Privacy Policy

This Privacy Policy outlines how Voixt AI, a product developed and operated by Gothi Tech LLP ("we," "us," or "our"), collects, uses, protects, and discloses personal and non-personal information from users ("you" or "User") of our website at https://voixt.ai and our application at https://app.voixt.ai (the "Platform" or "Services"), and from the people whose details businesses handle through Voixt, as described in section 1(g) and section 7.

1. Information We Collect

We collect and process information in the following categories:

a. Personal Information

• Name and Email Address: Collected during account registration or support interactions.
• Login Provider Info: If you log in using Google or Microsoft, we collect basic profile data (email, name, profile picture).

b. Account Credentials

• Passwords are stored in encrypted form using industry-standard hashing algorithms.

c. User-Uploaded Content

• Includes documents, files, or text you explicitly upload or input into our AI workspace or agents.

d. Google User Data (if connected via Google OAuth)

When you authorize Voixt AI to connect with your Google account:

• Scopes Used:
  • drive.file: Lets you select and grant access to specific Drive files/folders.
  • userinfo.email, userinfo.profile, openid: Used to identify and personalize your account.
  • (Optional and under review) drive.readonly, drive.metadata.readonly: Only used to preview file structure before selection, with your explicit permission.
• We DO NOT access your entire Drive. Access is limited to files/folders you explicitly select.

e. Technical and Usage Data

• IP address, browser type, device OS, interaction logs, and session timestamps to improve service experience and security.

f. WhatsApp Communication & Phone Records

• When you use our WhatsApp automation and broadcasting features, we process registered business phone numbers, country codes, message delivery logs, and routing metadata solely to execute and analyze your requested campaigns and chatbot flows.
• The content of WhatsApp messages, and the numbers and profile names of the people a business talks to, are described in section 1(g).

g. Data from Facebook, Instagram and WhatsApp (Meta)

A business can connect its own Facebook Page, Instagram professional account, WhatsApp Business Account and Meta business portfolio to Voixt. It does this by signing in with Facebook and choosing what to grant. We receive only what that business grants, and we use it only to provide Voixt to that business. Depending on what it connects, we receive:

• The person who connects: their name and Facebook user ID, so we know who authorised the connection.
• The business's accounts: the IDs and names of the business portfolio, Pages, Instagram accounts, WhatsApp Business Accounts, phone numbers and product catalogues the business chooses to connect, and the access tokens Meta issues for them.
• Facebook Pages and Messenger: messages people send to the Page, comments on the Page's posts, the sender's name and the ID Meta assigns them for that Page, and the replies sent from Voixt.
• Instagram: the account's ID and username, direct messages and comments on its posts, the sender's username and the ID Meta assigns them, and the replies sent from Voixt.
• WhatsApp: the content of messages (text, images, documents, voice notes and other media), the sender's WhatsApp phone number and profile name, delivery and read statuses, the business's message templates, and the order and payment messages sent from the business's Voixt shop. When someone starts a chat by tapping a click-to-WhatsApp ad, Meta includes which ad it was and an identifier for that click; we keep it with the conversation so the business can see which ad the chat came from.
• Product catalogues: the products in a catalogue the business connects (names, descriptions, prices, images, availability), which we read and update to keep it in step with the business's Voixt shop.
• Lead ads: when the business turns on lead-ad sync, the answers a person submits in the business's Facebook or Instagram lead form (usually name, phone number, email address and the form's questions), with the IDs and names of the form, ad, ad set and campaign it came from.

We use this data to show the business its conversations, comments, leads and products, to send the replies and messages the business, its team or its AI agents send, and to report to the business on its own activity. We do not sell it, use it for our own marketing, use it for any other business, build profiles of people from it, or use it to decide anyone's eligibility for credit, housing, employment, insurance or anything similar. Each business's data is kept separate from every other business's.

2. How We Use Your Information

We use your information strictly for the following purposes:

• To provide, maintain, and improve our AI agent services.
• To personalize your user experience across different business agents.
• To respond to queries, provide support, and send essential service-related communication.
• To securely analyze selected Google Drive documents to generate AI-powered responses using RAG (Retrieval-Augmented Generation) technology.

