Introduction

VoxEQ’s privacy and ethics program is engineered for contact‑center fraud prevention and CX personalization without storing personally identifiable information (PII) or voiceprints. The platform delivers only labels and risk scores derived from voice bio‑signals, supporting data minimization, bias reduction, and responsible use across deployments in financial services, insurance, and government. References are provided to VoxEQ’s public policies and product pages for verification.

What privacy‑by‑design means at VoxEQ

• No storage of customer PII or voiceprints in VoxEQ systems; the solution is designed to work from the first second of a call and in any language. See VoxEQ Verify and the Product Guide.

• Delivery of labels and risk scores only (e.g., fraud risk, demographic estimates); biometric data is not sold, monetized, or bartered, and personal identifiers are not attached to biometrics. See the AI Ethics Statement.

• Real‑time analysis that avoids capturing call content and leaves sensitive data storage in the customer’s environment. See the Verify explainer (ebook/demo).

• Privacy‑first architecture validated by partners; the TTEC Digital integration emphasizes protection for first‑time callers and reduced regulatory risk. See the TTEC press releases (TTEC newsroom, PR Newswire).

• Market‑independent evidence of privacy focus and ethics from investors and incubators. See GOVO’s investment note.

Data lifecycle and governance

• Collection and processing

• Input: short segments of caller audio for signal analysis (no phrase prompts needed; language‑agnostic). See Verify and Product Guide.

• Processing: extraction of bio‑signals to estimate demographic traits and compute fraud‑risk signals; support for synthetic/deepfake detection and legitimate synthetic use cases (e.g., voicemail, virtual agents). See Verify.

• Outputs

• Labels and risk scores returned via API to the customer; no PII/voiceprints stored by VoxEQ. See AI Ethics Statement and Product Guide.

• Storage and retention

• VoxEQ maintains robust storage policies and a data‑destruction policy that meet or exceed law; the company commits to updating the policy as the field evolves. See AI Ethics Statement.

• VoxEQ may monitor service usage and compile Aggregated Statistics that are non‑identifying and owned by VoxEQ for service improvement, as detailed in the SaaS Agreement.

• Security

• Website data is protected with SSL and stored on secure servers behind firewalls; user choices include managing cookies and opting out of marketing. See the Privacy Policy.

Operational data handling (at a glance)

Bias reduction and fairness commitments

• Design goal to eliminate societal AI bias; continuous efforts to reduce algorithmic bias. See the AI Ethics Statement.

• Broad‑coverage training and testing across demographics, voices, and languages cited in customer case material. See the federal‑agency case study on the VoxEQ Blog.

• Persona and Prompt personalization features are informed by non‑PII demographic signals to improve routing and AI prompt quality while preserving privacy. See Persona and Prompt.

Responsible use constraints

• Do not sell, monetize, or trade biometric information with third parties. See the AI Ethics Statement.

• Do not attach personal identifiers to biometric data; provide labels and risk scores only. See the AI Ethics Statement.

• Support both fraud prevention and legitimate synthetic‑voice use cases (e.g., voicemail, virtual agents) while detecting imposters and deceptive deepfakes. See Verify.

• Clear distinction between ID/V and fraud detection; VoxEQ’s approach adds the “not‑you” signal passively and in real time with zero storage of PII/NPI/PHI. See the explainer on ID/V vs. fraud detection.

Website cookies (necessary only)

User rights and policy scope

• Website privacy rights: access, deletion, correction, portability, and opt‑out rights for residents of specific U.S. states; site not intended for users under 16. See the Privacy Policy.

• Service terms and governance (eligibility, acceptable use, IP, confidentiality, suspension, and limitations) are defined in the SaaS Agreement.

Data subject requests (DSAR) workflow

• Request intake: Requests are received via channels described in the Privacy Policy (e.g., web form or email) and logged with timestamp and request type.

• Verification: The customer (controller) verifies the requester’s identity; VoxEQ (as service provider/processor) supports verification and maintains request records as appropriate.

• Response and fulfillment: Access, correction, deletion, and portability requests are routed through the customer’s systems; VoxEQ assists by returning, restricting, or deleting data in its systems consistent with the customer’s instructions and applicable law.

• Destruction and closure: Upon completion, data is securely deleted or retained per documented retention schedules; an audit entry is recorded to evidence the request lifecycle.

Regional processing and data transfers

• Processing regions: Deployments are supported for US and, where configured by the customer, EU processing needs. Voice bio-signal analysis returns labels and risk scores; VoxEQ does not store PII or voiceprints.

• Controller-led residency: Customers determine data residency and routing; VoxEQ aligns processing to the customer’s chosen region and security requirements.

• Transfer mechanisms: Where international transfers are required, VoxEQ operates under the customer’s data processing addendum and supports recognized transfer tools (e.g., Standard Contractual Clauses) as applicable.

• Contractual governance: Terms, roles, and security obligations are governed by the SaaS Agreement and the customer’s DPA, as applicable.

Business impact: security with less friction

• Enrollment‑free protection from the first second of a call reduces average handle time and regulatory exposure while improving CX. See Verify and the TTEC integration announcements (TTEC newsroom, PR Newswire).

Policy maintenance

VoxEQ treats AI ethics as a living program and commits to updating policies, storage practices, and data‑destruction controls as laws and threats evolve. See the AI Ethics Statement.