LEGAL

Privacy Policy

How HuskyVoiceAI collects, uses, protects, shares, retains, and manages information across our voice AI platform, website, integrations, and related services.

Updated: 10 October 2026

HuskyVoiceAI is provided by APPEQ INC and/or APPEQPLUS INDIA PRIVATE LIMITED, depending on the applicable service relationship. This Privacy Policy describes how the applicable HuskyVoiceAI entity ("Company," "we," "us," or "our") collects, uses, discloses, protects, and retains personal data when you visit our website, use our services, or otherwise interact with us.

This Privacy Policy applies to our website and related pages (the "Site"), and our voice AI, messaging, workflow automation, integrations, and related services (the "Services"). The contracting entity, where applicable, is identified in the relevant Agreement, Order Form, or other service document.

Scope

This Privacy Policy applies to personal data we collect:

  • Through the Site, including pages, forms, and marketing campaigns
  • Through the Services, including voice and messaging workflows, calls, recordings, transcripts, message content, messaging integrations, workflow automation, and analytics
  • Through support channels such as email, chat, and phone
  • Through offline interactions where relevant, such as sales calls

This policy does not govern the independent processing practices of third-party websites or services that may be linked from our Site.

Where a Customer enables an integration with a third-party service, including Meta or the WhatsApp Business Platform, this Privacy Policy applies to personal data processed by HuskyVoiceAI through that integration. The third-party provider's own processing of personal data is separately governed by its applicable terms and privacy policies.

Key Definitions

Personal Data: any information relating to an identified or identifiable individual.

Customer: the organization or person subscribing to or otherwise contracting for the Services.

End Users / Callers / Message Recipients: individuals who call, are called, send messages to, or receive messages from a Customer through configured voice or messaging workflows.

Customer Data: data submitted to, received by, or generated through the Services, including call and message metadata, transcripts, recordings, message content, workflow data, and integration data.

What We Collect

A) Information you provide to us

  • Account and profile details: name, email, password, company, role, and phone number if provided
  • Billing and contact details: billing contact name, email, and company details
  • Support communications: emails, chats, tickets, and information shared during support interactions
  • Forms and enquiries: contact forms, demo requests, newsletter signups, and related communications

B) Information processed through the Services

Depending on Customer configuration, the Services may process:

  • Phone numbers of callers and callees
  • Call metadata such as time, duration, call status, and routing
  • Voice recordings, where enabled by Customer
  • Transcripts, where enabled by Customer
  • Workflow data such as agent prompts, routing rules, outcomes, and tags
  • Integration data where connected to Customer systems
  • WhatsApp Business Account identifiers and associated business account information
  • WhatsApp business phone numbers and Phone Number IDs
  • Business profile and display-name information
  • Message templates and template configuration
  • Recipient and sender phone numbers
  • WhatsApp message content and media, where applicable
  • Message metadata, including timestamps and sent, delivered, read, or failed status
  • Incoming messages and customer responses
  • Meta authorization information and integration credentials or tokens required to operate an authorized connection
  • Webhook events and other integration data received from messaging platforms

When a Customer connects a Meta or WhatsApp Business account, we process only the account and messaging information reasonably necessary to provide the Customer-requested integration and related Services.

Customer control. For most customer-configured workflows, the Customer determines the purposes of the communication, what the AI agent asks, what information is collected, whether recording or transcription is enabled, and how the resulting information is used.

C) Information collected automatically on the Site

  • Device and browser data such as IP address, browser type, operating system, and device identifiers
  • Usage data such as pages visited, time spent, clicks, scroll depth, and referral source
  • Approximate location inferred from IP address, such as city or region level, not precise location

Browser Extensions

HuskyVoice Click-to-Call is a browser extension, published by HuskyVoice (APPEQ INC and/or APPEQPLUS INDIA PRIVATE LIMITED), that lets a signed-in HuskyVoice customer place calls from phone numbers shown on web pages and, on Salesforce, log those calls back to the record's Activity history. This section explains what the extension specifically accesses.

Local page scanning

The extension scans the text of pages you visit for phone-number patterns entirely inside your browser, to show a call icon next to any it finds. No page content, URL, or detected number is sent anywhere unless you click to call.

