Privacy Policy

1. Introduction

Wozena (“we,” “our,” or “us”) operates an AI-powered voice agent platform that enables businesses to build, deploy, and manage voice agents for inbound and outbound calling. This Privacy Policy describes how we collect, use, store, and protect your information when you use our platform at wozena.com (the “Service”).

By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.

2. Information We Collect

2.1 Account Information

When you create an account, we collect your name, email address, and authentication credentials. If you sign in via Google, we receive your name, email, and profile picture from Google.

2.2 Billing Information

Payment details (credit card numbers, billing address) are collected and processed directly by our payment processor. We do not store your full card details on our servers. We receive and store transaction records, invoice history, and subscription status.

2.3 Contact Data

When you upload contacts to the platform (via CSV import or CRM integration), we store contact names, phone numbers, email addresses, company names, tags, disposition status, custom fields, and any data you associate with those contacts.

2.4 Call Data

When voice calls are placed through the platform, we collect and store call metadata (timestamps, duration, direction, phone numbers), call recordings, transcripts, and AI-generated post-call analysis data (sentiment, call outcome, extracted fields). Call recordings are stored for up to 30 days by our voice infrastructure provider and may be retained longer based on your account configuration.

2.5 Usage Data

We collect information about how you use the Service, including pages visited, features used, agent configurations, campaign activity, and API usage. This data is used to improve the Service and provide analytics.

3. How We Use Your Information

• Provide, operate, and maintain the Service
• Process voice calls, campaigns, and agent interactions
• Generate post-call analysis using AI models to extract structured data from conversations
• Process billing, send invoices, and manage subscriptions
• Send transactional emails (welcome, billing receipts, trial reminders, campaign notifications)
• Monitor platform performance, detect abuse, and prevent fraud
• Enforce our Terms of Service and comply with legal obligations
• Improve and develop new features based on usage patterns

4. Third-Party Services

We use third-party service providers to operate the platform. These providers process your data on our behalf and are contractually bound to protect it:

• Voice Infrastructure Provider — handles telephony, call routing, call recording, and voice synthesis
• Payment Processor — processes credit card payments and manages subscriptions
• Database Provider — stores application data with encryption at rest
• Email Service — delivers transactional emails on our behalf
• Background Job Processor — executes scheduled tasks such as billing, campaign execution, and notifications
• AI Model Providers — process conversation data to power the co-pilot builder and post-call analysis

We do not sell, rent, or share your personal information with third parties for their marketing purposes.

5. Cookies

We use essential cookies only. These are strictly necessary for authentication and maintaining your session. We do not use advertising cookies, tracking pixels, or third-party analytics cookies. You can manage cookies through your browser settings, but disabling essential cookies may prevent you from using the Service.

6. Data Retention

• Account data — retained for as long as your account is active
• Contact data — retained while your account is active; deleted 90 days after account cancellation
• Call recordings — stored for up to 30 days by our voice infrastructure provider
• Call transcripts and analysis — retained while your account is active
• Billing records — retained for 7 years for tax and legal compliance
• After cancellation — all user data (contacts, call history, agents, campaigns) is retained for 90 days to allow reactivation, then permanently deleted

7. Data Security

We implement industry-standard security measures to protect your data:

• All data transmitted between your browser and our servers is encrypted using TLS/HTTPS
• Sensitive credentials (API keys) are encrypted at rest using AES-256-GCM
• Database connections use encrypted channels
• Webhook signatures are verified to prevent tampering
• Authentication sessions use secure, httpOnly cookies
• Access to production systems is restricted and audited

While we take reasonable measures to protect your data, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you
• Correction — request correction of inaccurate or incomplete data
• Deletion — request deletion of your personal data
• Data portability — request export of your data in a structured format
• Restriction — request that we limit how we use your data
• Objection — object to our processing of your data
• Withdraw consent — withdraw consent for data processing at any time

To exercise any of these rights, contact us at solutions@wozena.com. We will respond within 30 days.

9. International Data Transfers

Your data may be transferred to and processed in countries other than your country of residence. Our servers and service providers operate primarily in the United States and European Union. Where required, we implement appropriate safeguards (such as Standard Contractual Clauses) to protect data transferred internationally.

10. GDPR (European Users)

If you are located in the European Economic Area (EEA) or United Kingdom, you have additional rights under the General Data Protection Regulation (GDPR). We process your data based on the following legal bases: performance of a contract (providing the Service), legitimate interest (improving and securing the platform), and consent (where explicitly obtained). You may lodge a complaint with your local data protection authority if you believe your rights have been violated.

11. CCPA (California Users)

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with additional rights. We do not sell your personal information. You have the right to know what personal information we collect, request deletion, and opt out of any future sale of personal information. To exercise these rights, contact us at solutions@wozena.com.

12. Children's Privacy

The Service is designed for business use. We do not knowingly collect personal information from children under the age of 13. If we discover that we have inadvertently collected data from a child under 13, we will promptly delete it.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the “last updated” date. For significant changes, we may also notify you by email. Your continued use of the Service after changes constitutes acceptance of the updated policy.

14. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

Email: solutions@wozena.com

Website: wozena.com