Privacy Policy

Last Updated: August 13, 2026

1. Introduction

Welcome to VoXeth ("VoXeth," "we," "us," or "our"). VoXeth builds AI-powered Digital Humans for customer support, experience, and engagement, and provides related software and services through our website voxeth.com (the "Service").

This Privacy Policy explains how we collect, use, store, share, and protect your personal data when you visit our website, sign up for an account, or otherwise interact with us. This Policy is framed in accordance with the Digital Personal Data Protection Act, 2023 ("DPDP Act") and applicable rules made thereunder, as an entity operating in India.

By using our Service, you agree to the practices described in this Policy. If you do not agree, please do not use the Service.

The Service is intended for use only by individuals aged 18 years and above. We do not knowingly collect personal data from anyone under 18. If we learn that we have collected personal data from a minor without appropriate consent, we will take steps to delete such data promptly.

2. Definitions

• "Personal Data" means any data about an individual who is identifiable by or in relation to such data.
• "Data Principal" means the individual to whom the personal data relates (i.e., you, the user).
• "Data Fiduciary" means VoXeth, as the entity that determines the purpose and means of processing personal data.
• "Processing" means any operation performed on personal data, including collection, storage, use, sharing, and deletion.
• "Consent" means the free, specific, informed, unconditional, and unambiguous indication of your agreement to the processing of your personal data.

3. Personal Data We Collect

We currently collect the following categories of personal data, provided directly by you:

We do not currently collect payment information, government-issued IDs, biometric data, or precise location data. If this changes in the future (for example, if we introduce paid subscriptions), we will update this Policy and seek fresh consent where required.

We may also automatically collect limited technical data (such as IP address, browser type, and device information) through our security and infrastructure providers (see Section 6) for the purpose of fraud prevention, human verification (CAPTCHA), and service functionality.

4. How and Why We Collect Your Data (Purpose of Processing)

We process your personal data only for specified, lawful purposes, including:

1. Account creation and authentication — to create and manage your VoXeth account.
2. Customer support and communication — to respond to inquiries submitted via our Contact page.
3. Service delivery — to provide, operate, and improve our AI Digital Human software and related features.
4. Security and fraud prevention — to verify that you are human (via Cloudflare) and to protect against abuse, spam, and unauthorized access.
5. Transactional emails — to send account-related, verification, or service emails (via Resend).
6. Legal compliance — to comply with applicable laws and respond to lawful requests from authorities.

We do not use your personal data for behavioral advertising or sell your personal data to third parties.

5. Legal Basis and Consent

Under the DPDP Act, we process your personal data on the basis of your free, specific, informed, and unambiguous consent, given at the time of sign-up or when you submit the Contact form.

• You may withdraw your consent at any time by writing to us at the contact details in Section 12. Withdrawal of consent will not affect the lawfulness of processing carried out before withdrawal, and may result in us being unable to continue providing certain features of the Service to you.
• Where required, we will provide you with a clear notice describing what personal data is collected and for what purpose, in or accompanying the request for consent, in accordance with Section 5 of the DPDP Act.

6. Third-Party Service Providers (Data Processors)

We rely on trusted third-party infrastructure and service providers to operate VoXeth. These providers act as data processors on our behalf and are contractually/technically required to process data only for the purposes we specify and to maintain reasonable security safeguards. Our current providers include:

We do not control the independent privacy practices of these providers beyond our instructions to them, and we encourage you to review their respective privacy policies as well.

7. Cross-Border Data Transfer

Our primary database (Supabase) is hosted in the Mumbai, India region, meaning your core account data is stored within India. However, some of our service providers (such as Vercel, Cloudflare, and Resend) may process or route data through servers located outside India as part of their global infrastructure.

The DPDP Act permits transfer of personal data outside India except to countries specifically restricted by the Central Government. We take reasonable steps to ensure that any such providers maintain appropriate security safeguards for your personal data.

8. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes described in this Policy, or as required by applicable law. Specifically:

• Account data (name, email, phone) is retained for as long as your account remains active.
• If you request account deletion or withdraw consent, we will delete or anonymize your personal data within a reasonable period, unless retention is required by law.

9. Data Security

We implement reasonable security safeguards to protect your personal data against unauthorized access, disclosure, alteration, or destruction, including:

• Encrypted data storage and transmission (via Supabase and Vercel infrastructure)
• Access controls limiting who within VoXeth can view personal data
• Bot and abuse protection via Cloudflare

In the event of a personal data breach, we will notify the Data Protection Board of India and affected Data Principals as required under the DPDP Act.

10. Your Rights as a Data Principal

Under the DPDP Act, you have the following rights regarding your personal data:

1. Right to Access — Request a summary of the personal data we hold about you and the processing activities undertaken.
2. Right to Correction and Erasure — Request correction of inaccurate/incomplete data, or request erasure of data that is no longer necessary for the purpose it was collected.
3. Right to Grievance Redressal — Raise a grievance with our Grievance Officer (Section 12) and receive a response in a reasonable timeframe.
4. Right to Nominate — Nominate another individual to exercise your rights in the event of your death or incapacity.
5. Right to Withdraw Consent — Withdraw previously given consent at any time (see Section 5).

To exercise any of these rights, please contact us using the details in Section 12. We may need to verify your identity before actioning your request.

11. Cookies and Similar Technologies

Our website may use cookies or similar technologies (including those required by Cloudflare for security/human-verification purposes) to ensure the website functions correctly and securely. We do not currently use cookies for advertising or cross-site tracking purposes.

12. Grievance Officer & Contact Us

In accordance with the DPDP Act, we have designated a Grievance Officer to address your concerns regarding the processing of your personal data.

Grievance Officer: VoXeth Designation: Grievance Officer Email: contact@voxeth.com

For any privacy-related questions, requests, or grievances, you may also contact us at:

VoXeth Registered address in progress Bengaluru, Karnataka, India Email: contact@voxeth.com

We aim to acknowledge and resolve grievances within a reasonable period as mandated under applicable law.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by posting the updated Policy on our website with a revised "Last Updated" date. Where required, we will seek fresh consent for materially different processing.

14. Governing Law

This Privacy Policy is governed by the laws of India, including the Digital Personal Data Protection Act, 2023, and is subject to the jurisdiction of the courts in Bengaluru, Karnataka.