CReaM by AEVOICE.AI ("AEVOICE", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI voice automation platform ("Service"). By using the Service, you agree to the practices described in this policy.
1. Information We Collect
We collect information you provide directly to us, including:
- Account Information: Name, email address, password, and billing details when you register.
- Call Data: Phone call recordings, transcriptions, and metadata (caller number, duration, timestamps) processed through your AI agents.
- Knowledge Base Content: Website content, documents, and manual text you upload to train your agents.
- Usage Data: Call logs, minutes used, post-call action history, and platform interactions.
- Payment Information: Billing details handled securely by Stripe. We do not store raw card data.
- Integration Credentials: API keys for third-party services (OpenAI, ElevenLabs, Twilio, etc.) stored encrypted.
2. How We Use Your Information
- To provide, operate, and maintain the Service.
- To process AI voice calls and execute post-call automation workflows.
- To bill you for subscription and overage usage via Stripe.
- To send transactional emails (invitations, billing receipts, alerts).
- To improve the quality, accuracy, and performance of our AI models and platform.
- To comply with legal obligations and enforce our Terms of Service.
3. Data Storage & Security
All data is stored on secure cloud infrastructure (Base44 platform). We implement industry-standard security measures including:
- TLS/SSL encryption for all data in transit.
- Encrypted storage for API keys and sensitive credentials.
- Role-based access controls limiting internal data access.
- Regular security reviews and access auditing.
Call recordings are stored in secure cloud storage. You can delete recordings at any time from your Recordings page.
4. Data Sharing & Disclosure
We do not sell your personal data. We may share data with:
- Service Providers: Stripe (payments), Twilio (telephony), OpenAI/Groq/ElevenLabs (AI processing), SendGrid (email), Slack (notifications). These providers process data only as needed to provide their services.
- Legal Requirements: When required by law, court order, or governmental authority.
- Business Transfers: In connection with a merger, acquisition, or sale of assets, with appropriate notice to you.
5. Call Recordings & Transcriptions
Our platform records and transcribes phone calls as part of the AI voice agent service. It is your responsibility to:
- Obtain necessary consent from callers before recording, as required by applicable law (e.g., GDPR, CCPA, Indian IT Act, two-party consent states in the US).
- Configure your agents to announce recording at the start of each call where required.
- Delete recordings and transcriptions of individuals who request erasure.
6. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access: Request a copy of your personal data.
- Rectification: Correct inaccurate data.
- Erasure: Request deletion of your data ("right to be forgotten").
- Portability: Receive your data in a structured, machine-readable format.
- Objection: Object to processing for direct marketing.
To exercise these rights, email care@cream.aevoice.ai.
7. Data Retention
We retain your data for as long as your account is active or as needed to provide the Service. Call logs and usage data are retained for 12 months. Upon account deletion, your data is removed within 30 days except where retention is required by law.
8. Cookies & Analytics
We use essential cookies to maintain your login session and preferences. We do not use third-party advertising or cross-site tracking cookies. Platform analytics are collected in aggregate and anonymized form to improve the Service.
9. GDPR & International Transfers
If you are located in the European Economic Area (EEA), the UK, or other jurisdictions with data protection laws, we process your data under the following legal bases: performance of contract, legitimate interests, and your consent where required. Data may be transferred internationally to countries that may not have equivalent data protection laws; in such cases, we use Standard Contractual Clauses or other appropriate safeguards.
10. Children's Privacy
The Service is not directed to individuals under 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us data, contact us immediately.
11. Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of material changes via email or a prominent notice on the platform. Continued use after changes constitutes acceptance.
12. Contact Us
For privacy questions, requests, or concerns: