Back to Vocaliza AI

Privacy Policy

Last updated: 07/06/2025

1. Who We Are

Enkiza Pty Ltd ABN 18 687 182 841 ("we", "us") provides a cloud platform for voice AI. We act as (a) a data controller for our own marketing/contact data, and (b) a data processor for audio, transcripts and metadata customers handle through the Service.

2. What Data We Collect

CategoryExamplesSource
Account Dataname, email, billing address, payment card last-4You
Service UsageAPI keys, assistant configs, call logs, performance metricsGenerated automatically
Call & Audiocaller IDs, audio streams, real-time transcripts, recordings (if enabled)You / Telephony carrier
Cookies & Devicebrowser type, IP, session tokens, analyticsAutomated
Support Contentemails, chat logs, attachmentsYou

3. Legal Grounds for Processing

  • Consent – demo call recordings when you opt-in.
  • Contract – providing the Service you signed up for.
  • Legitimate interests – fraud prevention, product analytics.
  • Legal obligation – accounting, tax, or lawful disclosure.

(Applicable EU GDPR arts. 6–7)

4. How We Use Data

To (a) provision and secure the Service; (b) route calls via telephony/TTS/STT vendors; (c) improve latency and accuracy; (d) send product updates; and (e) comply with law.

5. Sharing & International Transfers

Data may be shared with:

  • Cloud hosting and AI providers in the US, EU and APAC under DPA-backed SCCs.
  • Payment processors under PCI-DSS.
  • Law enforcement when legally required.

Transfers outside Australia / EU rely on Standard Contractual Clauses or an adequacy decision (GDPR arts. 44-46).

6. Retention

Default retention is 30 days for raw audio, 90 days for transcripts, and 7 years for invoices unless you configure shorter periods or request deletion.

7. Your Rights

Depending on your location you may:

  • Access, correct or delete personal data (APP 12, GDPR art. 15, CCPA §1798.100)
  • Object to or restrict processing (GDPR arts. 18-21).
  • Opt-out of sale or sharing of personal information (CCPA/CPRA).
  • Complain to the OAIC or an EU supervisory authority.

Submit requests via tech@enkiza.ai; we will verify identity and respond within 30 days.

8. Security

We apply encryption in transit and at rest, least-privilege IAM, SOC 2-aligned controls and incident response procedures. Notifiable breaches are disclosed within 72 hours where required.

9. Cookies

The site uses essential cookies for authentication and analytics cookies (GA4) only with consent. A cookie banner lets you manage preferences.

10. Children

The Service is not directed to children under 16. We do not knowingly collect their data; if we discover it, we delete it promptly.

11. Changes

We will post revisions here and, for material changes, email account holders 30 days before they take effect.

12. Contact

For privacy enquiries or to exercise rights: