Privacy Policy
Last updated: February 12, 2026. We take your data security with extreme seriousness.
1. Introduction & Data Controller
This Privacy Policy describes how Gixiai ("we," "us," or "our") collects, uses, and protects your information when you use the VoiceOI platform. We act as a "Data Processor" for the content you upload and as a "Data Controller" for your account registration data.
By using the Service, you consent to the data practices described in this policy. Our platform is designed to minimize the amount of sensitive data stored on our central servers by utilizing a distributed node architecture.
2. Information We Collect
Account Information
Name, email address, organization details, and payment information required for subscription management.
Technical Data
IP addresses of Master and Bot nodes, system health logs, event bus latency metrics, and API interaction logs.
Operational Data (As Processor)
Scripts, audio assets, lead lists, and call metadata. Note: This data is primarily stored in the client's provisioned infrastructure.
Cookies & Tracking
We use functional cookies to maintain session states and security. We do not use third-party tracking for advertising purposes.
3. Data Security & Encryption
VoiceOI employs a multi-layered security strategy to protect your data from unauthorized access, alteration, or disclosure:
- Encryption at Transit: All traffic between the Dashboard, Master Server, and Bot Nodes is forced through TLS 1.3/SSL encryption.
- Encryption at Rest: Organization sync secrets and sensitive credentials (API keys) are stored using AES-256-GCM encryption.
- Infrastructure Isolation: Bot nodes are designed to run in the client's private VPC/Network. Gixiai does not have direct access to your local bot node logs unless you enable remote diagnostics.
4. Third-Party Disclosure
We do not sell, trade, or otherwise transfer your data to outside parties for marketing or commercial benefit. We share data only with:
- Service Providers: Essential partners like payment processors (Stripe) or cloud hosting providers (AWS/Google Cloud) solely to provide the Service.
- Legal Compliance: If required by law, subpoena, or to protect the safety and rights of Gixiai, our clients, or the public.
5. Data Retention & Deletion
We retain account information for as long as your organization is active. Upon cancellation, we schedule the permanent deletion of your organization's Master Server data (scripts, leads, audio) within 30 days. You may request immediate hard-deletion of your data at any time via a support ticket.
6. Contact Information
If you have any questions regarding this Privacy Policy or our data handling practices, please contact our Data Protection Officer at dpo@gixiai.com.
GDPR & CCPA Compliant
Your rights to data access and portability are built into the core philosophy of our platform orchestration layer.