Gromman Voice Marketplace Privacy Policy

1. Information We Collect

We collect personal data, usage data, business data, and AI interaction data.

1.1 Personal Information

• Full name, email address, and phone number
• Business information and account credentials
• Optional mailing address

1.2 Voice & Call Data (Twilio)

• Audio recordings and call metadata
• Caller ID and routing logs
• Speech-to-text transcriptions

1.3 AI Interaction Data (ElevenLabs & LLMs)

• Voice samples, prompts, and generated responses
• Vision inputs (images, frames)

1.4 Device & Technical Data

• IP address, browser details, cookies, and session tokens
• Login timestamps and error logs

1.5 Marketplace Activity

• Developer profiles and uploaded assistants
• Sales history, revenue splits, and API logs

1.6 Payment Data

Stripe and PayPal securely process payments. We do not store full card numbers.

2. How We Use Your Information

• Provide AI voice assistant services and process calls or automations
• Authenticate users and improve AI accuracy
• Store media on Cloudflare R2 and deliver analytics
• Process payments and prevent fraud or abuse
• Comply with legal requirements

3. Legal Basis

We rely on the following legal grounds when processing personal data:

• Consent
• Contract execution
• Legitimate business interest
• Compliance with applicable laws (GDPR, CCPA, COPPA where relevant)

4. Data Storage

We store data in Cloudflare R2, Twilio, ElevenLabs, and encrypted databases located in the United States.

Retention periods vary: account data is stored until deletion, call logs up to two years, audio up to one year, and marketplace records as required for financial compliance.

5. Data Sharing

We share data only with trusted providers necessary to operate the service:

• Twilio (voice and SMS)
• ElevenLabs (AI voice models)
• Stripe and PayPal
• Cloudflare infrastructure
• Developers you collaborate with
• Law enforcement when legally required

We do not sell personal data.

6. International Users

If you are located outside the United States, your data may be transferred to the U.S. GDPR rights (access, correction, deletion) apply, and you may request data removal at any time through our support form.

7. Cookies & Tracking

We use session cookies, analytics cookies, security tokens, and marketplace preference cookies.

Disabling cookies may impact core features of the service.

8. Children's Privacy

Our services are not intended for children under 13. If we learn we have collected data from a child, we will delete it.

9. AI Disclosure

• Our assistants use machine learning models
• Voice and text inputs may be stored for service delivery
• We improve performance using anonymized aggregate data

We do not use customer data to train publicly available models.

10. Your Rights

You may request to:

• Access a copy of your data
• Delete or correct your data
• Export your data
• Opt out of marketing communications

Submit a request via our support form.

11. Security

We implement encryption in transit and at rest, access logs, multi-layer authentication, and Cloudflare protections. While no system is 100% secure, we take reasonable measures to safeguard your data.

12. Updates

We may update this policy at any time. Changes will be posted on this page with a revised “Last Updated” date.