Privacy Policy

Last Updated: January 8, 2026

This Privacy Policy describes how Cothink LLC ("Company," "we," "us," or "our") collects, uses, and shares information when you use VoxNexus (the "Service"). By using VoxNexus, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

1.1 Account Information

When you create an account, we collect:

• Email address
• Name (optional)
• Password (stored securely using bcrypt hashing)
• Organization name and details
• Billing information (processed by Stripe)

1.2 Voice and Audio Data

When you use our AI voice agent features, we may process the following:

• Voice recordings from calls handled by your AI Agents
• Transcriptions generated from speech-to-text processing
• AI-generated audio from text-to-speech synthesis
• Conversation logs including messages between users and AI Agents

1.3 Configuration Data

We store the configurations you create, including:

• AI Agent settings and system prompts
• SIP/VoIP credentials (encrypted at rest)
• API keys for third-party integrations (encrypted at rest)
• Knowledge base documents and embeddings
• Webhook configurations

1.4 Usage and Analytics Data

We automatically collect:

• Usage metrics (API calls, minutes used, agent activity)
• Log data (IP addresses, browser type, access times)
• Performance metrics and error logs
• Feature usage patterns

1.5 Cookies and Tracking

We use essential cookies for authentication and session management. We may use analytics tools to understand how users interact with our Service.

2. How We Use Your Information

We use the information we collect to:

• Provide the Service: Process voice calls, run AI agents, store configurations, and deliver core functionality
• Improve the Service: Analyze usage patterns, fix bugs, and enhance features
• Customer Support: Respond to inquiries and resolve issues
• Billing: Process payments and manage subscriptions
• Security: Detect fraud, abuse, and security threats
• Communications: Send service updates, security alerts, and (with consent) marketing communications
• Legal Compliance: Comply with applicable laws and regulations

2.1 AI Model Training

3. Third-Party Service Providers

We share data with the following categories of third-party processors to provide the Service:

3.1 AI and Machine Learning Providers

3.2 Telephony Providers

• LiveKit: Real-time audio/video infrastructure
• Your SIP Provider: Call routing and telephony (you provide your own)

3.3 Infrastructure and Business Services

• Stripe: Payment processing
• Cloud hosting providers: Data storage and compute
• Analytics services: Usage analytics

4. Data Retention

4.1 Your Data Ownership

You own your data. Voice recordings, conversation logs, configurations, and other Content you create belong to you.

4.2 Retention Periods

• Account data: Retained while your account is active, deleted upon request or account closure
• Conversation logs: Retained for 90 days by default (configurable)
• Voice recordings: Retained for 30 days by default (configurable)
• Usage logs: Retained for 1 year for billing and analytics
• Backup data: May persist in backups for up to 30 days after deletion

4.3 Data Export

You may request an export of your data at any time by contacting us at privacy@cothink.xyz.

5. Data Security

We implement industry-standard security measures including:

• Encryption in transit (TLS 1.3) and at rest (AES-256)
• Secure password hashing (bcrypt)
• API key encryption for stored credentials
• Regular security audits and updates
• Access controls and logging

However, no system is 100% secure. You are responsible for maintaining the security of your account credentials.

6. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate data
• Erasure: Request deletion of your data ("right to be forgotten")
• Portability: Receive your data in a structured format
• Objection: Object to certain processing activities
• Restriction: Limit how we use your data

To exercise these rights, contact us at privacy@cothink.xyz. We will respond within 30 days.

7. California Privacy Rights (CCPA)

If you are a California resident, you have the right to:

• Know what personal information we collect and how it is used
• Request deletion of your personal information
• Opt out of the "sale" of personal information
• Non-discrimination for exercising your privacy rights

We do not sell your personal information.

8. European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), we process your data based on:

• Contract: To provide the Service you requested
• Legitimate Interest: For security, fraud prevention, and service improvement
• Consent: For optional features like marketing communications

You may lodge a complaint with your local data protection authority if you believe we have violated your rights.

9. International Data Transfers

Your data may be transferred to and processed in the United States and other countries where our service providers operate. We ensure appropriate safeguards are in place for such transfers, including Standard Contractual Clauses where applicable.

10. Children's Privacy

VoxNexus is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If we learn we have collected data from a child, we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Service. Your continued use of VoxNexus after changes constitutes acceptance of the updated policy.

12. Contact Us

For privacy-related inquiries, please contact:

Cothink LLC
Privacy Officer
Email: privacy@cothink.xyz
Website: https://voxnexus.pro

For general inquiries: support@cothink.xyz
For legal matters: legal@cothink.xyz