Privacy Policy

This Privacy Policy outlines how Voixt AI, a product developed and operated by Gothi Tech LLP ("we," "us," or "our"), collects, uses, protects, and discloses personal and non-personal information from users ("you" or "User") of our website at https://voixt.ai and our application at https://app.voixt.ai (the "Platform" or "Services"), and from the people whose details businesses handle through Voixt, as described in section 1(g) and section 7.

1. Information We Collect

We collect and process information in the following categories:

a. Personal Information

• Name and Email Address: Collected during account registration or support interactions.
• Login Provider Info: If you log in using Google or Microsoft, we collect basic profile data (email, name, profile picture).

b. Account Credentials

• Passwords are stored in encrypted form using industry-standard hashing algorithms.

c. User-Uploaded Content

• Includes documents, files, or text you explicitly upload or input into our AI workspace or agents.

d. Google User Data (if connected via Google OAuth)

When you authorize Voixt AI to connect with your Google account:

• Scopes Used:
  • drive.file: Lets you select and grant access to specific Drive files/folders.
  • userinfo.email, userinfo.profile, openid: Used to identify and personalize your account.
  • (Optional and under review) drive.readonly, drive.metadata.readonly: Only used to preview file structure before selection, with your explicit permission.
• We DO NOT access your entire Drive. Access is limited to files/folders you explicitly select.

e. Technical and Usage Data

• IP address, browser type, device OS, interaction logs, and session timestamps to improve service experience and security.

f. WhatsApp Communication & Phone Records

• When you use our WhatsApp automation and broadcasting features, we process registered business phone numbers, country codes, message delivery logs, and routing metadata solely to execute and analyze your requested campaigns and chatbot flows.
• The content of WhatsApp messages, and the numbers and profile names of the people a business talks to, are described in section 1(g).

g. Data from Facebook, Instagram and WhatsApp (Meta)

A business can connect its own Facebook Page, Instagram professional account, WhatsApp Business Account and Meta business portfolio to Voixt. It does this by signing in with Facebook, or, for an Instagram professional account, by signing in with Instagram directly, and choosing what to grant. We receive only what that business grants, and we use it only to provide Voixt to that business. Depending on what it connects, we receive:

• The person who connects: their name and Facebook user ID, or, when they sign in with Instagram, the ID Instagram gives their account for Voixt, so we know who authorised the connection.
• The business's accounts: the IDs and names of the business portfolio, Pages, Instagram accounts, WhatsApp Business Accounts, phone numbers and product catalogues the business chooses to connect, and the access tokens Meta issues for them.
• Facebook Pages and Messenger: messages people send to the Page, comments on the Page's posts, the sender's name and the ID Meta assigns them for that Page, and the replies sent from Voixt.
• Instagram: the account's ID, username, name, profile picture, account type and follower and post counts; direct messages sent to it (text, photos, videos, story replies and story mentions, reactions, and, when someone starts a chat from an ad, which ad it was); comments on its posts and their replies; for people who message the account, their name, username, profile picture, follower count and whether they and the account follow each other; the posts, reels, carousels and stories the business publishes from Voixt, with the photos and videos it uploads for them; and the account's insights (reach, views, interactions and, for larger accounts, follower demographics such as country and age range). Instagram does not give us anyone's phone number or email address.
• WhatsApp: the content of messages (text, images, documents, voice notes and other media), the sender's WhatsApp phone number and profile name, delivery and read statuses, the business's message templates, and the order and payment messages sent from the business's Voixt shop. When someone starts a chat by tapping a click-to-WhatsApp ad, Meta includes which ad it was and an identifier for that click; we keep it with the conversation so the business can see which ad the chat came from.
• Product catalogues: the products in a catalogue the business connects (names, descriptions, prices, images, availability), which we read and update to keep it in step with the business's Voixt shop.
• Lead ads: when the business turns on lead-ad sync, the answers a person submits in the business's Facebook or Instagram lead form (usually name, phone number, email address and the form's questions), with the IDs and names of the form, ad, ad set and campaign it came from.

