This Privacy Policy describes how Insito Health, Inc. (“Insito,” “we,” “us,” or “our”) collects, uses, and shares personal information in connection with Vocaleo: the website at vocaleo.co (the “Site”) and the service that lets a personal AI assistant place telephone calls on your behalf (together with the Site, the “Services”).
Vocaleo is a tool your own AI assistant connects to in order to make phone calls that you ask it to make — for example, scheduling an appointment, checking availability, or canceling a subscription. You decide which calls are placed and why. When your assistant places a call through Vocaleo, you are the caller, and Vocaleo provides the technology that connects the call through a telephone carrier.
1. Information We Collect
A. Site visitors
We keep collection on the Site to a minimum:
- Page-view analytics. We measure aggregate page views using Vercel Web Analytics. This measurement sets no cookie and does not identify individual visitors.
- No advertising trackers. The Site sets no cookies and loads no advertising pixels, social-media trackers, or third-party analytics scripts.
- Server logs. Our hosting providers keep standard technical logs (such as IP address, browser type, and pages requested) to operate and secure the Site.
B. Account and billing data
When your assistant connects to Vocaleo, we create an account for you and issue a credential that your assistant uses to place calls. In connection with that account we collect:
- Contact and account details. A phone number, an email address if you give one, an account identifier, the credential name and a hashed secret, and records of access and account changes.
- Billing and usage data. We meter your use of the Services — the live call time you use — and maintain a ledger of the resulting charges. Payments are processed by Stripe, our payment processor, which receives your payment details; we do not store full payment card numbers ourselves.
- Correspondence. Messages you send us for support or anything else.
C. Call data
When your assistant places a call at your direction, we process:
- The task you set. The instructions you give for the call, which may include names, appointment details, account numbers, or other facts you choose to supply.
- The number called and the call itself. The telephone number dialed, call audio recordings where recording is enabled, transcripts, AI-generated summaries, and call metadata such as time, duration, outcome, selected call mode, and provider identifiers.
- Information about the person or business you called. A call reaches a third party — a clinic, a restaurant, a service line — so we process that party’s telephone number and what is said on the call, in order to place and complete the call you asked for.
You are responsible for having a lawful and legitimate reason to place each call, as set out in our Terms of Service.
Standard mode and Pro Mode process the same call-data categories. The selected mode can use different voice infrastructure. The data rules in this Policy apply to both modes.
2. How We Use Information
We use the information described above to:
- Provide, operate, maintain, and support the Services, including placing calls through telecommunications carriers at your direction;
- Set up and administer your account;
- Meter usage, calculate charges, bill, and collect payment;
- Secure the Services, and detect, investigate, and prevent fraud, abuse, and violations of our Terms of Service;
- Comply with law, regulation, carrier requirements, and legal process, and respond to lawful requests;
- Communicate with you about the Services, including service notices and billing; and
- Create de-identified and aggregate data to operate, evaluate, and improve the Services. Where source data includes personal information, we de-identify it before this use, and we do not attempt to re-identify it.
We do not sell personal information, and we do not share personal information with third parties for cross-context behavioral advertising.
3. Calls You Direct
Because you decide which calls are placed and what is said, you are the caller for the calls your assistant makes through Vocaleo. That carries a few responsibilities:
- A lawful basis to call. You are responsible for having the consent or authority the law requires to call a given number, and for honoring do-not-call and revocation requests.
- Recording. Some places require every party on a call to consent before it is recorded. Where a call is recorded, transcribed, or monitored, you are responsible for providing any legally required notice and obtaining any legally required consent.
- Disclosure that an AI is speaking. Some places require the person on the other end to be told they are speaking with an artificial voice or automated system. Vocaleo can make that disclosure; you are responsible for determining whether the law requires it for your call and for enabling it.
- Voice data. We do not use call audio to identify individual speakers, and we do not create voiceprints or other biometric identifiers from call audio.
4. How We Share Information
We share personal information only as described here:
- Service providers and subprocessors. We use third-party providers to deliver the Services, bound by contract to use the information only to provide services to us. These include cloud infrastructure (in United States regions), website hosting and analytics (Vercel), payment processing (Stripe), speech-recognition providers, speech-synthesis providers, and large language model providers (including Anthropic, OpenAI, and Google). Some AI models run on infrastructure we operate ourselves.
