LeonVox · Aslan AI Systems

Privacy Policy

Last updated: September 21, 2026

This policy explains what personal information we process, why we use it, who may receive it and how you can exercise your privacy rights.

Looking to remove your information? Request data deletion.

1. Who we are and when this policy applies

LeonVox is a product operated by Aslan AI Systems (“we,” “us” or “our”). This policy covers our website, inquiries, optional browser voice demo, account administration and the LeonVox business integrations described below when those services are used.

For website visits, our own business communications and service administration, we determine how information is used. When a business uses LeonVox to handle its customer conversations or workflows, that business determines the purpose of the interaction and we process the relevant information on its behalf. The business’s own privacy notice also applies.

Features depend on the services selected and configured for a business. Describing an integration here does not mean it is enabled for every account.

2. Information we process

Contact and account information
Name, email address, business name, account identifiers, access roles and information you provide when contacting us or arranging a service.
Business connection information
Authorized business and account identifiers, business phone numbers, selected service settings, connection permissions and credentials needed to operate an integration.
Conversations and workflow information
When the relevant service is used, phone or WhatsApp contact details, messages, speech, transcripts, summaries, delivery status and information needed for a requested appointment, reservation, order or follow-up. We receive this information from participants, the business and its authorized integrations.
Technical and security information
IP address, browser and device information, request times, session identifiers, usage information and security or error events used to deliver and protect the service.

Please do not send passwords, complete payment card numbers, identity documents or sensitive personal information through our website inquiry channel or demo.

3. How we use information

Where applicable law requires a legal basis, we rely on the basis relevant to the activity, such as providing a requested service or contract, legitimate interests in operating and protecting our business, consent where required, or compliance with legal obligations. When processing for another business, we act on its instructions.

Sending us a business inquiry does not subscribe you to a marketing list.

4. Meta and WhatsApp integrations

When an authorized business connects WhatsApp through Meta’s business login or Embedded Signup, we receive the information and permissions made available for that connection. This can include the Meta business portfolio identifier, WhatsApp Business Account identifier, business phone number and phone-number identifier, account details, granted permissions and access credentials. We do not receive your Facebook password.

For a connected messaging service, we process the messages exchanged with the business, relevant sender details, message identifiers, timestamps and delivery or read status. We use this information to establish and maintain the authorized connection, support messaging and carry out the business’s configured customer-service workflows.

The connected business and its authorized team can access the customer information relevant to their service. Connecting WhatsApp does not give us general access to your private Facebook messages or your personal WhatsApp conversations with unrelated people.

You can manage or revoke the permissions you granted through Meta’s business integration settings. Revoking access and deleting information already stored are separate actions. To request deletion of information held by LeonVox, follow our data deletion instructions. Meta and WhatsApp separately process information under their own policies, including the WhatsApp Privacy Policy.

5. The browser voice demo and cookies

The optional demo starts after you choose to begin and allow microphone access. It uses fictional business examples and does not place real bookings or orders. LiveKit carries audio; AssemblyAI processes speech recognition, OpenAI generates responses and Gradium produces speech. Our demo application does not save conversation audio or transcripts, and LiveKit session recording is disabled for the demo.

Vercel hosts the website and Cloudflare provides security and demo session controls. The demo uses a secure visitor cookie lasting up to 48 hours and limited usage and security records to enforce call limits. See the demo data notice for details, including provider processing and retention.

We do not add advertising pixels or cross-site marketing trackers to this website. Essential hosting, security and session functions still process technical information. You can use your browser’s cookie and microphone settings to control access; restricting them may prevent the demo from working.

6. Service providers and other disclosures

We share information needed to provide a service with the providers that support it. These include website hosting and security providers, communications and AI providers, and the calendar or other business systems selected for an integration. The providers involved depend on the channel and configuration; not every provider receives every category of information.

Our website and demo providers are identified above. Business inquiries are handled through our business email service. Where an inquiry form is available, Cloudflare provides bot protection and Resend delivers the information submitted to our business mailbox. Connected WhatsApp communications also involve Meta and WhatsApp.

When LeonVox processes customer information on behalf of a business, we make the relevant information available to that business and its authorized systems. We may also disclose information where required by law, to respond to valid legal requests, or where necessary to address fraud, security incidents or legal claims.

Our service providers may process information in the United States and other countries where they operate. Their locations and data protection requirements may differ from yours. Any safeguards required for a particular business service form part of that service’s arrangements.

7. Retention and security

Retention depends on the type of information, the reason it was collected, the relevant service arrangements and applicable obligations. Business correspondence is retained while we handle the discussion and any resulting relationship. Business-service records depend on the configured workflows and the business’s instructions, including any need to maintain transaction or service records.

The public demo has its own limited security-record retention described in the demo data notice. Providers may maintain separate service logs, email copies or backups under their retention practices. We do not represent that deleting one record immediately removes every independent provider copy.

We use access restrictions and protected server-side handling of integration credentials to reduce unauthorized access. No internet service or storage system is completely secure. Additional arrangements for a business service, including any call recording, notices and retention, must be determined for that service; the demo’s recording policy does not apply to every business interaction.

When handling a deletion request, we identify the records within our control and any information that must be retained for an applicable obligation, security purpose or legal claim. Where another business controls the records, we coordinate with it as described below.

8. Your rights and choices

Depending on your location and the circumstances, you may have rights to access, correct, delete or obtain a copy of personal information, restrict or object to its use, or withdraw consent. Where applicable, you may also raise a concern with your local data protection authority. Withdrawing consent does not affect processing already carried out on that basis.

Send requests to privacy@leonvox.com. We may need to verify your identity or authority using information relevant to the request. Please do not send passwords or unnecessary identity documents. We handle requests within the time limits required by applicable law and explain any relevant limitations.

If your request concerns a business you called or messaged, identify that business and contact it directly where possible. It controls its customer records. You may also contact us so we can help identify the appropriate business and coordinate the request. Removing a LeonVox integration does not delete your Meta account, your own WhatsApp chat history or records held independently by that business.

For a step-by-step request path, see Data deletion.

9. Children’s information

Our website, business accounts and public demo are intended for adults and business users, not children under 13. If you believe a child has provided personal information to us through these services, contact us so we can review the situation and take appropriate action.

10. Changes to this policy

We may update this policy as our services or data practices change. The updated version will be published on this page with its revision date. Where required, we will provide additional notice of material changes.

11. Contact us

Aslan AI Systems
Operator of LeonVox

Privacy and data requests: privacy@leonvox.com
Business inquiries: info@leonvox.com