Privacy Policy

1) Scope & Roles

This Privacy Policy explains how we handle personal information when you (a) visit taxovoice.com or related pages ("Website Visitors"); (b) use or evaluate our AI voice‑agent products/services ("Customers"); or (c) interact by phone/SMS with a number that uses our Service on behalf of a Customer ("End Callers").

When we process End Caller data for a Customer, we act as that Customer’s processor/service provider. When we collect data on our Website and for our own sales/marketing, support, and operations, we act as a controller/business.

2) Information We Collect

A) Website Visitors

• Identifiers & contact (if submitted): name, email, phone.
• Usage data: IP address, device/browser, pages viewed, referrers, timestamps, approximate location.
• Cookies & similar tech: to operate the site, remember preferences, and analyze traffic.

B) Customers (and their authorized users)

• Account & billing: name, business, role, email, phone, subscription and payment status (payments handled by Stripe).
• Configuration: hours, FAQs/scripts/prompts, integrations (e.g., calendar/CRM), call routing preferences.

C) End Callers (processed for our Customers)

• Telephony metadata: phone numbers, time/date, duration, routing, call status.
• Call audio & recordings (if enabled by the Customer and permitted by law).
• Transcripts & summaries generated from audio.
• Message content (e.g., SMS/IVR inputs).
• Appointment/intake details (name, contact, service request, notes).

D) Sensitive categories

We do not seek government IDs, financial account numbers, or health/medical data. Please do not submit protected health information (PHI). Voice recordings may be sensitive in some jurisdictions; we do not use them for biometric identification/authentication.

3) How We Use Information

As a controller (our Website & operations)

• Operate, secure, debug, and improve the Website.
• Respond to inquiries and support requests.
• Send admin/service messages; conduct direct marketing (opt‑out available).
• Comply with law; enforce terms; protect rights, safety, and security.

As a processor/service provider (for Customers)

• Operate AI voice agents to answer calls, respond to FAQs, and book appointments.
• Record, transcribe, summarize, and analyze calls (if enabled).
• Provide integrations (calendars, CRMs, ticketing, messaging).
• Provide analytics/quality checks/support; ensure reliability and security.

Automated decision‑making / AI

Our models may analyze audio/text to route calls, extract details, and propose actions (e.g., schedule slots). We do not use automated decisions for credit, employment, housing, or other legally significant determinations.

4) Legal Bases (EEA/UK)

Where applicable, we rely on contract performance, legitimate interests (e.g., security, product improvement), consent (where required, e.g., marketing/certain cookies), and legal obligations.

5) Sharing & Disclosures

• Service providers/sub‑processors that host, transcribe, analyze, route calls, send emails/SMS, process payments, provide analytics, security, and support—bound by appropriate confidentiality, security, and data‑processing terms.
• Integrations you or our Customers connect (e.g., calendars, CRMs).
• Corporate events (merger, acquisition, financing, sale of assets).
• Legal/compliance (to comply with law, valid legal process, or protect rights/safety/security).

We do not sell personal information and do not share it for cross‑context behavioral advertising under the California CPRA. If this changes, we will update this Policy and provide required choices.

6) Cookies & Tracking

We use strictly necessary, functional, and analytics cookies. You can control cookies in your browser settings. Some features may not work without certain cookies. We do not respond to Do Not Track signals at this time.

7) Data Retention

• Call recordings/transcripts/logs: default retention is 12 months (unless a Customer sets a different period). Afterwards data is deleted or anonymized, unless we must retain longer for legal/security reasons.
• Account/billing records: retained as required for tax, accounting, and compliance.
• Website analytics: retained per provider defaults or as needed for performance analysis.

Customers may request deletion of their data at any time, subject to legal holds and backups.

8) Security

We implement administrative, technical, and physical safeguards (encryption in transit, access controls, monitoring, least‑privilege). No method is 100% secure; we cannot guarantee absolute security.

9) International Transfers

We may process and store data in the United States and other countries. Where required, we use appropriate safeguards (e.g., Standard Contractual Clauses) for cross‑border transfers.

10) Your Privacy Rights

California (CPRA)

California residents have rights to know/access, delete, correct, opt‑out of sale/share, limit use of sensitive personal information, and non‑discrimination. We do not sell or share personal information for cross‑context behavioral advertising. To exercise rights, email santi@taxo.media. You may designate an authorized agent (we’ll require proof plus consumer verification).

EEA/UK (GDPR)

Depending on your location, you may have rights to access, rectify, erase, restrict processing, object, and data portability. Where processing is based on consent, you may withdraw consent at any time. You can lodge a complaint with your local supervisory authority.

Marketing choices

Unsubscribe from marketing emails via the link in those emails or by contacting santi@taxo.media. We may still send important transactional/service messages.

11) Children’s Privacy

Our Website/Services are not directed to children under 13 (or under 16 in the EEA). We do not knowingly collect personal information from children. If you believe a child provided personal information, contact us for deletion.

12) Customer Responsibilities

• Provide required call‑recording/monitoring notices and obtain consents.
• Configure integrations and retention to meet legal obligations.
• Ensure lawful use of our Services and data provided to us.

13) Third‑Party Links & Services

Our Website may link to third‑party sites/services. Their privacy practices are governed by their own policies.

14) Changes to this Policy

We may update this Policy periodically. Material changes will be posted on the Website with a new effective date. Your continued use constitutes acceptance.

15) Contact Us

Sasi ENT LLC d/b/a Taxo Media (TaxoVoice)
Email: santi@taxo.media
Mailing address: 1134 Orange Drive, Oxnard, CA 93036, USA

Submit a Privacy Request   Do Not Sell/Share My Personal Information

California “Notice at Collection”

Sub‑processors & Key Vendors

• Web hosting/CDN: Webflow (website hosting and delivery).
• Payments: Stripe (payment processing for subscriptions/transactions).
• Video hosting: YouTube (hosting/streaming demo and help videos).
• Communications/CRM platform: HighLevel (GoHighLevel) — used to manage telephony, messaging, CRM, calendar/booking, and related automations. HighLevel may engage its own sub‑processors. For details, contact santi@taxo.media.

We will update this section as our vendor stack evolves. You can request our then‑current sub‑processor list at santi@taxo.media.

Data Processing Addendum (for Customers)

If you need a DPA (including EU/UK SCCs), email santi@taxo.media and we will provide our standard terms.