Privacy Policy

Last updated: May 30, 2026

This Privacy Policy explains how Ahoya (“we”) collects, uses, and shares information when you use our AI voice receptionist service.

Information we collect

Account information. Your email, password (hashed), organization name, and business profile (services, hours, contact info) that you enter or that we extract from a website URL you give us.
Call data. Inbound caller phone numbers, call timestamps, audio recordings (when enabled), and transcripts.
Usage data. IP-address-derived hashes for rate limiting on the public demo, in-app analytics about feature usage.

How we use information

To operate the AI voice receptionist service on your behalf.
To bill you for usage and manage your subscription.
To improve product quality (anonymized, in aggregate).
To respond to support requests.

Sub-processors

We use the following third-party services to run the product. Each has its own privacy commitments:

Vapi — voice agent orchestration (STT, LLM, TTS).
Twilio — phone numbers and SMS delivery.
Microsoft Azure — text-to-speech.
Deepgram — speech-to-text.
Groq — large language model inference.
Supabase — authentication.
Neon — Postgres database hosting.
Vercel — application hosting.
Stripe — payments and subscription management.
Resend — transactional email.
Upstash — rate-limit counter store.

Call recording consent

Some US states (CA, CT, DE, FL, IL, MD, MA, MT, NH, PA, WA — among others) require all parties to consent to call recording. We enable a consent disclosure by default on every inbound call. You may turn this off in Settings if your jurisdiction allows one-party consent.

Data retention

We retain call recordings and transcripts for the lifetime of your account. Delete your organization from Settings → Danger Zone to remove all associated calls and recordings.

Your rights

You can access, export, correct, or delete your data at any time by using the in-app controls or emailing us at hello@ahoya.ai.

Contact

Questions about this policy: hello@ahoya.ai.