Last updated: June 2026 ·
SurVoyce ("we", "us", "our") operates the SurVoyce voice-form platform at survoyce.com. This policy describes how we collect, use, and handle information when you use our service.
Creator accounts: email address, workspace name, billing information (processed by Stripe — we do not store card numbers).
Respondent sessions: When a respondent completes a voice form, we collect the audio stream (processed in real-time; not stored), a text transcript of the conversation, and any structured answers the AI agent records. We may also collect a name, email address, or phone number if the form asks for them. Respondent personal data is associated with a session ID and linked to the creator's workspace.
Session origin: Each session records where it came from — the IP address for web sessions, or the caller ID for phone sessions (as supplied by the phone network; withheld numbers are recorded as withheld). We use this for abuse and fraud prevention, and it is visible to the form's creator alongside the response. It is deleted with the other respondent personal data under the retention period below and on any respondent deletion request.
Consent: Respondents consent to AI voice processing before the session begins — via a web click or by pressing 1 on a phone keypad. The timestamp and consent channel are stored.
We use creator account data to provide the platform and process billing. Respondent session data is stored on behalf of the creator and made accessible to them upon credit purchase. We do not sell respondent data or use it for advertising.
Raw transcripts and respondent personal data fields are automatically deleted after your workspace's data retention period (default 90 days). Structured answers (non-personal form responses) are retained until the creator deletes the form or requests deletion.
Respondents may request deletion of their personal data by contacting the creator who administered the form. Creators can fulfil deletion requests using the data deletion tool in their account settings. For inquiries directed at SurVoyce, contact us at privacy@survoyce.com.
If you are located in the European Economic Area, SurVoyce acts as a data processor on behalf of the creator (data controller). A Data Processing Agreement (DPA) is available in your account settings. The legal basis for processing respondent data is the respondent's explicit consent given at the start of each session.
SurVoyce is not a HIPAA Business Associate and does not sign Business Associate Agreements (BAAs). Do not use SurVoyce to collect Protected Health Information (PHI). This restriction is also stated in our Terms of Service.
SurVoyce is not directed at children under 13. Respondents are required to confirm they are at least 13 years old before beginning a voice session (COPPA compliance). Creators must not solicit responses from children under 13.
We use TLS in transit, httpOnly cookies for session tokens, and AWS RDS with encrypted storage at rest. Audio is never stored — it is processed in real-time by AWS Nova Sonic and immediately discarded.
We will post material changes to this page and update the "Last updated" date. Continued use of the service after changes constitutes acceptance of the revised policy.