Privacy Policy

Vocily is a conversation AI platform that helps businesses run customer conversations across voice, web chat, and WhatsApp. Clients configure agents with prompts, knowledge, API tools, campaigns, templates, and human-handoff rules for their own workflows.

This policy explains what data we handle, why, how we protect it, and the choices and rights available to you. It covers people who use our website or dashboard, our clients, and the customers whose conversations we process on a client's behalf.

Vocily supports client-configured inbound and outbound WhatsApp conversations, including AI-generated replies, approved template messages, campaigns, follow-ups, and human handoff. Messages are sent only on the client's behalf, through the WhatsApp Business Account and phone numbers the client connects, under the client's configuration and in line with WhatsApp's policies.

For the WhatsApp accounts and messages our clients connect and authorize, Vocily acts solely as a data processor on the client's behalf and at their direction. The connecting business is the controller of its customers' data and is responsible for having a lawful basis to use Vocily for those conversations.

If you are a customer messaging a business that uses Vocily and you have questions about how your data is used, please contact that business directly, as they decide why and how their customer data is processed.

Account data (from our clients): name, email, login credentials, and workspace settings used to create and secure a Vocily account.

WhatsApp Platform Data (on behalf of our clients), for the accounts a client connects and authorizes:

• WhatsApp Business Account, phone-number, and business-profile details needed to route messages to the correct number and assistant.
• Messages exchanged between the client and their customers, including inbound text and media, AI-generated replies, follow-ups, and approved outbound template messages.
• Delivery and status metadata (for example, sent/delivered/read and timestamps) shown to the client in their dashboard.

Configuration data (from our clients): prompts, knowledge, connected APIs and tools, campaigns, templates, routing, memory, and handoff rules that define how an agent should respond and act.

Website measurement data (when advertising measurement is enabled): device and browser information, IP-derived location, referrer and ad-click identifiers, page interactions, and whether a demo request was accepted.

We use client and conversation data only to operate the workflows each client configures. Depending on that configuration, we

• Receive each incoming customer message sent to the client's WhatsApp number.
• Generate replies using the prompts, knowledge, APIs, tools, and memory the client configured.
• Send replies, approved templates, campaign messages, and follow-ups through the client's own WhatsApp numbers.
• Maintain conversation context across supported channels and route a conversation to a person when the client's rules require it.
• Let the client configure agents and campaigns, assign numbers, and review their own conversation history and delivery status.

We do not use Platform Data for advertising, profiling for unrelated purposes, or any purpose other than providing the service the client configured. We never sell Platform Data, and we do not share it with third parties for their own purposes.

We rely on a small number of vetted providers strictly to run the service — for example, cloud hosting and infrastructure, and AI model providers used to generate replies. These providers process data only on our instructions, under contractual confidentiality and security obligations, and are not permitted to use it for their own purposes.

We do not sell Platform Data or share conversation content for any third party's independent or advertising purposes. Website advertising measurement is separate and is described below.

When enabled, Vocily uses the Google tag to understand whether advertising led to a successfully accepted demo request. The tag may process device and browser information, IP-derived location, referrer and ad-click identifiers, and may use cookies or local storage. The conversion event does not include the name, work email, phone number, company, use case, or other fields entered in the demo form.

Google processes information it receives in accordance with its own terms and privacy practices. Where consent is required based on a visitor's location, the required consent mechanism and signals must be in place before advertising measurement is enabled for that visitor.

Platform Data is encrypted in transit and at rest. Access is restricted to authorized personnel on a need-to-know basis, scoped to each client's workspace, and protected by authentication and access controls. Inbound webhooks are verified before processing, and we monitor our systems to detect and respond to security issues.

We retain Platform Data only as long as needed to provide the service to the client — for example, to maintain conversation history and delivery status in their dashboard — and for the period the client configures or our agreement requires. When data is no longer needed, or upon a valid deletion request, it is deleted or irreversibly anonymized.

Clients can review and manage their connected accounts and conversation data from the Vocily dashboard, and can disconnect a WhatsApp Business Account at any time.

To request access to, correction of, or deletion of data, email us at founder@vocily.ai. We honor verified deletion requests from our clients and will delete the associated Platform Data from our systems, instructing our service providers to do the same, except where we are required to retain it by law.

If you are an end customer, deletion of your data is directed by the business you messaged; we will assist that business in fulfilling such requests.

We may process and store data in countries other than where you are located. Where we transfer data across borders, we use appropriate safeguards consistent with applicable data-protection law.

Vocily is a business tool and is not directed to children. We do not knowingly collect personal data from children.

We may update this policy from time to time. When we make material changes, we will update the date below and, where appropriate, notify clients. Continued use of the service after an update constitutes acceptance of the revised policy.

Questions about this policy or our data practices? Email founder@vocily.ai, or reach us through our contact page.