We use this data to show the business its conversations, comments, leads and products, to send the replies and messages the business, its team or its AI agents send, to publish the posts the business creates or schedules, and to report to the business on its own activity. We do not sell it, use it for our own marketing, use it for any other business, build profiles of people from it, or use it to decide anyone's eligibility for credit, housing, employment, insurance or anything similar. Each business's data is kept separate from every other business's.

h. Advertising on Meta (Facebook and Instagram)

When a business connects its Meta ad account to Voixt and uses our advertising features, Voixt acts on that business's instructions, as its service provider (Data Processor). On the business's request, Voixt may:

• Create advertising audiences (“Custom Audiences”) on Meta from the leads and contacts the business holds in Voixt — for example, everyone who reached a chosen stage in the last 30 days — or from a customer list the business uploads. Before anything is sent, Voixt converts each email address, phone number, first name, last name, city and country into an irreversible hash (SHA-256); nothing else about the person is sent. Meta uses the hashes only to match people who already have a Meta account, and then discards the ones it cannot match. Voixt never sends these details to Meta in readable form. A list the business uploads is hashed in its browser, before it leaves the business's computer; only the hashes and the list's name reach Voixt. If the business asks Voixt to keep an audience up to date, Voixt sends the refreshed hashes once a day.
• Create “lookalike” audiences based on those audiences, and audiences of people who interacted with the business's own Page, Instagram account, lead forms, videos or website. Meta builds these from its own data; Voixt sends nothing about the people in them and receives back only each audience's approximate size and status.
• Create lead forms on the business's Facebook Page, and receive the answers people submit so they appear on the business's Voixt lead board, as described under “Lead ads” in section 1(g).
• Send conversion events to Meta when a lead reaches a stage the business chose (for example, “Qualified”): the event's name and time, identified by Meta's lead ID and, where available, a hashed email address and phone number. For a chat that began from a click-to-WhatsApp ad, the event is identified only by Meta's identifier for that ad click. No IP address, browser or device data is sent. This helps the business measure and improve its ads.
• Read ad performance figures — spend, reach, impressions, clicks, leads and related costs — and the ad account's budget and balance, to show them in Voixt. A payment method appears only as the masked description Meta provides.
• Manage the business's ads: create, edit, pause and resume campaigns, ad sets and ads, change their budgets, and pass the images and videos the business chooses for them on to Meta.

The business is responsible for having a valid legal basis (for example, consent) to use its contacts' data for advertising. Voixt asks the business to confirm this before it first creates an audience from its leads, contacts or a customer list, and the business must accept Meta's Custom Audience Terms before Meta will create one. We do not use this data for our own advertising or for any other business.

2. How We Use Your Information

We use your information strictly for the following purposes:

• To provide, maintain, and improve our AI agent services.
• To personalize your user experience across different business agents.
• To respond to queries, provide support, and send essential service-related communication.
• To securely analyze selected Google Drive documents to generate AI-powered responses using RAG (Retrieval-Augmented Generation) technology.

3. Use of Google Data and Limited Use Compliance

• Voixt AI complies fully with Google’s Limited Use Policy. Specifically:
• We do NOT use Google user data to train or improve generalized or third-party AI models.
• Google Drive data is accessed only when explicitly selected by the user, and is used solely to generate personalized responses within that session.
• No Google user data is shared, sold, or transferred to any third party for purposes beyond providing our app's core functionality.
• All Google OAuth scopes used are the minimum required for you to select and upload files.
• Google Drive files are only retained temporarily and can be deleted at any time from your dashboard or upon request.

4. Use of AI Models

Voixt's AI features use large language models from the following providers, through their APIs. A business chooses the model for each of its AI agents.

• OpenAI (GPT-4o and GPT-4.1 models)
• Anthropic (Claude Sonnet models)
• Google (Gemini Flash models)
• Meta (Muse Spark models, through the Meta Model API)

We use Meta's models only on Meta's standard tier, under which Meta does not use the content it receives to train its models. We do not use Meta's discounted “contributor” models, which allow that.

These models generate responses from the content a business gives its agent, using RAG (Retrieval-Augmented Generation). When a business turns on an AI agent for its WhatsApp, Facebook Messenger or Instagram inbox or comments, the incoming message or comment, recent messages from the same conversation and the relevant parts of the business's own content are sent to the model chosen for that agent so it can write a reply, which is then sent from the business's account. Only what that reply needs is sent.

