Privacy Policy

Introduction

HeyZoya ("we", "us", "our") is committed to protecting your personal information. This Privacy Policy explains how we collect, use, and safeguard data when you use our AI voice agent platform and website.

Information We Collect

• Contact information (name, email, phone number) when you fill out forms
• Business information (company name, website, industry) provided during onboarding
• Call data including transcripts, recordings, and caller information processed by our AI
• Usage data such as dashboard interactions, feature usage, and session logs
• Payment information processed securely through our payment providers (we never store card numbers)

How We Use Your Information

• To provide, operate, and improve the HeyZoya platform
• To configure and run your AI voice agent
• To send service updates, billing notices, and support communications
• To analyse usage patterns and improve our AI models
• To comply with legal obligations

Data Sharing

We do not sell your personal data. We share data only with: (a) service providers who help us operate the platform (e.g. cloud infrastructure, payment processors); (b) integration partners you explicitly connect (e.g. Google Calendar, HubSpot); (c) law enforcement when required by law.

Call Recordings & Transcripts

Call recordings and transcripts are stored securely and retained for 90 days by default. You may request deletion at any time. Callers are informed that calls may be recorded via a disclosure at the start of each call.

Your Rights

• Access the personal data we hold about you
• Request correction or deletion of your data
• Object to or restrict processing
• Data portability — export your data in a machine-readable format
• Withdraw consent at any time

To exercise any right, email: privacy@heyzoya.com

Cookies

We use essential cookies for authentication and session management, and optional analytics cookies to understand how our platform is used. You can disable non-essential cookies in your browser settings.

Data Security

We use industry-standard encryption (TLS 1.3) for data in transit and AES-256 for data at rest. Access to personal data is restricted to authorised personnel only.

Changes to This Policy

We may update this policy periodically. We'll notify you by email for material changes. Continued use of HeyZoya after changes constitutes acceptance.

Contact

For privacy enquiries: privacy@heyzoya.com