3. Use of Google Data and Limited Use Compliance

• Voixt AI complies fully with Google’s Limited Use Policy. Specifically:
• We do NOT use Google user data to train or improve generalized or third-party AI models.
• Google Drive data is accessed only when explicitly selected by the user, and is used solely to generate personalized responses within that session.
• No Google user data is shared, sold, or transferred to any third party for purposes beyond providing our app's core functionality.
• All Google OAuth scopes used are the minimum required for you to select and upload files.
• Google Drive files are only retained temporarily and can be deleted at any time from your dashboard or upon request.

4. Use of AI Models

Voixt's AI features use large language models from the following providers, through their APIs. A business chooses the model for each of its AI agents.

• OpenAI (GPT-4o and GPT-4.1 models)
• Anthropic (Claude Sonnet models)
• Google (Gemini Flash models)

These models generate responses from the content a business gives its agent, using RAG (Retrieval-Augmented Generation). When a business turns on an AI agent for its WhatsApp, Facebook Messenger or Instagram inbox or comments, the incoming message or comment, recent messages from the same conversation and the relevant parts of the business's own content are sent to the model chosen for that agent so it can write a reply, which is then sent from the business's account. Only what that reply needs is sent.

We do not use data from Google Drive, Facebook, Instagram or WhatsApp to train, develop or improve any AI model, and we send it to AI providers only to produce the response the business asked for. AI replies can be wrong. The business stays responsible for what its agents say and for giving people a way to reach a person in the business.

5. Agentic AI Functionality

Our system enables you to create AI Agents for your business that:

• Use your selected content only.
• Are isolated per user or business workspace.
• Do not learn across users or persist data beyond defined scopes.
• Can be embedded in websites, messaging platforms, or internal tools.

6. Data Storage, Security, and Retention

• Hosting: Voixt runs on secure, industry-standard cloud infrastructure.
• At rest: stored data and files are encrypted at rest.
• In transit: traffic between you and Voixt, and between Voixt, Meta and our AI providers, is encrypted with TLS.
• Access: access to customer data inside Gothi Tech LLP is limited to the people who need it to run and support the service. Access tokens for connected Meta accounts are used only by our servers.
• Retention: workspace data is kept while the account is open and deleted 30 days after a subscription ends, as set out in section 13 of our Cancellation & Refund Policy. Invoices and tax records are kept for as long as Indian law requires.
• Deletion: you can ask us to delete your data at any time — see our data deletion instructions.
• Incidents: if a security incident affects personal data, we inform the affected businesses, Meta and the authorities as the law and our agreements require.
• Reporting a vulnerability: write to support@voixt.ai with the subject “Security”.

Where data is processed

Gothi Tech LLP is in India. Our hosting is in the United States, and our AI providers may process data in the United States and other countries. We transfer personal data outside India only as the Digital Personal Data Protection Act, 2023 allows, and not to any country the Government of India restricts.

7. Data Sharing and Third-Party Access

We do not sell, trade, or rent any personal or content data. We use these service providers to deliver Voixt, and they process data only for that purpose:

• Hosting and storage: Amazon Web Services.
• AI models: OpenAI, Anthropic and Google, as described in section 4.
• Payments: Razorpay, for subscription billing.
• Meta: messages sent through WhatsApp, Messenger or Instagram travel through Meta, which handles them under its own privacy policy.

We may also disclose data where the law or a court order requires it.

Data we handle for the businesses that use Voixt

Businesses use Voixt to run their WhatsApp, Facebook and Instagram conversations, lead forms and contact lists. When a business connects a Facebook Page, an Instagram account or a WhatsApp Business number to Voixt, Meta sends us what happens there on that business's behalf: messages, comments, and the details people submit in the business's lead forms on Facebook and Instagram — usually a name, a phone number, an email address and the answers to the form's questions.