- Telecommunications carriers. To place your calls, we share the telephone number and call audio in transit with telecommunications carriers (including Telnyx). Carriers process some of this data as independent controllers for their own legal obligations, such as billing and fraud prevention, under their own privacy policies.
- Legal compliance and protection. We may disclose information when we believe in good faith that the law requires it, or that disclosure is necessary to comply with legal process, enforce our agreements, or protect the rights, property, or safety of Insito, our users, call recipients, or the public.
- Business transfers. If Insito is involved in a merger, acquisition, financing, or sale of assets, personal information may be disclosed and transferred as part of that transaction. We will require the receiving party to honor the commitments in this Policy or give you notice as required by law.
- De-identified and aggregate data. We may share data that does not identify you and cannot reasonably be used to identify you.
- With your consent. We share for any other purpose you consent to.
5. Data Retention
- Site analytics. Aggregate only; we hold no per-visitor analytics record.
- Account data. Eligible live contact details are deleted after account closure. Required financial records and account references remain for billing, audit, and dispute purposes.
- Billing and usage ledgers. Kept as required for tax, accounting, and audit purposes.
- Call recordings. Live audio is scheduled for deletion at 360 days, or earlier through account closure. Deleted audio remains recoverable for seven days.
- Transcripts and other call data. Account closure removes eligible live transcripts, summaries, tasks, and related call content. Required financial call records remain without this content.
- Backups. Backups do not disappear with live data. Call-store recovery retains recent versions for seven days and weekly backups for 98 days. The account database keeps seven automated backups by count and seven days of transaction logs. Backup count does not guarantee expiry after seven days.
- De-identified data. May be retained indefinitely.
Ask your assistant to close your account and delete eligible live data. Closure requires current access, a fresh code from your registered phone, and explicit confirmation. Active calls and unresolved financial work must finish first. Access and subscription renewal stop on acceptance. Deletion follows automatically; the initial receipt reports pending deletion. There is no undo or automatic refund.
We retain your balance, required financial records, dedicated number, and a protected identifier derived from your phone number. This identifier is personal data. It blocks registration for 30 days and prevents another signup-credit grant permanently. Closure does not release the dedicated number to the carrier.
Application logs have a 30-day retention setting. Closure does not promise deletion of every provider-required record or shared speech cache. These exceptions do not permit continued storage of eligible live call content in your account. After a backup restore, we reapply completed deletion requests before customer access resumes.
For deletion status, specific data requests, or accounts without a registered phone or current access, contact support at support@vocaleo.co. Include your account reference. Do not send an API key or phone code.
6. Security
We maintain an information security program with administrative, technical, and physical safeguards appropriate to the Services, including encryption of call data in transit and at rest, role-based access controls, logging, and personnel screening and training. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
7. Health Information and Other Regulated Data
The Services are not intended for protected health information subject to HIPAA or other data subject to sector-specific legal protection, unless we have signed a separate written agreement covering it. You are responsible for the information you choose to supply to the Services.
8. Your Rights and Choices
- Marketing. You may opt out of marketing emails using the unsubscribe link in any marketing message or by contacting us at privacy@vocaleo.co. We will still send service and billing communications tied to your account.
- State privacy rights. Depending on where you live, you may have rights to know, access, correct, delete, or receive a portable copy of personal information we hold about you, and the right not to be discriminated against for exercising those rights. Because we do not sell personal information or share it for cross-context behavioral advertising, there is no sale or sharing to opt out of; we honor recognized opt-out preference signals such as Global Privacy Control where they apply.
- How to exercise rights. Email privacy@vocaleo.co or write to the address in Section 11. We will verify your identity before acting, respond within the time applicable law requires, and explain any denial. You may appeal a denial by replying to our response, and you may also contact your state attorney general or supervisory authority.
9. Children
The Services are not directed to individuals under 18, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us at privacy@vocaleo.co and we will delete it.
10. Processing in the United States
We are based in the United States and process personal information in the United States. If you access the Services from outside the United States, you understand that your information will be transferred to and processed in the United States, where data protection laws may differ from those of your jurisdiction.
11. Changes to This Policy; Contact Us
We may update this Policy from time to time. When we do, we will revise the “Last updated” date above, and for material changes we will provide notice on the Site or by email before the changes take effect. Your continued use of the Services after the effective date constitutes acceptance of the updated Policy.
Insito Health, Inc.
56 Broad Street, STE 14277
Boston, Massachusetts 02109
Email: privacy@vocaleo.co