1. Who we are
AJVoiceAI ("we", "us", "our") operates the AJVoiceAI voice outreach platform. We are a UK-based company registered in England and Wales. For data protection purposes, we act as a data processor on behalf of our customers (tenants), who are the data controllers.
Contact: hello@ajvoiceai.co.uk
2. Data we collect
Account data (controller)
- Business name, email address, hashed password
- Billing information (processed by Stripe — we do not store card details)
- Twilio subaccount identifiers
Campaign data (processor on behalf of tenants)
- Contact names, phone numbers, and metadata uploaded by tenants
- Call logs: timestamps, duration, outcome, from/to numbers
- AI conversation context (not recorded unless tenant enables recording)
3. Lawful basis for processing
- Contract — processing account data is necessary to provide our service
- Legitimate interest — platform security, fraud prevention, service improvement
- Consent — tenants are responsible for obtaining consent from their contacts before using our platform to call them
4. How we use your data
- To provide and maintain the voice outreach platform
- To process payments via Stripe
- To place outbound calls via Twilio on behalf of tenants
- To screen contacts against the TPS/CTPS register
- To enforce Ofcom calling hour regulations
- To send service-related communications (account alerts, billing)
5. Data retention
- Call logs: 12 months, then automatically deleted
- Contact data: retained until campaign deletion or tenant account closure
- Billing records: 7 years (UK legal requirement)
- Account data: retained until account deletion requested
6. Sub-processors
We use the following third-party services to operate our platform:
| Service | Purpose | Data residency |
|---|
| Supabase | Database | EU (Frankfurt) |
| Upstash Redis | Job queue | UK (London) |
| Twilio | Telephony | US + EU |
| Google (Gemini) | AI voice processing | US |
| Stripe | Payment processing | EU |
| Vercel | Dashboard hosting | EU (London) |
| Railway | API hosting | EU |
7. International transfers
Some data is processed outside the UK/EEA (Twilio, Google). These transfers are protected by Standard Contractual Clauses (SCCs) and the providers' compliance certifications.
8. Your rights
Under UK GDPR, you have the right to:
- Access — request a copy of your personal data
- Rectification — correct inaccurate data
- Erasure — request deletion of your data
- Portability — receive your data in a machine-readable format
- Object — object to processing based on legitimate interest
- Restrict — request restricted processing
To exercise any of these rights, email hello@ajvoiceai.co.uk. We will respond within 30 calendar days.
9. Complaints
You have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk if you believe your data rights have been violated.
10. Changes to this policy
We may update this policy from time to time. We will notify registered users of material changes by email.