We do not use data from Google Drive, Facebook, Instagram or WhatsApp to train, develop or improve any AI model, and we send it to AI providers only to produce the response the business asked for. AI replies can be wrong. The business stays responsible for what its agents say and for giving people a way to reach a person in the business.

5. Agentic AI Functionality

Our system enables you to create AI Agents for your business that:

• Use your selected content only.
• Are isolated per user or business workspace.
• Do not learn across users or persist data beyond defined scopes.
• Can be embedded in websites, messaging platforms, or internal tools.

6. Data Storage, Security, and Retention

• Hosting: Voixt runs on secure, industry-standard cloud infrastructure.
• At rest: stored data and files are encrypted at rest.
• In transit: traffic between you and Voixt, and between Voixt, Meta and our AI providers, is encrypted with TLS.
• Access: access to customer data inside Gothi Tech LLP is limited to the people who need it to run and support the service. Access tokens for connected Meta accounts are used only by our servers.
• Retention: workspace data is kept while the account is open and deleted 30 days after a subscription ends, as set out in section 13 of our Cancellation & Refund Policy. Invoices and tax records are kept for as long as Indian law requires.
• Advertising data: Voixt does not keep copies of the hashed audience data it sends to Meta; the hashes exist only while they are being sent. It keeps each audience's settings (which filters the business chose, or an uploaded list's name and column types), the number of records sent, and a log of each change made to the ad account and who made it, for support and security, for as long as the business's account is active. Conversion events sent to Meta, including any hashed email address and phone number, are logged for 180 days and then deleted automatically. Images and videos for ads pass through Voixt straight to Meta and are not stored by Voixt. See section 1(h).
• Deletion: you can ask us to delete your data at any time — see our data deletion instructions.
• Incidents: if a security incident affects personal data, we inform the affected businesses, Meta and the authorities as the law and our agreements require.
• Reporting a vulnerability: write to support@voixt.ai with the subject “Security”.

Where data is processed

Gothi Tech LLP is in India. Our hosting is in the United States, and our AI providers may process data in the United States and other countries. We transfer personal data outside India only as the Digital Personal Data Protection Act, 2023 allows, and not to any country the Government of India restricts.

7. Data Sharing and Third-Party Access

We do not sell, trade, or rent any personal or content data. We use these service providers to deliver Voixt, and they process data only for that purpose:

• Hosting and storage: Amazon Web Services.
• AI models: OpenAI, Anthropic, Google and Meta, as described in section 4.
• Payments: Razorpay, for subscription billing.
• Meta (Meta Platforms, Inc. and Meta Platforms Ireland Limited): messages sent through WhatsApp, Messenger or Instagram travel through Meta, which handles them under its own privacy policy. For a business that uses our advertising features, and only on its instruction, we also send Meta advertising audiences, lead forms and conversion events, and read its ad performance. The data sent is hashed email addresses, phone numbers, first and last names, cities and countries; Meta lead IDs and ad-click identifiers; and event names and times (see section 1(h)).

We may also disclose data where the law or a court order requires it.

Data we handle for the businesses that use Voixt

Businesses use Voixt to run their WhatsApp, Facebook and Instagram conversations, lead forms and contact lists. When a business connects a Facebook Page, an Instagram account or a WhatsApp Business number to Voixt, Meta sends us what happens there on that business's behalf: messages, comments, and the details people submit in the business's lead forms on Facebook and Instagram — usually a name, a phone number, an email address and the answers to the form's questions.

