Privacy Policy

Summary

• Who we are: JB Learning Systems Pty Ltd (ABN 96 696 942 935, ACN 696 942 935), an Australian company and the owner and operator of Voxora — AI voice agents that answer inbound business calls and run outbound calling campaigns.
• Who we serve: Voxora is a business-to-business service. Our customers are the businesses that use Voxora to handle their calls. For personal data about a business's own callers, that business is the controller and Voxora acts as its processor, handling the data on the business's instructions.
• What we handle: customer account and billing data, call audio and transcripts, call metadata and outcomes, knowledge-base and agent configuration you provide, regulatory documents you upload, and — if you connect one — calendar data.
• AI & voice: speech is processed by us and by third-party AI and speech providers to run the agent. We do not sell your data and do not use customer call content to train foundation models — see the AI section below.
• Your rights: access, correct, delete, export, object and complain, under the Australian Privacy Act and, where they apply, the GDPR and US state laws.

1. About this policy and who it covers

This policy explains how JB Learning Systems Pty Ltd ("Voxora", "we", "us", "our") collects, uses, discloses and protects information in connection with this website (voxora.au and app.voxora.au), the interactive demo, and the Voxora platform (together, the "Service"). It applies worldwide; where local law gives additional rights, the relevant sections below apply to you in addition to the general terms.

Because Voxora is a B2B service, two roles matter. For information about our business customers and this website, Voxora is the controller. For personal information about a customer's own callers and contacts that flows through the platform, the customer is the controller and Voxora is the processor acting under the customer agreement and a data-processing addendum available on request.

2. Information we collect

2.1 Information our customers provide

• Account & profile: name, work email, password, business name and details, and team members you invite.
• Configuration content: agent instructions and voice, knowledge-base documents, campaign contact lists, and business hours you set.
• Regulatory documents: where a phone number requires it, the identity, address and business documents you upload for carrier compliance (KYC).
• Payment details: our third-party payment processor collects your billing details; we receive limited transaction data (amount, date, card last four) but never store full card numbers.

2.2 Call, voice and conversation data

To run a call the platform processes live audio from the phone line, transcripts of the caller and the agent, call metadata (numbers, times, duration, outcome, disposition) and a post-call summary. A caller may share personal details during a call (for example a name, email, phone number or appointment details), which the platform records to fulfil the request. This data is handled on the customer's behalf.

2.3 Connected services (calendar)

If a customer connects a Google account, see the "Connecting your Google Calendar" section below for exactly what we access and why.

2.4 Information collected automatically

On our website and console we collect device and technical data (browser, operating system, IP address), usage data (features and pages used, session activity), and — with consent where required — analytics. Sensitive fields are excluded from analytics.

3. How we use information

4. AI features, voice and model training

To deliver the Service, speech and text are processed by Voxora and by trusted third-party AI and speech providers (speech recognition, large-language-model and text-to-speech services). We contractually require providers to process data only on our instructions and to protect it. Our approach is privacy-protective:

• We do not sell your data or your callers' data.
• We do not use customer call content to train our own or our providers' foundation models, and we require AI subprocessors to commit not to train their models on your inputs except as needed to provide the service to us.
• The platform requires an opening that introduces a Voxora assistant for the business, in the configured conversation language. This fixed sentence does not explicitly say "AI"; customers must review any additional notices required for their call purpose and market.

5. Connecting your Google Calendar

If you choose to connect a Google account — for example, so the Voxora voice agent can manage appointments during a call — Voxora requests permission to view your calendar availability (free/busy) and to create, update and cancel events on the calendar you connect. We access this data solely to provide the scheduling features you have turned on: checking open times and booking, rescheduling or cancelling appointments on your behalf.

The credential that authorises this access is encrypted at rest and is never shared with third parties or used for advertising. We do not sell Google Calendar data, and no person reads it except where you explicitly ask us to in order to resolve a support request. You can disconnect your calendar at any time from the Integrations page in the Voxora console, which immediately revokes our access.

Voxora's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

6. Call recording and caller consent

Some jurisdictions require that callers are told a call is recorded or that their consent is obtained. As the business operating the calls, our customer is responsible for configuring appropriate disclosures and for complying with recording-consent, do-not-call and calling-hours laws that apply to their calls. Voxora provides the required assistant introduction and the tools to add further notices.

7. How and with whom we share information

We share information only as described here, and we do not sell it:

• Service providers / subprocessors — vendors who host, power, secure and support the Service, by category: cloud hosting and storage; AI, speech-recognition and text-to-speech providers; a telephony carrier; a payment processor; and, where you connect it, Google Calendar. A current list of subprocessors is available on request.
• Your instructions — where you direct the agent to send a booking, confirmation or follow-up on your behalf.
• Legal & safety — to comply with law or lawful requests, or to protect rights, safety and property.
• Business transfers — in a merger, acquisition or asset sale, subject to this policy.

8. International data transfers

Voxora is based in Australia and uses providers located in other countries, including the United States. Your information may therefore be processed outside your country of residence. For Australian customers we take reasonable steps (APP 8) to ensure overseas recipients handle information consistently with the Australian Privacy Principles; for EU/EEA and UK data we rely on appropriate safeguards such as the Standard Contractual Clauses (with the UK Addendum/IDTA) or an adequacy decision.

9. Data retention

10. How we keep information secure

We use technical and organisational measures including encryption in transit and at rest, least-privilege access controls, tenant isolation, monitoring, and staff confidentiality. Secrets such as connected-service tokens are encrypted with managed keys. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a data breach likely to cause serious harm occurs, we will notify affected parties and the Office of the Australian Information Commissioner (OAIC) as required by the Notifiable Data Breaches scheme, and other regulators where applicable.

11. Your privacy rights

Subject to local law, you can access, correct, delete, export, and object to or restrict certain processing of your personal information, and opt out of marketing. Much of this is available in the console, or by contacting us. We respond within the time required by applicable law and will not discriminate against you for exercising your rights. Where Voxora processes personal data on a customer's behalf, we will refer a request to that customer and assist them in responding.

• Australia: under APP 12 and APP 13 you may request access to and correction of your personal information; complaints may go to the OAIC (oaic.gov.au).
• EU/EEA & UK (GDPR): you have the rights to access, rectification, erasure, restriction, portability and objection, and to lodge a complaint with your local supervisory authority (in the UK, the ICO).
• United States: residents of states with comprehensive privacy laws may have rights to know, delete, correct, and opt out of "sale"/"sharing" and targeted advertising. We do not sell personal information.

12. Cookies

Essential cookies keep the site and console working. Analytics cookies load only after you accept them, and you can change your choice at any time from the cookie settings link. We honour Global Privacy Control (GPC) signals where required.

13. Children's privacy

The Service is a business tool and is not directed to children. We do not knowingly collect personal information from children through the Service. If you believe a child's information has reached us in error, contact us and we will delete it.

14. Changes to this policy

We may update this policy from time to time. We will revise the "Last updated" date and, for material changes, provide additional notice. Continued use after changes take effect means you accept the updated policy.

15. How to contact us

JB Learning Systems Pty Ltd — Privacy
ABN 96 696 942 935  |  ACN 696 942 935
Unit 909, 21 Dunkerley Pl, Waterloo NSW 2017, Australia
Email: hello@voxora.au

Australian users may also contact the OAIC (oaic.gov.au). EU/EEA and UK users may contact their local supervisory authority (UK: ICO, ico.org.uk).