Legal

Privacy Policy

This policy explains what personal information VoiceSync Connect collects, why we collect it, who we share it with, and how long we keep it. It covers both our customers, meaning the businesses that use the platform, and consumers whose information is processed because a customer placed or received a call.

Last updated August 5, 2026.

1. Our role: controller and processor

Jitech LLC (a Virginia limited liability company) operates VoiceSync Connect. Our responsibilities differ depending on whose information is involved.

For customer account data — the name, email, and password of the people who log in, and the billing and configuration of each organization — we are the controller. We decide what to collect and why, and this policy governs it.
For consumer data inside a customer's account — uploaded calling lists, call recordings, transcripts, and lead records — we are a processor acting on the customer's instructions. The customer is the controller. They decide who is called and what happens to the resulting records, and their own privacy policy governs that relationship.

If you received a call from a business using VoiceSync Connect and want your information deleted, see section 11. We will route your request, but the business that called you controls the decision.

2. Information we collect

Information you give us

Account information: name, email address, and a password, which we store only as a hash and never in readable form.
Organization information: business name, team members and their roles, and configuration such as your calling agent settings and campaign schedules.
Integration credentials: the API key for your voice provider, encrypted at rest with AES-256-GCM under a key we hold separately from the database.
Calling list uploads: the CSV files you import, which typically contain consumer names, phone numbers, and property addresses, plus whatever additional columns your file carries.

Information generated by using the service

Call records: phone numbers involved, direction, timestamps, duration, outcome classification, and disconnection reason.
Recordings, transcripts, and summaries of calls handled by the AI agent.
Lead records created from calls, including notes and status history your team adds.
Audit and security logs: sign-in events, administrative actions, and webhook deliveries including rejected ones.

We do not buy personal information from data brokers, and we do not collect consumer information on our own initiative. Everything about a consumer reaches us because a customer uploaded it or because a call took place.

3. Call recordings and transcripts

Calls placed and received through the platform are recorded and transcribed. Recordings and transcripts are among the most sensitive information we hold: they capture a person's voice and whatever they chose to say.

Recording notice is the caller's responsibility

The business operating the calling agent is responsible for announcing that the call is recorded and obtaining consent before recording begins, in every state, on every call. Several states require consent from all parties. We provide the technical capability; we do not control the script. See the Calling Compliance page.

Recordings are accessible only to authorized members of the organization that owns the call, and to our personnel where strictly necessary to operate or support the service. Each record carries the owning organization's identifier and every database query is scoped to it.

4. How we use information

To provide the service: placing and receiving calls, classifying them, and building the lead pipeline.
To authenticate users, enforce roles, and keep accounts secure.
To generate the analytics and reporting shown in your dashboard.
To maintain the records that telemarketing rules require to be retained.
To provide support, investigate problems, and prevent abuse or fraud.
To meet legal obligations and respond to lawful requests.

We do not sell personal information, and we do not share it for cross-context behavioral advertising. We do not use customer call recordings, transcripts, or uploaded lists to train our own or any third party's general-purpose AI models.

6. Service providers and subprocessors

We use a small number of vendors to run the service. Each receives only the data needed for its function.

Retell AI — the voice agent platform that places and answers calls, and generates recordings, transcripts, and post-call analysis.
Amazon Web Services — application hosting and the managed PostgreSQL database where all application data is stored, in the United States.
Your telephony provider — the carrier supplying the phone numbers used for your calls, which processes call metadata as part of connecting calls.

Keep this list current. Adding a vendor that touches personal information without updating this section is itself a compliance gap, and enterprise customers will ask for this list during procurement. If you add analytics, email delivery, error monitoring, or payment processing, add it here.

7. Cookies and tracking

VoiceSync Connect uses strictly necessary cookies only. We run no advertising, analytics, or third-party tracking on this site, and we do not embed third-party trackers or advertising pixels.

Session cookies that keep you signed in. There are two, one for the customer application and a separate one for the platform administration portal. In production both are marked Secure and HttpOnly.
A theme preference stored in your browser's local storage so the site renders in light or dark mode without a flash. It never leaves your device.

Because we set no non-essential cookies, we do not display a cookie consent banner. If we later add analytics or any other non-essential cookie, we will add a consent mechanism before doing so and update this policy.

8. Retention and deletion

Account information is retained while your account is active and for a reasonable period afterward to handle disputes and enforce agreements.
Call records, recordings, transcripts, and calling lists are retained for at least five years. This is not a preference: FTC rules require telemarketing records to be retained for five years. Opt-out and do-not-call requests are not captured by the platform, so keeping and honoring those records stays with you.
Audit and security logs are retained for as long as needed to investigate incidents and meet our obligations.

A customer can delete lead and call records from their account at any time, subject to the retention obligations above. When an organization's account closes, its data is deleted or de-identified after the applicable retention period expires. There is no self-serve export at this time — request a copy of your records from support@voicesyncconnect.com before you close your account.

9. Security

All traffic is served over HTTPS with HSTS, and a content security policy is enforced.
Passwords are stored hashed. Integration API keys are encrypted at rest with AES-256-GCM.
Every record is scoped to its owning organization at the database access layer, so one customer's data cannot be reached from another customer's session.
Administrative access to the platform portal requires a separate login and time-based one-time-password multi-factor authentication.
Sessions are revalidated against the database, so deactivating a user or changing a role takes effect promptly.
Inbound webhooks are signature-verified, rate limited, size capped, and audited.

No system is perfectly secure. If you believe you have found a vulnerability, report it to privacy@voicesyncconnect.com and we will respond.

10. Your privacy rights

Depending on where you live, you may have the right to know what personal information we hold about you, to obtain a copy, to correct it, to delete it, to limit the use of sensitive information, and not to be discriminated against for exercising these rights. Residents of California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana, and a growing number of other states have some or all of these rights under state law.

To exercise a right, contact privacy@voicesyncconnect.com. We will verify your identity before acting, and we will respond within the period the applicable law requires, generally 45 days. You may use an authorized agent. If we deny a request you may appeal by replying to our response, and we will inform you of the outcome.

We do not sell personal information or share it for cross-context behavioral advertising, so there is nothing to opt out of on that front.

11. If you received a call

If a business called you using VoiceSync Connect and you want the calls to stop, or you want your information deleted, tell the caller directly. Saying “stop calling” or “do not call me” on the call, or to that business by any other means, obliges it to stop calling you. That business holds your information and is the only party that can remove it from its own records.

You can also contact us at privacy@voicesyncconnect.com or +1 (800) 606-5035. We do not control which numbers a customer dials, so we cannot suppress your number on their behalf. What we will do is identify the business that called you so you can contact it directly, pass your request to it, and require it to act on the request. Where a business does not, we can suspend its outbound calling.

12. Children

The service is a business tool and is not directed to children. We do not knowingly collect personal information from anyone under 16. If you believe a child's information has reached us, contact privacy@voicesyncconnect.com and we will delete it.

13. Changes to this policy

We may update this policy as the service changes. We will update the date at the top, and for material changes we will notify account administrators before the change takes effect. Continuing to use the service after that point means the updated policy applies.

14. Contact us

Jitech LLC
1530 Wilson Blvd # 650, Arlington, VA 22209
Privacy: privacy@voicesyncconnect.com
Legal: legal@voicesyncconnect.com
Phone: +1 (800) 606-5035