• Whose data it is: the business's. Under India's Digital Personal Data Protection Act, 2023 the business is the Data Fiduciary — it decides why the data is collected and how it is used — and Voixt is its Data Processor. We keep it in that business's workspace and act only on the business's instructions. The business is responsible for telling people how it uses their data and for having their consent or another legal basis, including their opt-in to receive WhatsApp messages.
• What we do with it: show it to the business in its inbox and lead board, send the messages and replies the business, its team or its AI agents send (see section 4), run the automations the business has set up, and, if the business uses our advertising features, build its Meta audiences and conversion events as described in section 1(h). We do not sell it, use it for our own marketing, use it for any other business, or use it to train AI models.
• How long we keep it: for as long as the business keeps that lead, contact or conversation and keeps its account. The business can delete any of it at any time, and it is deleted 30 days after the business's subscription ends.
• When a business disconnects: disconnecting a Page, Instagram account or WhatsApp number stops Voixt receiving anything new from it. Removing all Meta connections in Voixt, or removing Voixt.AI in Facebook settings, also withdraws the permission the business granted Voixt at Meta. Leads, contacts and conversations that already reached the workspace stay there until the business deletes them or its account closes. Details are in our data deletion instructions.
• If your details reached us this way and you want them seen, corrected or removed, ask the business directly, or write to support@voixt.ai naming the business and we will pass your request on and act on the business's instruction.

Cookies, analytics and advertising

This website uses cookies and similar technologies to understand how it is used and to measure our advertising. We do not use them to learn your name or contact details on this website; if you sign up, the visitor ID described below lets us connect the visit to your new account. None of this applies to the contents of your WhatsApp conversations or any data inside the Voixt platform.

• Analytics — Google Analytics and Microsoft Clarity, to see which pages are read and where people get stuck. Clarity also records anonymised session replays of how pages are used.
• Advertising — the Meta Pixel, so we can tell which advertising brings people here and stop paying for what does not.
• Campaign and source information — when you arrive from an advertisement or a tagged link, the link may carry an identifier for that click (for example fbclid or utm_source). When it does not, we note the kind of place you came from — a search engine, a social network, another website, or none — from the address your browser reports. If you then continue to our application at app.voixt.ai, we pass this across so the visit and the sign-up are understood as one journey rather than two strangers. It describes where the visit came from, not who you are.
• Visitor ID — a random identifier kept in a vx_id cookie for up to 90 days. It is added to links to our application at app.voixt.ai and sent with the actions we measure, such as clicking Start for Free or Login, so that a visit and a later sign-up can be recognised as the same journey — whether you arrived from an advertisement, a search or anywhere else. It is generated at random and contains no name, email address or other personal detail. Switching analytics off deletes it.

A notice appears on your first visit. You can switch analytics or advertising off at any time using the Cookie preferences link in the footer of any page; your choice is stored in your browser and applies immediately. Turning them off does not affect your use of the site.

8. Your Rights and Controls

You have full control over your data:

• Access your information
• Delete uploaded content
• Revoke Google or Microsoft access anytime via your account settings
• Disconnect Facebook, Instagram or WhatsApp at any time inside Voixt, in Facebook → Apps and websites, or by removing Voixt as a partner of your WhatsApp Business Account — see our data deletion instructions
• If you want a business that uses Voixt to stop including you in its advertising audiences, contact that business; Voixt will help the business remove you. You can also use Meta's ad preferences to control the ads you see on Facebook and Instagram. Requests about data Voixt itself holds can be sent to support@voixt.ai.
• Ask us to correct your data, raise a grievance, or name someone to exercise your rights on your behalf, as the Digital Personal Data Protection Act, 2023 allows. Grievances follow section 16 of our Cancellation & Refund Policy
• Request account deletion by emailing: support@voixt.ai

Children

Voixt is a service for businesses and is not meant for anyone under 18. We do not knowingly collect children's data for ourselves. Businesses must not use Voixt to collect children's data without the verifiable parental consent the law requires. If you believe a child's data reached us, write to support@voixt.ai and we will delete it.

9. Policy Updates

We may update this policy as required. Any changes will be posted on this page with a revised date. Your continued use of our services constitutes acceptance of the updated terms.

10. Contact Information

For any privacy-related inquiries, please contact:

Company: Voixt AI, a product of Gothi Tech LLP
Registered office: 1214-1215, Shaligram Arcade, Nr. Bopal-Ambli T-Junction, S.P. Ring Road, South Bopal, Ahmedabad, Gujarat, India – 380058
Email: support@voixt.ai (support) · sales@voixt.ai (sales)
Business hours: Monday – Friday, 9:30 AM – 6:30 PM IST