What is sent when you place a call

Clicking a call icon sends to our backend (api.huskyvoice.ai) only the phone number called, the calling mode chosen ("Myself" or a specific AI agent), and, on Salesforce pages, the Contact or Lead record ID so the call can be logged back to that record. This is handled under the same call-metadata and call-recording terms described elsewhere in this policy, including the retention periods above.

Call audio

In "Myself" mode, your microphone and the other party's audio are carried over a live connection for the duration of the call so each side can hear the other, subject to the same recording and transcription terms as any other HuskyVoice call.

Local settings storage

Your backend URL, API key, and per-site icon-display preferences are stored only in your browser profile and are never transmitted except as authentication to api.huskyvoice.ai. These are deleted immediately when the extension is removed or its storage is cleared; they are not part of the account data covered by the retention periods above.

Salesforce sync

For customers using the Salesforce integration, a completed call is written back as a Task on the Contact or Lead record you called from. No other Salesforce data is read or transmitted by the extension.

Microphone permission

Microphone access is requested solely to carry your voice during a "Myself"-mode call. It is not used to listen to or record anything outside a call you started. You can revoke it at any time from your browser's extension permission settings.

Your choices

The extension's Options page lets you restrict which websites it scans for phone numbers. Removing the extension deletes all locally stored settings immediately.

Questions about this section can be sent to privacy@huskyvoice.ai, the same address used for the rest of this policy.

WhatsApp Business Platform & Meta Integrations

Customers may connect their Meta and WhatsApp Business accounts to HuskyVoiceAI to enable WhatsApp messaging, notifications, customer communication, and related workflows.

When a Customer enables this integration, HuskyVoiceAI may access and process information associated with the Customer's authorized WhatsApp Business assets, including WhatsApp Business Account identifiers, business phone-number identifiers, business profile information, message templates, recipient and sender phone numbers, message content and media where applicable, and message delivery or status information.

We use this information to provide Customer-requested functionality, including connecting and managing authorized WhatsApp Business assets, sending and receiving messages, creating or managing message templates, processing delivery and read statuses, operating workflows, troubleshooting integration issues, preventing abuse, and maintaining security.

HuskyVoiceAI may transmit information to and receive information from Meta, WhatsApp, and their infrastructure as necessary to provide the WhatsApp Business Platform integration.

For Customer messaging workflows, the Customer generally determines the recipients, purpose of communication, message content, and applicable consent or other lawful basis. HuskyVoiceAI generally acts as a service provider or data processor on the Customer's behalf and processes such data according to the Customer's instructions.

Customers may disconnect their Meta or WhatsApp Business integration. Following disconnection or termination, we stop using the authorization to perform new Customer-requested WhatsApp operations and handle retained integration data in accordance with this Privacy Policy, our Data Retention Policy, contractual obligations, and applicable law.

Cookies, Pixels & Tracking Technologies

We use cookies and similar technologies for

  • Site functionality and preferences
  • Analytics and performance measurement
  • Marketing and advertising attribution
  • Retargeting where permitted by your settings and applicable law

Tools we use

  • Google Analytics for site analytics
  • Meta Pixel for advertising measurement and retargeting where enabled
  • LinkedIn Insight Tag for advertising measurement and retargeting where enabled
  • Zoho for lead capture, CRM workflows, enquiries, and sales follow-up

Your choices

We provide a cookie banner or consent manager that allows you to manage non-essential cookies where required. You can also control cookies through your browser settings, though some Site features may not work properly.

For more information, see our Cookie Policy.

How We Use Personal Data

A) Service delivery

  • Provisioning accounts and enabling platform functionality
  • Running voice workflows, including inbound and outbound calling, routing, transcription, and configured workflow actions
  • Connecting and managing Customer-authorized third-party integrations
  • Running messaging workflows, including sending and receiving transactional and Customer-authorized communications
  • Managing messaging templates, phone-number assets, and business account configuration
  • Processing delivery, read, failure, and other messaging-status events
  • Providing Customer support and troubleshooting

B) Communications

  • Responding to enquiries
  • Sending administrative messages relating to accounts, security, or product changes
  • Providing support communications

C) Marketing, where permitted

  • Sending newsletters or product announcements, subject to available opt-out rights
  • Measuring advertising campaign performance and improving targeting where permitted

D) Security & compliance

  • Preventing fraud, abuse, and unauthorized access
  • Monitoring and investigating incidents
  • Enforcing terms, agreements, and acceptable use policies

E) Legal obligations

  • Complying with lawful requests and applicable regulations
  • Resolving disputes and enforcing agreements

Call Recording & Support Call Recording

A) Calls handled through Customer workflows

Customers may enable call recording and transcription. Customers are responsible for providing legally required notices and obtaining consent or another lawful basis based on their jurisdiction and use case.