• Whose data it is: the business's. Under India's Digital Personal Data Protection Act, 2023 the business is the Data Fiduciary — it decides why the data is collected and how it is used — and Voixt is its Data Processor. We keep it in that business's workspace and act only on the business's instructions. The business is responsible for telling people how it uses their data and for having their consent or another legal basis, including their opt-in to receive WhatsApp messages.
• What we do with it: show it to the business in its inbox and lead board, send the messages and replies the business, its team or its AI agents send (see section 4), and run the automations the business has set up. We do not sell it, use it for our own marketing, use it for any other business, or use it to train AI models.
• How long we keep it: for as long as the business keeps that lead, contact or conversation and keeps its account. The business can delete any of it at any time, and it is deleted 30 days after the business's subscription ends.
• When a business disconnects: disconnecting a Page, Instagram account or WhatsApp number stops Voixt receiving anything new from it. Removing all Meta connections in Voixt, or removing Voixt.AI in Facebook settings, also withdraws the permission the business granted Voixt at Meta. Leads, contacts and conversations that already reached the workspace stay there until the business deletes them or its account closes. Details are in our data deletion instructions.
• If your details reached us this way and you want them seen, corrected or removed, ask the business directly, or write to support@voixt.ai naming the business and we will pass your request on and act on the business's instruction.

Cookies, analytics and advertising

This website uses cookies and similar technologies to understand how it is used and to measure our advertising. We do not use them to learn your name or contact details on this website; if you sign up, the visitor ID described below lets us connect the visit to your new account. None of this applies to the contents of your WhatsApp conversations or any data inside the Voixt platform.

• Analytics — Google Analytics and Microsoft Clarity, to see which pages are read and where people get stuck. Clarity also records anonymised session replays of how pages are used.
• Advertising — the Meta Pixel, so we can tell which advertising brings people here and stop paying for what does not.
• Campaign and source information — when you arrive from an advertisement or a tagged link, the link may carry an identifier for that click (for example fbclid or utm_source). When it does not, we note the kind of place you came from — a search engine, a social network, another website, or none — from the address your browser reports. If you then continue to our application at app.voixt.ai, we pass this across so the visit and the sign-up are understood as one journey rather than two strangers. It describes where the visit came from, not who you are.
• Visitor ID — a random identifier kept in a vx_id cookie for up to 90 days. It is added to links to our application at app.voixt.ai and sent with the actions we measure, such as clicking Start for Free or Login, so that a visit and a later sign-up can be recognised as the same journey — whether you arrived from an advertisement, a search or anywhere else. It is generated at random and contains no name, email address or other personal detail. Switching analytics off deletes it.

A notice appears on your first visit. You can switch analytics or advertising off at any time using the Cookie preferences link in the footer of any page; your choice is stored in your browser and applies immediately. Turning them off does not affect your use of the site.

8. Your Rights and Controls

You have full control over your data:

• Access your information
• Delete uploaded content
• Revoke Google or Microsoft access anytime via your account settings
• Disconnect Facebook, Instagram or WhatsApp at any time inside Voixt, in Facebook → Apps and websites, or by removing Voixt as a partner of your WhatsApp Business Account — see our data deletion instructions
• Ask us to correct your data, raise a grievance, or name someone to exercise your rights on your behalf, as the Digital Personal Data Protection Act, 2023 allows. Grievances follow section 16 of our Cancellation & Refund Policy
• Request account deletion by emailing: support@voixt.ai

Children

Voixt is a service for businesses and is not meant for anyone under 18. We do not knowingly collect children's data for ourselves. Businesses must not use Voixt to collect children's data without the verifiable parental consent the law requires. If you believe a child's data reached us, write to support@voixt.ai and we will delete it.

9. Policy Updates

We may update this policy as required. Any changes will be posted on this page with a revised date. Your continued use of our services constitutes acceptance of the updated terms.

10. Contact Information

For any privacy-related inquiries, please contact:

Company: Voixt AI, a product of Gothi Tech LLP
Registered office: 1214-1215, Shaligram Arcade, Nr. Bopal-Ambli T-Junction, S.P. Ring Road, South Bopal, Ahmedabad, Gujarat, India – 380058
Email: support@voixt.ai (support) · sales@voixt.ai (sales)
Business hours: Monday – Friday, 9:30 AM – 6:30 PM IST