Privacy Policy

This Privacy Policy explains how Chivox, Inc. ("Chivox," "we") collects, uses, and shares personal data when you use the Chivox MCP developer console, websites, APIs, and support channels (the "Service"). It does not cover third-party sites you link to from the Service.

Account data: name, email, authentication identifiers, organization details, and preferences.

Usage and billing data: API call metadata, timestamps, project/key identifiers, available evaluation points, invoices, and payment references (processed by payment providers; we do not store full card numbers).

Content you submit: audio, text, or other inputs sent to evaluation endpoints, solely to provide the Service and as described below.

Technical data: IP address, device/browser type, logs, and security signals.

We use account, usage and billing, and technical data to provide and secure the Service, authenticate users, meter usage, process payments, send transactional and product communications, comply with law, and improve reliability (including aggregated analytics). Evaluation content is used solely to provide the Service.

We do not sell your personal data. No audio or other evaluation content is ever used for model training.

Where GDPR applies, we rely on contract performance (providing the Service), legitimate interests (security, fraud prevention, and service reliability), legal obligation, and consent where required (e.g., marketing emails).

We share data with infrastructure, analytics, email, identity (OAuth), and payment processors under data processing agreements. Examples include cloud hosting, PayPal/Stripe for billing, and email delivery providers.

We may disclose data if required by law, to protect rights and safety, or in connection with a merger or acquisition with appropriate safeguards.

We may process data in the United States and other countries. Where required, we use Standard Contractual Clauses or equivalent mechanisms for transfers from the EEA/UK.

We retain account and billing records while your account is active and for a reasonable period afterward for legal, tax, and dispute resolution purposes. Audio submitted for evaluation is processed, scored, and dropped. We retain the resulting JSON for 30 days (for debugging and your own dashboard) and nothing else. Customers on enterprise plans can provision a region-locked tenant (US · EU · SG).

We implement administrative, technical, and organizational measures appropriate to the risk, including TLS 1.3 in transit, hashed API keys at rest, access controls, and monitoring. No method of transmission or storage is 100% secure.

Depending on your location, you may have rights to access, correct, delete, restrict, or port your data, and to object to certain processing. GDPR and CCPA data-subject requests are handled within 10 business days; email bd@chivox.com. You may lodge a complaint with your local supervisory authority.

The Service is not directed to children under 16. We do not knowingly collect their personal data. Contact us to request deletion if you believe we have.

We may update this Policy. We will post the revised version with a new "Last updated" date and, where required, provide additional notice.

Privacy inquiries and data-rights requests: bd@chivox.com. Data protection contact: Chivox, Inc., United States.