Privacy Policy

1. Introduction

This Privacy Policy explains how BSCC (“BSCC,” “we,” “us,” or “our”), a Washington limited liability company, collects, uses, stores, and protects information when you interact with our products: Lumina (voxor.shop), Voxor Presenter, and Voxor Rental (collectively, the “Services”). We are committed to safeguarding your data and being transparent about our practices.

2. Information We Collect

We collect the following types of information:

Account Information

• Name, email address, and password (via Firebase Authentication)
• Business name, address, phone number, and business type
• Billing and payment information (processed securely by Stripe)

Client Booking and Customer Data

• Client names, phone numbers, and email addresses
• Appointment, rental, or session details and history
• Feedback and review submissions

Communication Data

• SMS messages sent and received through the Services
• Phone call transcripts and call metadata from automated or assisted calls; audio recordings only when a recording feature is enabled and disclosed
• Chat widget conversations

Usage Data

• Pages visited, features used, and interaction patterns
• Browser type, device information, and IP address

3. How We Use Your Information

We use collected information to:

• Provide, maintain, and improve the Services
• Process appointments, rentals, and presentations; send reminders; and handle communications
• Operate front desk assistants for phone calls, chat, booking, and approved SMS interactions
• Process billing and manage subscriptions
• Send service-related notifications and updates
• Analyze usage patterns to improve the product
• Ensure platform security and prevent abuse

4. Data Storage & Security

Your data is stored in Google Cloud Firestore, a fully managed, serverless database with encryption at rest and in transit. We use Firebase Authentication for secure identity management.

Data is organized in a multi-tenant architecture, meaning each business’s data is isolated and scoped to their account. We implement Firestore security rules to enforce access control at the database level.

While we implement industry-standard security measures, no method of electronic storage is 100% secure. We cannot guarantee absolute security but are committed to protecting your data using best practices.

5. Third-Party Services

We share data with service providers solely to operate the Services. Current provider categories include:

Telnyx

Used for phone calls, SMS messaging, and related communications infrastructure. Call and message data may be processed by Telnyx to deliver these services. See Telnyx’s Privacy Policy.

Conversation, Speech, and Voice Providers

Depending on the feature and account configuration, conversation, transcription, or synthesized-voice data may be processed by providers such as OpenAI, Anthropic, Deepgram, ElevenLabs, Cartesia, or Inworld. We send only the data needed to provide the configured feature and apply our account and security controls to those integrations.

SendGrid

Used to deliver account and transactional email when email delivery is enabled.

Video Demonstration Providers

When a user chooses an interactive video demonstration, video, audio, or session data may be processed by the configured video provider, such as Tavus.

Stripe

Used for payment processing. We do not store your full credit card number. All payment data is handled by Stripe in compliance with PCI DSS standards.

Firebase / Google Cloud

Used for authentication, data storage, and hosting infrastructure.

6. We Do Not Sell or Share Phone Numbers

We do not sell, rent, lease, or share your phone number, your clients’ phone numbers, or any SMS consent records with third parties or affiliates for marketing or promotional purposes. This restriction applies regardless of any other consents you provide. Phone numbers are used exclusively to deliver transactional SMS messages required to provide the Services. SMS opt-in consent and phone numbers are not transferred to or shared with any third party for any purpose other than enabling the Services (e.g., carrier delivery via our SMS infrastructure provider, currently Telnyx).

7. We Do Not Sell Your Data

We do not sell, rent, or trade your personal information or your clients’ data to third parties for marketing or advertising purposes. Your data is used exclusively to provide and improve the Services.

8. Data Retention

We retain information while an account is active and as reasonably necessary to provide, secure, and administer the Services or meet legal obligations. Transcript retention is configurable; the current default is 30 days and saved transcripts may be retained longer. You may request deletion by contacting us. Some information may remain for a limited period in backups, security logs, billing records, or records we must retain by law.

9. Your Rights (CCPA / GDPR)

Depending on your location, you may have the following rights regarding your personal data:

• Access — Request a copy of the data we hold about you.
• Correction — Request correction of inaccurate or incomplete data.
• Deletion — Request deletion of your personal data.
• Portability — Request an export of your data in a machine-readable format.
• Opt-Out — Opt out of non-essential data processing.

California residents (CCPA): You have the right to know what personal information we collect, request its deletion, and opt out of its sale (though we do not sell personal data). We will not discriminate against you for exercising these rights.

EU/EEA residents (GDPR): Our legal basis for processing your data is contractual necessity (to provide the service you signed up for) and legitimate interest (to improve and secure the platform). You may withdraw consent at any time by contacting us.

To exercise any of these rights, contact us at info@voxorai.com.

10. SMS & Phone Communication Consent

When you provide a phone number and affirmatively agree to the SMS disclosure shown in a booking, phone, chat, or inbound-text workflow, you consent to receive the transactional messages described for that business. These messages may include:

• Appointment, rental, or session booking confirmations
• Reminders (typically 24-hour and 2-hour before the appointment)
• Cancellation, rescheduling, and waitlist notifications
• Replies to inbound text messages you send (e.g., “C” to cancel, “R” to reschedule, “1”/“2”/“3” to choose a slot)
• Account-related notifications

We do not send marketing or promotional SMS messages. Message frequency depends on your appointment activity — typically 3 to 5 messages per booking. Message and data rates may apply depending on your wireless carrier.

Opt-Out: You may opt out of SMS communications at any time by replying STOP to any message. After opting out, you will receive one final confirmation message and no further texts. To resume messages later, reply START or UNSTOP.

Help: Reply HELP to any message to receive support contact information. You may also email info@voxorai.com.

Phone Number Sharing: See Section 6 — we do not share or sell phone numbers or SMS consent records with any third party for promotional purposes.

Phone Calls: Incoming calls to participating business numbers may be handled by an automated front desk assistant and may be transcribed to provide the service. If audio recording is enabled, the applicable business must provide any notice or obtain any consent required by law.

11. Cookies & Local Storage

The Services use browser local storage, session storage, and authentication technologies to maintain login state, preferences, and selected locations. Operational services may also process device, network, and request information for security and reliability. We do not use third-party advertising cookies on Lumina.

12. Children’s Privacy

The Services are not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal data, we will take steps to delete it.

13. Changes to This Policy

We may update this Privacy Policy periodically. When we make material changes, we will notify you via email or through the platform. The “Last updated” date at the top of this page reflects the most recent revision.

14. Contact Us

If you have questions or concerns about this Privacy Policy or your data, please contact us:

• Email: info@voxorai.com
• Mail: BSCC, 13430 131st Ave NE, Lake Stevens, WA 98258
• Website: voxorai.com