to this Policy here, and email active customers at least 14 days before changes take effect.
12. Contact
Privacy questions, requests, or concerns: privacy@vobit.ai.