B) Our support calls

We may record onboarding, troubleshooting, or other support calls for quality, training, support, and documentation purposes. Where required, we provide notice at the start of the call or through the scheduling or meeting context.

AI Processing, Regional Provisioning & Cross-Border Processing

Unless otherwise agreed, Processor-managed persistent structured Customer Data is stored in MongoDB Atlas in Mumbai, India, and recordings and files are stored in AWS in Mumbai, India.

Default

India

Mumbai

Optional AWS region

United States

Where supported and agreed

Optional AWS region

European Union

Where supported and agreed

Where supported for the selected Services and agreed in the applicable Order Form, certain Customer deployments may use supported AWS regions in the United States or European Union. The applicable Agreement, Order Form, or processing schedule identifies any deployment-specific storage or residency commitments.

A selected AWS storage region does not necessarily mean that all processing, all structured data, or every subprocessor operates exclusively in that region unless expressly stated in the applicable service documentation.

Certain features, including real-time AI inference, transcription, speech synthesis, translation, communications, messaging, monitoring, support, or failover services, may involve processing outside the Customer's selected storage region depending on provider configuration and the Services used.

AI inference is not model-training permission

We do not use identifiable Customer Personal Data or identifiable Customer content to train or fine-tune shared or general-purpose AI models, or for general product improvement, unless the Customer separately and explicitly opts in in writing for the specified purpose and scope. Use of an AI model to perform inference and generate a response as part of the Services does not itself constitute permission to train that model.

Provider retention varies by service, contract, and configuration. Zero-retention treatment applies only where it has been expressly confirmed for the selected provider, service, and configuration.

We use contractual, organizational, and technical safeguards as appropriate to protect Customer Data in connection with approved providers and international processing. Our Subprocessor List provides additional information about relevant service providers and processing locations.

How We Share Personal Data

A) Service providers and subprocessors

We use service providers to help operate the Site and Services, including:

  • Cloud hosting and storage providers
  • Telecom routing and communications providers
  • AI inference, transcription, speech, translation, and related providers
  • Monitoring and security providers where applicable
  • Messaging and communications platforms, including Meta and WhatsApp, where Customers enable those integrations

We share Customer Data with providers only as necessary to provide the relevant Services, perform Customer-requested actions, maintain security, or comply with applicable law.

For transparency, we maintain a Subprocessor List.

B) Business transfers

If we undergo a merger, acquisition, financing, restructuring, or sale of all or part of our business, personal data may be transferred as part of that transaction, subject to applicable safeguards.

C) Legal requirements

We may disclose data where required to comply with applicable law, court orders, lawful government requests, or to protect rights, security, and safety.

D) With consent or direction

We may share data where you or the relevant Customer explicitly authorizes or directs the sharing.

We do not sell personal data to advertisers or data brokers.

Data Retention

We retain personal data for the period reasonably necessary to provide the Services, maintain security, prevent abuse, comply with legal obligations, resolve disputes, and enforce agreements. Specific Customer Data retention is also governed by the applicable Order Form, Data Retention Policy, and any Customer configuration supported by the Services.

Default recordings & transcripts

Up to 12 months

Rolling retention during an active subscription, unless a shorter period applies

Primary Customer Data

Within 60 days

Deleted after termination, subject to lawful exceptions

Backups

Within 90 days

Purged after termination, subject to lawful exceptions

A purchased plan, Order Form, or Customer configuration may specify a shorter retention period. Expired data may no longer be recoverable through an export request.

When a Customer disconnects an integration, we stop using the associated authorization for new integration activity. Integration configuration, identifiers, messages, logs, and related Customer Data are retained or deleted according to applicable retention periods, unless longer retention is required by law, security obligations, dispute resolution, or contractual requirements.

Customer-controlled copies stored in connected CRM or other Customer systems remain the Customer's responsibility. Carrier or subprocessor records that are subject to separate legal or operational retention requirements may follow the applicable provider's obligations.

