Data Processing Agreement

Last updated: September 13, 2026

Data We Collect

We process: voice call audio, transcripts, caller phone numbers, call metadata (duration, outcome, timestamps). We do not process medical records or payment card data.

How We Use Your Data

VoiceForge selects one voice runtime for each deployment. In the current ElevenLabs mode, phone calls are carried over Twilio, browser tests use a secure VoiceForge relay, and ElevenLabs receives call audio and transcripts for speech recognition, conversation reasoning, and speech synthesis. A deployment explicitly configured for the legacy OpenAI Realtime mode sends call audio and transcripts to OpenAI instead. Call metadata and transcripts are stored in Supabase. We do not sell your data.

Subprocessors

  • Twilio — Voice telephony (optional)
  • Vobiz — SIP voice telephony, if you connect a Vobiz number (optional)
  • ElevenLabs — speech-to-text, conversation reasoning, and text-to-speech for calls
  • OpenAI — embeddings used for knowledge retrieval; call audio and transcripts only in an explicitly configured legacy OpenAI Realtime deployment
  • Google — Calendar, Gmail, and Sheets integrations (optional); Google Analytics for website usage analytics (Consent Mode v2 — analytics cookies are denied by default in regions requiring opt-in consent)
  • Supabase — Database and authentication
  • Dodo Payments — Payment processing as merchant of record (billing name, email, and address)
  • Resend — Transactional email

Dodo Payments, Resend, Google Analytics, and the embeddings service never receive call audio or transcripts. In the current production mode, call audio reaches ElevenLabs and, for phone calls, Twilio; transcripts are stored in Supabase. A legacy OpenAI Realtime deployment sends call audio and transcripts to OpenAI instead of ElevenLabs.

Encryption

Platform-managed data is encrypted in transit (TLS 1.2+) and at rest (AES-256); each subprocessor's encryption is governed by its own DPA. Integration credentials and access tokens are additionally envelope-encrypted with AES-256-GCM under rotatable, application-managed keys.

Retention

Call records are retained for 365 days by default. Organizations can configure retention between 30 and 3650 days in workspace settings. After retention period, records are permanently deleted.

Your Rights

You may request erasure of all personal data at any time: use the delete-account option in Settings, or contact privacy@incfrog.ai. Self-service deletion is refused when your organization still has other members (one person's request cannot delete teammates' data — remove them or transfer ownership first) or an active subscription (cancel it first). Financial records must be retained by law, so accounts with billing history cannot be hard-deleted automatically — contact privacy@incfrog.ai and remaining personal data will be removed from those records.

Contact

For data privacy inquiries: privacy@incfrog.ai