1 Introduction
Tapitt operates VocalReach, an AI-powered voice agent platform for website visitor engagement, lead conversion, and automated lead capture. This policy describes information collection, use, disclosure, and protection practices when using our website, platform, and services.
By accessing VocalReach, you consent to these practices. Discontinue use if you disagree.
2 Information We Collect
Directly provided:
- Account registration — name, email, phone, company, industry
- Billing and payment information via secure providers
- Support communications and feedback
Generated through Services:
- Lead contact data uploads and syncs
- Voice interaction records, transcripts, AI lead summaries
- Calendar and scheduling data from integrations
- Campaign configuration and usage preferences
Technical and usage data:
- IP addresses, browser type, device identifiers, operating system
- Pages visited, features used, session duration, clickstream data
- Error logs and performance diagnostics
3 How We Use Your Information
- Provision, operate, and improve VocalReach platform features
- Enable AI-driven voice conversations with website visitors
- Capture and qualify leads and sync data with CRMs
- Send account notifications, product updates, security alerts
- Analyze platform performance and develop new features
- Detect, investigate, and prevent fraud, abuse, and security incidents
- Comply with legal obligations and enforce terms of service
Data is not used for advertising or sold to third-party marketers.
4 Voice Data & AI Processing
VocalReach conducts voice interactions via an embedded AI widget on your website. Conversations may be recorded and transcribed for quality assurance, AI improvement, and lead reporting.
Users represent they have obtained all legally required consents from visitors, including recording consent under applicable jurisdiction requirements such as TRAI (India), TCPA (USA), GDPR (EU), and CASL (Canada).
AI-generated transcripts and summaries are stored in user accounts for team review. Aggregated, anonymized interaction data improves AI models; identifiable visitor data requires explicit consent for model training.
5 Data Retention
| Data Type | Retention Period |
|---|---|
| Voice interaction recordings | 90 days (configurable) |
| Transcripts & AI summaries | Active subscription duration |
| Lead qualification data | Per account settings |
| Account & billing data | Subscription term + 30 days post-termination |
| Usage logs & diagnostics | 12 months |
After retention periods, data is securely deleted or anonymized.
6 Data Sharing & Third Parties
Personal data is not sold. Data may be shared with:
- Service Providers — Cloud hosting, telephony, payment processing, and analytics vendors contractually obligated to protect data
- Integrations — CRM systems, calendars, and other connected tools governed by their own privacy policies
- Legal Requirements — When required by law, court order, or government authority
- Business Transfers — During mergers, acquisitions, or asset sales with advance notification
7 Your Rights
Depending on your location, your rights include:
- Access — Request a copy of personal data we hold
- Correction — Request correction of inaccurate or incomplete data
- Deletion — Request deletion of personal data (subject to retention obligations)
- Portability — Receive data in a structured, machine-readable format
- Objection / Restriction — Object to or restrict specific types of processing
- Withdraw Consent — Withdraw consent-based processing at any time
Contact hello@tapitt.digital to exercise your rights. We commit to responding within 30 days.
8 Security
Industry-standard security measures include:
- TLS 1.3 encryption in transit
- AES-256 encryption at rest
- Role-based access controls and least-privilege principles
- Regular security audits and vulnerability assessments
- Incident response procedures with breach notification obligations
No system is completely secure. Users should employ strong passwords and enable two-factor authentication where available.
9 Cookies & Tracking
Essential cookies — Required for platform functionality including authentication and session management; cannot be disabled.
Analytics cookies — Used to understand user interaction patterns; enabled only with your consent.
Preferences can be managed through your browser settings or our consent banner.
10 Children's Privacy
VocalReach serves businesses and is not directed at individuals under 18 years of age. We do not knowingly collect personal data from minors. If you suspect minor data has been collected, please report it to us immediately.
11 Changes to This Policy
Updates to this policy reflect changes in our practices or applicable law. Material changes will be communicated via email notification or a prominent platform notice at least 14 days before taking effect.
Continued use of VocalReach after the effective date constitutes acceptance of the updated policy.
12 Contact Us
For privacy-related inquiries, data requests, or to report a concern:
Email — hello@tapitt.digital
Website — tapitt.digital