For more detail, see our Data Retention Policy.

Your Rights & Choices

Depending on your jurisdiction and applicable law, you may have rights to:

  • Access personal data about you
  • Correct inaccurate or incomplete personal data
  • Request deletion, subject to applicable legal and operational requirements
  • Request restriction or objection to certain processing where applicable
  • Request portability or a copy of data where applicable
  • Withdraw consent where processing is based on consent
  • Opt out of marketing communications
  • Manage non-essential cookies through our consent tools or browser settings

If you are an End User, Caller, or Message Recipient interacting with a Customer's workflow, the relevant Customer typically determines the purpose and lawful basis for that processing. Your request may therefore need to be directed to that Customer. HuskyVoiceAI will reasonably assist the Customer with applicable rights requests where we act as its Processor.

India: DPDP Act & Data Principal Rights

India's Digital Personal Data Protection Act, 2023 and Digital Personal Data Protection Rules, 2025 are being brought into force in stages. The rights and obligations described below apply to the extent the relevant statutory provisions are applicable and in force.

1. Access to information

Where applicable, a Data Principal may request information about personal data being processed and the processing activities covered by the applicable law.

2. Correction, completion and updating

Where applicable, you may request correction of inaccurate personal data and completion or updating of data in accordance with the applicable legal requirements.

3. Erasure

Where applicable, you may request erasure of personal data, subject to lawful retention, contractual requirements, security needs, dispute resolution, legal holds, and other exceptions permitted by applicable law.

4. Grievance redressal

Where the applicable DPDP provisions are in force, you may use the grievance process available from the relevant Data Fiduciary. You may contact HuskyVoiceAI at privacy@huskyvoice.ai for privacy questions or assistance.

The Data Protection Board of India has been established by the Central Government. Rights to approach the Board and the applicable process depend on the relevant provisions of the DPDP framework being in force and on satisfaction of any applicable grievance requirements.

5. Withdrawal of consent

Where processing is based on consent and the applicable provisions are in force, consent may be withdrawn in accordance with applicable law. Withdrawal does not retroactively affect processing that was lawful before withdrawal.

6. Nomination

Where applicable under the DPDP framework, a Data Principal may nominate another individual to exercise specified rights in the event of death or incapacity, subject to the applicable legal requirements.

Customer as Data Fiduciary / Controller

If you are an End User, Caller, or Message Recipient who interacted with one of our Customers through a HuskyVoiceAI voice or messaging workflow, the Customer is typically the Data Fiduciary or Controller. The Customer determines the purpose of the communication, recipients, information collected or sent, and how that information is used.

HuskyVoiceAI typically acts as the Data Processor for Customer-controlled workflow data and processes that data according to the Customer's instructions.

Requests relating to Customer-controlled workflow data should ordinarily be directed to the relevant Customer. If you need assistance identifying or contacting the relevant Customer, you may contact us at privacy@huskyvoice.ai.

How to exercise privacy rights

Send a clear request to privacy@huskyvoice.ai with sufficient information for us to understand the request and, where appropriate, verify the requester or identify the relevant Customer.

We will respond within the timeframe required by applicable law and, where no specific legal timeframe applies, within a reasonable period.

Security

We maintain reasonable technical and organizational safeguards proportionate to the nature of the processing and associated risks, including:

Encryption at rest and in transit
Role-based access controls
Administrative multi-factor authentication
Security logging and monitoring
Vulnerability management
Backup and recovery arrangements

We conduct security monitoring, vulnerability management, and security assessments appropriate to the Services. No certification is represented by this Privacy Policy unless we expressly identify it as held and current.

No system can guarantee absolute security. Please report suspected security incidents or vulnerabilities to security@huskyvoice.ai.

Contact Us

For privacy questions, privacy-rights requests, or questions about our data-processing practices:

Privacy & processing

privacy@huskyvoice.ai

Legal notices

legal@huskyvoice.ai

Security incidents

security@huskyvoice.ai

The applicable HuskyVoiceAI contracting entity and its notice address are stated in the relevant Agreement where a contractual relationship applies.

We respond to privacy requests within the timeframe required by applicable law and otherwise within a reasonable period.

Questions about this policy?

For privacy or data-processing questions, contact our privacy team at privacy@huskyvoice.ai.

Contact Privacy