Privacy Policy

Who we are

• QuickVOC is an AI voice agent platform for service-based businesses operated by Baturintech LLC ("Baturintech", "we", "us", or "our").
• Registered address: 3900 San Fernando Rd, Glendale, CA 91204, United States. Contact: baturintech@gmail.com.

Information we collect

• Account & business data — name, email address, business name, address, industry, website URL, timezone, and phone numbers you register on the platform.
• Call & lead data — inbound and outbound call records, call transcripts, call recordings, lead details (name, phone, source, notes, appointment data), and lead status changes.
• Voice agent configuration — agent scripts, greeting messages, knowledge base facts, smart-action rules, emergency keywords, and selected voice settings.
• Google Calendar data — when you connect your Google account we access your calendar events to create and update service appointments. We store OAuth tokens (access token and refresh token) needed to maintain the connection.
• Google Local Services Ads data — when you enable the LSA integration we retrieve lead reports from the Google Local Services API on your behalf. This includes customer name, phone number, lead type (message or call), and message text sent by potential customers.
• Payment data — subscription plan, billing period, and usage metrics. Card details are handled entirely by Stripe; we never store raw card numbers.
• Usage & log data — pages visited, features used, API request logs, error traces, and session identifiers needed for security and debugging.
• Support communications — messages and attachments you send to our support team.

Google API data — limited use disclosure

• QuickVOC's use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements.
• Google Calendar (scopes: calendar.events, calendar.readonly) — we use calendar access solely to create, update, and read appointments generated through QuickVOC on behalf of your business. We do not read, share, or analyse calendar events that are unrelated to QuickVOC appointments.
• Google Local Services Ads (scope: localservices) — we use LSA access solely to retrieve lead reports for your verified LSA account and to send reply messages to message-type leads on your behalf. We do not use this data for advertising, profiling, or any purpose unrelated to lead management within QuickVOC.
• We do not transfer Google user data to third parties except as necessary to operate the features described above (e.g., storing appointment records in your QuickVOC database). We do not sell, rent, or use Google user data for AI model training.
• You may revoke Google access at any time from your QuickVOC Integrations page or from your Google Account permissions page (myaccount.google.com/permissions). Upon revocation we stop syncing and, upon written request, delete the stored OAuth tokens.

How we use your data

• Operate the AI voice agent — route inbound calls, generate real-time transcripts, qualify leads, and trigger smart actions such as booking appointments or escalating to a human.
• Lead management — save, categorise, and display inbound leads from all sources (calls, web chat, Google LSA, manual) in your dashboard.
• Calendar sync — create and update Google Calendar events when appointments are booked through the agent.
• LSA auto-reply — generate and send AI-drafted replies to message-type Google LSA leads on your behalf.
• Billing — calculate monthly usage (minutes, seats), apply plan limits, and process subscription payments through Stripe.
• Security & fraud prevention — detect abuse, enforce rate limits, and protect the integrity of the platform.
• Product improvement — analyse aggregate, anonymised usage patterns to improve response quality, agent performance, and platform reliability. We do not use individual call content or Google API data for AI training without explicit consent.
• Support — respond to questions, diagnose issues, and fulfil legal obligations.

How we share data

• Retell AI — our telephony and AI speech infrastructure provider. Call audio and transcripts are processed through Retell to power the voice agent.
• Supabase — our hosted PostgreSQL database and authentication provider. All account, lead, call, and appointment data is stored in a Supabase project.
• Stripe — payment processing. Stripe receives billing details in accordance with their own privacy policy.
• OpenRouter / Anthropic — AI language model providers used to generate agent scripts, reply suggestions, and knowledge base extractions. Inputs are limited to business context you provide; we do not send personally identifiable customer data beyond what is necessary for the task.
• Google — OAuth tokens and API calls are exchanged with Google's servers as described in the Google API section above.
• Hosting & infrastructure — Replit, Inc. provides the compute environment in which QuickVOC runs.
• We do not sell, rent, or trade your personal data or your customers' data to any third party for marketing purposes.

Data retention

• Account data is kept for the duration of your subscription plus 90 days after cancellation to allow reactivation.
• Call recordings and transcripts are retained for up to 12 months by default. You may request earlier deletion.
• Google OAuth tokens are retained while your integration is active. They are deleted within 30 days of disconnecting the integration or upon written deletion request.
• LSA lead data ingested via Google Local Services API is retained for up to 12 months unless you request deletion.
• Billing records are retained for 7 years as required by US tax regulations.

Security

• All data is transmitted over TLS 1.2+. Data at rest is encrypted by our infrastructure providers (Supabase, Replit).
• Google OAuth tokens are stored encrypted and are only accessed by server-side processes with service-role credentials — they are never exposed to the browser.
• Access to production systems is restricted to authorised Baturintech personnel. We apply row-level security (RLS) policies so each organisation can only access its own data.
• We maintain structured logging, error monitoring, and incident response processes appropriate for a production SaaS.

Your rights and choices

• Access — you may request a copy of the personal data we hold about you.
• Correction — you may correct inaccurate information via the dashboard settings or by contacting us.
• Deletion — you may request deletion of your account and associated data. We will process requests within 30 days, subject to legal retention obligations.
• Portability — we can provide your lead and call data in JSON or CSV format upon request.
• Revoke Google access — disconnect Google integrations at any time from the Integrations page in your dashboard.
• Marketing opt-out — you may unsubscribe from promotional emails at any time using the unsubscribe link in the email.
• To exercise any of these rights, email baturintech@gmail.com with the subject line "Data Request".

Cookies and tracking

We use session cookies required for authentication and CSRF protection. We do not use advertising cookies or cross-site tracking. We may use anonymised analytics (e.g., page views) to understand product usage.

Children's privacy

QuickVOC is a B2B platform intended for businesses and their adult representatives. We do not knowingly collect data from anyone under the age of 18.

Changes to this policy

We may update this Privacy Policy as the product evolves. We will notify active subscribers by email and update the effective date above. Continued use of the platform after the updated effective date constitutes acceptance of the changes.

Contact

• Baturintech LLC
• 3900 San Fernando Rd, Glendale, CA 91204, United States
• baturintech@gmail.com