Privacy Policy

We collect three categories of information:

• Account & business information — name, email, phone, clinic name, business type, office hours, booking URL, billing details.
• Patient & caller information — phone numbers, call metadata (time, duration, status), SMS content (inbound and outbound), AI-generated transcripts, and any data you upload.
• Usage & technical data — log files, IP address, device/browser info, cookies, session identifiers, and product-analytics events.

• Provide, operate, secure, and improve the Service.
• Route incoming calls, generate AI responses, deliver SMS, and update your dashboard.
• Bill you, prevent fraud, enforce our terms, and comply with law.
• Send transactional emails (account, billing, security) and — only with consent — product updates.
• Aggregate and de-identify data to improve performance and develop new features.

We share information with vetted vendors who help us run the Service:

• Twilio — telephony and SMS delivery.
• OpenAI — AI text generation for SMS replies.
• Stripe — payment processing and billing.
• Supabase & Cloudflare — infrastructure, database, and edge hosting.
• Email and analytics providers used to operate the product.

We do not sell personal information. We do not use patient SMS content to train third-party AI models.

We may disclose information when required by law, subpoena, or court order, or to protect the rights, safety, or property of NexVoice, our customers, or the public.

We use first-party cookies and local storage to keep you signed in, remember preferences, and measure product usage. You can disable cookies in your browser; some features will not work.

We retain account data for as long as your account is active and for a reasonable period afterward to satisfy legal, accounting, or dispute-resolution requirements. Call and SMS records are retained per your plan's retention window. You may request earlier deletion as described below.

We use industry-standard safeguards including TLS in transit, encryption at rest, role-based access controls, and audit logging. No system is perfectly secure; you use the Service at your own risk and are responsible for safeguarding your credentials.

Depending on your jurisdiction, you may have rights to access, correct, port, restrict, or delete personal data we hold about you, and to object to certain processing. Submit requests to aastheticcx@gmail.com. We will verify your identity before acting.

The Service is not intended for individuals under 16. We do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.

NexVoice is operated from the United States. By using the Service from outside the U.S. you consent to the transfer of your data to the U.S., which may have different data-protection laws than your country.

We may update this Privacy Policy. Material changes will be announced in-app or by email. The "Effective" date at the top reflects the latest revision.

Privacy questions: aastheticcx@gmail.com.