Privacy Policy

Veyce ("Veyce," "we," "us," or "our") operates the Veyce power dialer application and marketing website (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard information in connection with the Service.

By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.

Important: Veyce is a software tool provider. The data you import into the Service — including contact lists, lead data, and call records — remains your data and your responsibility. You are solely responsible for ensuring that your collection, storage, and use of personal data through the Service complies with all applicable laws, including GDPR, CCPA, and any other data protection regulations applicable to your business.

Account information: When you create an account, we collect your name, email address, password (hashed), and organization name.

Profile data: Display name, avatar, timezone, and preferences you set within the app.

Integration credentials: API keys and tokens for third-party services you connect (Twilio, Deepgram, OpenAI, GoHighLevel, etc.). These are encrypted at rest using AES-256 encryption.

Call data: Call session metadata including duration, outcome, notes, and references to call recordings. Call recordings are stored in your connected Twilio account; Veyce stores only references and metadata, not the audio files themselves.

Lead data: Contact information (name, phone, email, company, custom fields) that you import into the platform. This data is yours. Veyce stores it solely to provide the Service to you and does not use it for any other purpose.

Usage data: Log files, IP addresses, browser type, pages visited, and interaction events used for debugging, security, and product improvement.

Payment information: We use Stripe to process payments. Veyce does not store your full card number or CVV. Stripe's privacy policy governs payment data.

• Provide, operate, and improve the Service
• Authenticate your account and maintain security
• Process payments and manage subscriptions
• Send transactional emails (account confirmation, password reset, invoices)
• Respond to support requests
• Send product updates and announcements (you may opt out at any time)
• Comply with legal obligations
• Detect and prevent fraud and abuse

We do not sell your personal data to third parties. We do not use your lead data, call recordings, call notes, or any content you generate through the Service to train AI models, build advertising profiles, or for any purpose other than providing the Service to you.

When you use the Service, you act as a data controller for the personal data of your leads, contacts, and any other individuals whose data you import. Veyce acts as a data processor on your behalf.

You are solely responsible for:

• Ensuring you have a lawful basis for collecting and processing personal data you import into the Service
• Providing any required privacy notices or disclosures to individuals whose data you process
• Honoring individual rights requests (access, deletion, correction, portability) for data you control
• Complying with GDPR, CCPA, CASL, and all other applicable data protection laws relevant to your business and the jurisdictions where your contacts are located
• Ensuring that your collection of contact information complies with applicable telemarketing and privacy laws before importing it into the Service

Veyce makes no representations that your use of the Service complies with any data protection law. Veyce is not liable for your data practices.

Service providers: We share data with third-party vendors who help us operate the Service, including Supabase (database and auth), Vercel (hosting), Stripe (payments), and Sentry (error monitoring). These providers process data on our behalf under data processing agreements.

Third-party integrations: When you connect integrations like GoHighLevel or Google Calendar, data is shared with those services as directed by you. Their privacy policies govern how they handle your data. Veyce is not responsible for third-party data practices.

Google API Data:When you connect Google Calendar, Veyce accesses your calendar list and calendar events solely to create, read, update, and delete appointments on your behalf as directed by you within the app. We do not use Google user data for advertising, AI model training, or any purpose other than providing the calendar booking feature. Veyce's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can revoke access at any time via your Google Account permissions.

Legal requirements: We may disclose data if required by law, valid legal process, court order, or government request, or to protect the rights, property, or safety of Veyce, our users, or others.

Business transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred. We will notify you before your personal information becomes subject to a different privacy policy.

We implement industry-standard security measures including TLS encryption in transit, AES-256 encryption at rest for credentials, and row-level security (RLS) policies on our database to ensure users can only access their own data.

No method of transmission or storage is 100% secure. Veyce cannot guarantee absolute security and is not liable for unauthorized access to or loss of your data resulting from circumstances beyond our reasonable control, including breaches caused by your own actions, third-party services, or vulnerabilities in technology we do not control.

We retain your account data for as long as your account is active. After account deletion, we delete your personal data within 30 days, except where we are required by law to retain it longer or where data is included in backups not yet purged in the ordinary course.

Call recordings stored in your connected Twilio account are subject to Twilio's retention policies and your own account settings. Veyce does not control and is not responsible for the storage, retention, or deletion of recordings held by Twilio.

Depending on your location, you may have rights regarding personal data Veyce holds about you as an account holder. These rights do not extend to lead data or other data for which you are the controller — those requests must be directed to you by the individuals concerned.

US residents: Residents of California (CCPA/CPRA), Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), and Texas (TDPSA) have specific statutory rights including rights of access, correction, deletion, portability, and opt-out. We honor applicable requests regardless of which state law applies to you.

EEA/UK residents: You have rights under GDPR / UK GDPR, including access, rectification, erasure, restriction of processing, data portability, and the right to object.

Brazilian residents: You have rights under the Lei Geral de Proteção de Dados (LGPD), including access, correction, deletion, portability, and information about data sharing.

Australian residents: You have rights under the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), including the right to access and correct personal information we hold about you.

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data ("right to be forgotten").
• Portability: Request a machine-readable export of your data.
• Opt-out of sale / sharing: We do not sell or share personal data for cross-context behavioral advertising.
• Withdraw consent: Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, email info@veyce.com.au. We will respond within 45 days (or sooner where required by applicable law). We may request verification of your identity before processing your request. We will not discriminate against you for exercising your privacy rights.

Veyce uses cookies and local storage for authentication (session tokens), user preferences, and analytics. We do not use third-party advertising cookies or tracking pixels for advertising purposes.

You can control cookie settings through your browser. Disabling authentication cookies will prevent you from staying logged in.

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If you become aware that a minor has provided us with personal data, please contact us so we can delete it.

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice in the application at least 14 days before the change takes effect. Continued use of the Service after changes constitutes acceptance.

For privacy-related questions or to exercise your rights, contact us at:

Veyce
Email: info@veyce.com.au

Or use our contact form.