Privacy Policy — Voice PA

1. Who we are

Voice PA (“we”, “us”, “our”) operates the website voicepa.ai and provides an AI-powered phone receptionist service for tradespeople and small service businesses in the United Kingdom.

2. Information we collect

We collect the following categories of personal data:

Account information — name, email address, and profile picture provided via Google OAuth sign-in.
Business information — business name, trade category, services offered, pricing, working hours, service area, and contact details you provide during onboarding.
Calendar data — we access your Google Calendar (with your permission) to check availability and create booking events.
Call data — phone numbers, call transcripts, service requests, and booking details from calls handled by our AI receptionist.
Customer data — names, phone numbers, addresses, and postcodes of your customers who interact with the service.
Payment information — processed securely by Stripe. We do not store card numbers on our servers.
Usage data — how you interact with our website and dashboard.

3. How we use your information

To provide and operate the AI receptionist service, including answering calls, booking appointments, and sending SMS/WhatsApp notifications.
To manage your Google Calendar on your behalf (creating, updating, and deleting booking events).
To process subscription payments via Stripe.
To send you service notifications (booking alerts, daily schedules, reminders).
To improve our service and fix technical issues.

4. Google user data

Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We only use Google Calendar access to check your availability and manage bookings. We do not share your Google data with third parties for advertising or other unrelated purposes.

5. Data sharing

We share personal data only with the following third-party service providers, solely to operate the service:

Retell AI — voice agent platform for handling phone calls.
Twilio — SMS and phone number provisioning.
Stripe — payment processing.
Google — authentication and calendar integration.
Vercel — website hosting.
DigitalOcean — backend and database hosting.

We do not sell your personal data to any third party.

6. Data retention

We retain your account and business data for as long as your account is active. Call records and booking history are retained for 12 months after creation. If you delete your account, we will remove your personal data within 30 days, except where we are required by law to retain it.

7. Your rights

Under UK data protection law (UK GDPR), you have the right to:

Access the personal data we hold about you.
Rectify inaccurate personal data.
Request deletion of your personal data.
Restrict or object to processing of your data.
Data portability — receive your data in a structured, machine-readable format.
Withdraw consent at any time (e.g. revoke Google Calendar access).

To exercise these rights, contact us at privacy@voicepa.ai.

8. Security

We use industry-standard security measures including encrypted connections (TLS), encrypted storage of sensitive tokens, and secure authentication. Payment data is handled entirely by Stripe and never touches our servers.

9. Contact us

If you have any questions about this privacy policy, please contact us at privacy@voicepa.ai.