Security and data handling
This page explains how recordings, transcripts and scorecards move through Vozah, who can see them and how to ask for changes. It describes how the product works today. The privacy policy remains the governing policy document.
What is sent where
Live voice practice
Processed: Your microphone audio streams from the browser to OpenAI's realtime voice service, which plays the AI buyer.
Stored by Vozah: Vozah saves the text transcript of both sides and the scorecard. The application does not save the call audio.
Uploaded recordings
Processed: The audio file (up to 4 MiB) is sent to OpenAI for transcription, then the transcript is sent to OpenAI for scoring.
Stored by Vozah: Vozah saves the transcript and scorecard. The audio is processed for transcription and not saved as a file by the application.
Custom scenario briefs
Processed: The brief you write is sent to OpenAI to draft the AI buyer.
Stored by Vozah: The generated buyer, including instructions derived from your brief, is saved to your account.
Coaching plans and AI generators
Processed: Recent dimension scores, or the text you enter into a generator, are sent to OpenAI to write the plan or draft.
Stored by Vozah: Coaching plans are saved to your account.
Vozah also stores your name, email address, sign-in credentials, usage totals, subscription status and team membership to run your account.
Service providers
- OpenAI runs the AI buyer voice, transcription, scoring, scenario drafting, coaching plans and writing generators. OpenAI's published API data controls describe how it uses and retains API data, including that API data is not used to train its models unless the customer opts in.
- Stripe processes subscriptions and payment details. Vozah stores customer and subscription identifiers, not card numbers.
- Vercel hosts the web application.
- A transactional email provider delivers verification, password reset and account emails.
- Plausible provides website analytics when enabled.
Who can see your practice data
- You
- Your transcripts, scorecards, custom buyers and coaching plans.
- Your team
- If you join a team, teammates and managers see the roster and per-member practice totals: number of scored calls, average score and last practice date, plus the team leaderboard. They do not see your transcripts.
- Team managers
- Can invite members and remove them from the team. A removed member keeps their own account.
- Anyone with a share link
- If you enable sharing on a scorecard, anyone with the link can see its scores, feedback and summary, not the transcript. Share pages are excluded from search indexing. Revoking the link stops it working immediately.
Account controls in the product
- Email verification is required before using the app.
- Passwords must be at least 8 characters. Resetting a password signs out existing sessions.
- Sign-in sessions expire after 30 days.
- Usage limits apply to voice practice, recording uploads, custom scenarios, coaching plans and AI generators to prevent abuse.
- Payment webhooks are signature-verified before plan access changes.
Retention, export and deletion
Account and practice records stay stored until they are removed through a supported request or an operational retention process. There is no self-service account deletion in the app today. Email hello@vozah.com from your account email address to request access, correction, export or deletion, or to ask about retention.
What is not offered today
Self-serve plans do not include single sign-on (SSO), CRM integrations or custom service-level agreements. Vozah does not publish a SOC 2 report, HIPAA attestation, data processing addendum or data residency option on this site. If your evaluation requires any of these, contact us before you buy so we can give you a direct answer.
Your part
- Only upload recordings you have permission to record and process with an AI service. Consent rules depend on participants' locations.
- Leave sensitive personal, health or payment details out of uploads, briefs and generator inputs.
- Revoke scorecard share links you no longer need.
Security questions
Send security questions or reports to hello@vozah.com. Include the page or feature involved and how to reproduce any issue. See also the service terms, recording analysis limits and plan allowances.