Privacy Policy

The data controller for personal data collected through this website is Cashtanic S.L., based in Ripollet, Spain, operating under the brand Vocals. You can contact us at contact@usevocals.com for any inquiry related to the protection of your personal data.

Through our website contact forms and our call automation platform, we collect the following personal data:

• Full name
• Company name
• Email address
• Phone number (optional)
• Call recordings, transcriptions, and metadata when using the platform
• API keys (encrypted) if you use the Bring Your Own Keys feature

We do not collect sensitive data nor make automated decisions based on your personal data.

Your personal data will be processed for the following purposes:

• To respond to your inquiry or request for information about our AI call automation services.
• To provide and operate our call automation platform, including routing calls through AI providers (speech-to-text, language models, text-to-speech).
• To prepare a customized proposal tailored to your business needs.
• To carry out commercial follow-up related to the services requested.
• To send communications related to our services, provided you have given your prior consent.

The processing of your data is based on:

• The consent given when submitting the contact form.
• The legitimate interest of Vocals in handling commercial inquiries and providing professional AI call automation services.
• The performance of pre-contractual measures when you request a demo or customized proposal.

Your personal data will be retained for the time necessary to handle your request and, where applicable, for the duration of the commercial relationship. Once the relationship ends, data will be kept blocked for the legally required periods to address potential legal obligations.

Your data will not be disclosed to third parties except where required by law. Vocals may use third-party technology service providers (hosting, email, AI providers such as OpenAI, Deepgram, ElevenLabs, Anthropic, and others) that act as data processors and with whom appropriate data protection agreements have been signed. If you use the Bring Your Own Keys (BYOK) feature, data is sent directly to your chosen providers under your own API agreements.

When you connect your Google account to Vocals, we request access to certain Google services through OAuth 2.0 to enable calendar-related features within our AI phone agent platform.

What we access

Vocals requests access to the following Google OAuth scopes:

• userinfo.email — to identify and display your connected Google account.
• calendar.calendarlist.readonly — to list the calendars you are subscribed to, so you can select which ones the AI agent may access.
• calendar.events — to allow AI agents to read, create, and update calendar events on your behalf during phone calls (if enabled).

How we use Google data

Google Calendar data is accessed exclusively to provide the calendar integration features within Vocals. Your calendar data is used in real time during phone calls to check availability, create appointments, or update events as configured by you. We do not use your Google data for advertising, profiling, or any purpose unrelated to the Vocals service.

Storage and security

OAuth tokens (access and refresh tokens) are encrypted at rest using AES-128 encryption (Fernet). Calendar event data is processed in real time and is not permanently stored on our servers beyond what is necessary for the active call session.

Revoking access

You can disconnect your Google account at any time from your Vocals dashboard (Settings → Integrations). You can also revoke access from your Google Account permissions page at myaccount.google.com/permissions. Upon revocation, we delete your stored OAuth tokens.

Data sharing

We do not share, sell, or transfer your Google user data to any third party, except as necessary to provide the service (e.g., transmitting calendar queries to the Google Calendar API).

You may exercise your rights of access, rectification, erasure, objection, restriction and portability of your data by contacting us at contact@usevocals.com. You also have the right to file a complaint with the Spanish Data Protection Agency (AEPD) if you believe that the processing of your data does not comply with current regulations.

Vocals implements appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. We apply industry-standard security protocols, including encryption of API keys at rest, data encryption in transit and at rest, and secure HTTPS connections.

This website only uses essential technical cookies necessary for its proper functioning, such as language preference. We do not use tracking, analytics, or third-party advertising cookies.

Vocals reserves the right to modify this privacy policy at any time. Changes will be published on this page with the corresponding update date.