Privacy Policy

This Privacy Policy explains how Buraq Style LLC, a Wyoming limited liability company doing business as Voicedoc.ai ("Voicedoc", "we", "our"), collects, uses, and protects information when you use our voice and chat AI platform for healthcare practices.

If you are a patient interacting with a Voicedoc-powered agent, your information is handled under the Business Associate Agreement between Voicedoc and the healthcare practice you contacted — not under this policy. Contact that practice directly to exercise your rights as a patient.

1. What We Collect

• Account information: name, email, organization name, role, time zone.
• Usage data: call metadata (timestamps, duration, agent used), feature usage, page views, IP address, user-agent.
• Content you submit: agent configurations, prompts, knowledge bases, uploaded documents.
• Communications: support requests, feedback you send us.

Patient-facing PHI (call audio, transcripts, structured extractions) is processed under the BAA executed with your healthcare practice and is not covered by this policy.

2. How We Use It

We use the information we collect to:

• provide and maintain the Services,
• communicate with you about your account, security, and product updates,
• improve the quality, reliability, and performance of the Services,
• comply with legal obligations.

We do not sell personal information. We do not use PHI to train models.

3. PHI Handling

Protected Health Information is processed under the Business Associate Agreement executed by your organization. Specific safeguards include:

• envelope encryption (AES-256-GCM) on PHI columns at rest;
• TLS 1.2+ for PHI in transit;
• HIPAA-eligible Google Cloud Storage for call recordings;
• BAAs with every subprocessor that touches PHI.

4. Subprocessors

We use the following subprocessors to deliver the Services. This section is the current list:

• Google Cloud Platform — compute, storage, and Gemini models (Gemini Enterprise Agent Platform, formerly Vertex AI). BAA in place.
• OpenAI — realtime voice models, only for phone lines set to use them, on zero-data-retention endpoints. BAA in place.
• Telnyx — telephony conduit (carrier-of-record for voice and SMS). HIPAA conduit exception applies.

We notify customers of material subprocessor changes via the portal at least thirty (30) days before the new subprocessor begins processing PHI.

5. Retention

• Account data: retained while your account is active, and for up to ninety (90) days after termination.
• PHI: retained per the BAA — typically the duration of the underlying service agreement plus any period required by the covered entity, then returned or destroyed in accordance with HIPAA.
• Audit logs: retained for at least six (6) years to satisfy HIPAA recordkeeping requirements.

6. Your Rights

You may access, correct, or delete your account data at any time via the portal's Settings page. You may also contact <hello@voicedoc.ai> to request:

• a copy of the personal information we hold about you,
• correction of inaccurate personal information,
• deletion of your account.

California residents: under the California Consumer Privacy Act (CCPA/CPRA), you have the right to know what personal information we collect, to access it, to correct it, to delete it, and to opt out of its sale or sharing. Voicedoc does not sell or share personal information as those terms are defined by the CCPA. Submit requests to <hello@voicedoc.ai>; we will verify your identity and respond within the statutory period, and we will not discriminate against you for exercising these rights.

EU/UK users: Voicedoc does not currently market to or knowingly accept users located in the EU or UK. Contact us at <hello@voicedoc.ai> if you believe you are an EU/UK user and have data with us.

7. Security Incidents

We maintain a written incident response plan. Suspected security incidents involving your account or PHI you are responsible for are reported to you in accordance with the BAA (no later than sixty days after discovery, per 45 CFR § 164.410).

8. Children

The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted at https://voicedoc.ai/legal/privacy with a new version number and effective date.

10. Contact

All inquiries: <hello@voicedoc.ai>

Buraq Style LLC d/b/a Voicedoc.ai Wyoming, USA