Privacy Policy

1. Who we are and when this policy applies

LeonVox is a product operated by Aslan AI Systems (“we,” “us” or “our”). This policy covers our website, inquiries, optional browser voice demo, account administration and the LeonVox business integrations described below when those services are used.

For website visits, our own business communications and service administration, we determine how information is used. When a business uses LeonVox to handle its customer conversations or workflows, that business determines the purpose of the interaction and we process the relevant information on its behalf. The business’s own privacy notice also applies.

Features depend on the services selected and configured for a business. Describing an integration here does not mean it is enabled for every account.

2. Information we process

Contact and account information

Name, email address, business name and type, an optional phone number, account identifiers, access roles and information you provide when requesting a demo, contacting us or arranging a service.

Business connection information

Authorized business and account identifiers, business phone numbers, selected service settings, connection permissions and credentials needed to operate an integration.

Conversations and workflow information

When the relevant service is used, phone or WhatsApp contact details, messages, speech, transcripts, summaries, delivery status and information needed for a requested appointment, reservation, order or follow-up. We receive this information from participants, the business and its authorized integrations.

Caller-name directory hint

When a business enables it, we may send your calling number to Telnyx to obtain an optional caller-name directory hint (the name listed for the number with carriers). We cache that hint for up to 30 days and use it only to suggest a name for your order or booking, which you can correct. Directory hints are not verified identity and are not shared with other businesses.

Technical and security information

IP address, browser and device information, request times, session identifiers, usage information and security or error events used to deliver and protect the service.

Please do not send passwords, complete payment card numbers, identity documents or sensitive personal information through our website inquiry channel or demo.

3. How we use information

• Respond to inquiries, discuss requirements and administer our relationship with a business.
• Authenticate authorized users and establish the business connections they request.
• Handle conversations and carry out the configured customer-service workflows, including requested bookings, order-related tasks and follow-up.
• Provide AI-generated responses and make conversation outcomes available to the authorized business team.
• Operate, troubleshoot and secure our services; control usage; and prevent spam, fraud and unauthorized access.
• Handle privacy requests, meet applicable obligations and resolve disputes.

Where applicable law requires a legal basis, we rely on the basis relevant to the activity, such as providing a requested service or contract, legitimate interests in operating and protecting our business, consent where required, or compliance with legal obligations. When processing for another business, we act on its instructions.

Sending us a business inquiry does not subscribe you to a marketing list.

4. Meta and WhatsApp integrations

When an authorized business connects WhatsApp through Meta’s business login or Embedded Signup, we receive the information and permissions made available for that connection. This can include the Meta business portfolio identifier, WhatsApp Business Account identifier, business phone number and phone-number identifier, account details, granted permissions and access credentials. We do not receive your Facebook password.

For a connected messaging service, we process the messages exchanged with the business, relevant sender details, message identifiers, timestamps and delivery or read status. We use this information to establish and maintain the authorized connection, support messaging and carry out the business’s configured customer-service workflows.

The connected business and its authorized team can access the customer information relevant to their service. Connecting WhatsApp does not give us general access to your private Facebook messages or your personal WhatsApp conversations with unrelated people.

You can manage or revoke the permissions you granted through Meta’s business integration settings. Revoking access and deleting information already stored are separate actions. To request deletion of information held by LeonVox, follow our data deletion instructions. Meta and WhatsApp separately process information under their own policies, including the WhatsApp Privacy Policy.

5. Text messages (SMS)

If you agree to receive text messages during a call, or by checking the optional SMS box on a LeonVox online reservation page, we process your mobile phone number, your consent (its time and the call or web form it was given in), the messages we send and their delivery status, and any STOP or HELP replies. We use this information only to send the transactional messages you requested, to honor opt-outs and to operate and secure the program. Telnyx delivers the messages.

Mobile phone numbers and text messaging consent are not shared with or sold to third parties or affiliates for marketing or promotional purposes. They are disclosed only to the service providers that deliver the messages and to the business you ordered from or booked with, as described in this policy.

Reply STOP to any message to opt out, or HELP for help. See SMS messaging for program details.

6. Google and Microsoft calendar connections

A business can connect its Google Calendar or Microsoft Outlook calendar so that appointments booked through LeonVox are added to the calendar it selects. When an authorized person at the business connects a calendar, we receive an access grant for the scopes shown on the provider’s consent screen, the list of calendars the business can choose from, and the business’s free and busy times for the selected calendar.

We use this information only to show available appointment times, to create, update or cancel the appointments booked through LeonVox in the selected calendar, and to keep those appointments in sync. We do not read the content of other calendar events beyond their busy times, and we do not use calendar data for advertising, to build user profiles, or to train AI models. Access tokens are stored encrypted and are used only for these purposes.

LeonVox’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell Google user data or transfer it to third parties except as needed to provide the calendar feature, to comply with law, or as part of a merger or acquisition with notice.

The business can disconnect the calendar at any time in LeonVox or revoke access in its Google Account or Microsoft account settings. Disconnecting stops further access; appointments already written to the calendar stay there. To request deletion of stored information, follow our data deletion instructions.

7. The browser voice demo and cookies

The optional demo starts after you choose to begin and allow microphone access. It uses fictional business examples and does not place real bookings or orders. LiveKit carries audio; AssemblyAI processes speech recognition, OpenAI generates responses and Gradium produces speech. Our demo application does not save conversation audio or transcripts, and LiveKit session recording is disabled for the demo.

Vercel hosts the website and Cloudflare provides security and demo session controls. The demo uses a secure visitor cookie lasting up to 48 hours and limited usage and security records to enforce call limits. See the demo data notice for details, including provider processing and retention.

We do not add advertising pixels or cross-site marketing trackers to this website. Essential hosting, security and session functions still process technical information. You can use your browser’s cookie and microphone settings to control access; restricting them may prevent the demo from working.

8. Service providers and other disclosures

We share information needed to provide a service with the providers that support it. These include website hosting and security providers, communications and AI providers, and the calendar or other business systems selected for an integration. The providers involved depend on the channel and configuration; not every provider receives every category of information.

Our website and demo providers are identified above. Business inquiries are handled through our business email service. Where a demo-request or inquiry form is available, Cloudflare provides bot protection and Resend delivers the information submitted to our business mailbox. Connected WhatsApp communications also involve Meta and WhatsApp.

When LeonVox processes customer information on behalf of a business, we make the relevant information available to that business and its authorized systems. We may also disclose information where required by law, to respond to valid legal requests, or where necessary to address fraud, security incidents or legal claims.

Our service providers may process information in the United States and other countries where they operate. Their locations and data protection requirements may differ from yours. Any safeguards required for a particular business service form part of that service’s arrangements.

9. Retention and security

Retention depends on the type of information, the reason it was collected, the relevant service arrangements and applicable obligations. Business correspondence is retained while we handle the discussion and any resulting relationship. Business-service records depend on the configured workflows and the business’s instructions, including any need to maintain transaction or service records.

The public demo has its own limited security-record retention described in the demo data notice. Providers may maintain separate service logs, email copies or backups under their retention practices. We do not represent that deleting one record immediately removes every independent provider copy.

We use access restrictions and protected server-side handling of integration credentials to reduce unauthorized access. No internet service or storage system is completely secure. Additional arrangements for a business service, including any call recording, notices and retention, must be determined for that service; the demo’s recording policy does not apply to every business interaction.

When handling a deletion request, we identify the records within our control and any information that must be retained for an applicable obligation, security purpose or legal claim. Where another business controls the records, we coordinate with it as described below.

10. Your rights and choices

Depending on your location and the circumstances, you may have rights to access, correct, delete or obtain a copy of personal information, restrict or object to its use, or withdraw consent. Where applicable, you may also raise a concern with your local data protection authority. Withdrawing consent does not affect processing already carried out on that basis.

Send requests to privacy@leonvox.com. We may need to verify your identity or authority using information relevant to the request. Please do not send passwords or unnecessary identity documents. We handle requests within the time limits required by applicable law and explain any relevant limitations.

If your request concerns a business you called or messaged, identify that business and contact it directly where possible. It controls its customer records. You may also contact us so we can help identify the appropriate business and coordinate the request. Removing a LeonVox integration does not delete your Meta account, your own WhatsApp chat history or records held independently by that business.

For a step-by-step request path, see Data deletion.

11. Children’s information

Our website, business accounts and public demo are intended for adults and business users, not children under 13. If you believe a child has provided personal information to us through these services, contact us so we can review the situation and take appropriate action.

12. Changes to this policy

We may update this policy as our services or data practices change. The updated version will be published on this page with its revision date. Where required, we will provide additional notice of material changes.