Privacy Policy
How EvaSay handles information when you build and run AI voice agents.
Last updated: October 29, 2026
EvaSay lets businesses build, host and run AI voice agents that answer and place phone calls and talk to visitors on websites and in apps. This policy explains how EvaSay handles information when you use the EvaSay dashboard, API, phone and web channels, and related account features. EvaSay is operated by Ecolor Web Limited, a company incorporated in Hong Kong ("EvaSay", "we" or "us").
Your account and workspace. When you sign up, pay, or manage a workspace, EvaSay decides why and how that information is processed. This policy describes that processing.
Your callers and visitors. When a person talks to one of your agents, you decide what the agent is for and what is collected. EvaSay processes call content on your behalf and on your instructions. You are responsible for telling callers what you collect, for having a lawful basis to collect it, and for answering their requests. The sections below describe what EvaSay processes so that you can do this.
Depending on the features you use, we process:
Phone numbers, and the fees for them and for the calls, belong to the telephone carrier account that you connect. The carrier processes call information under its own terms and privacy policy.
We use this information to provide, secure and bill for the service; run calls and deliver transcripts, recordings, analysis and webhooks; place the calls you ask for; provide support; detect and prevent abuse; and keep the service reliable and fast. We do not use call audio, recordings or transcripts to train or fine-tune AI models without the business's permission.
Calls are not recorded unless you turn recording on. When you do, you choose whether the agent announces the recording, asks the caller and keeps the recording only if the caller agrees, or says nothing. Recording and call-monitoring laws differ by place; you are responsible for choosing the setting that the law requires where you and your callers are.
By default, an agent tells callers that they are speaking with an AI before its first message. You may turn that announcement off only when your own greeting already says so. Never present an agent as a person.
Before a campaign can start, you confirm that everyone on the list agreed to be called, including by an AI voice, and we keep that confirmation with the campaign. Numbers on your do-not-call list are never dialed, and an agent adds a number to the list when the person it called asks not to be called again.
Transcripts and call records are stored in your workspace. Recordings are stored in EvaSay storage, or in your own S3-compatible storage if you set one up. If your workspace uses a self-hosted deployment arranged with us, call audio is handled on your own servers and does not pass through EvaSay, and recordings are stored only in your own storage. We still receive the call records that your configuration sends to your workspace, such as transcripts, duration, usage and outcome. Contact support@evasay.com for details.
EvaSay uses service providers for hosting and infrastructure, storage, payments, email, and speech and language processing. We share only the information needed to provide the relevant feature, and we require providers to protect it under contractual and legal safeguards. Payment card details are handled by our payment processor and are not stored by EvaSay.
When you connect an app or send a webhook to your own systems, the information you choose is sent to them. What happens there is governed by that service and by you.
We keep information for as long as needed to run your account and workspace, meet legal obligations, resolve disputes and enforce our agreements. You can delete agents, calls, recordings, knowledge-base documents and cloned voices in the dashboard or through the API, and you can ask us to delete your account or workspace. Deleted content is removed from our systems within a reasonable period, except where we must keep it for legal, security or fraud-prevention reasons, and except for backups, which expire on their regular schedule.
If a caller or visitor asks you to access, correct or delete the information about them, you can use the dashboard or API to do so. If a person contacts us about a call made through your workspace, we will refer the request to you unless the law requires us to act directly.
Depending on where you live, you may have the right to access, correct, delete or export your information, to object to or restrict some processing, and to complain to a data-protection authority. To exercise these rights for the information we hold about your account, contact us.
EvaSay and its service providers may process information in countries other than your own. Where the law requires it, we use appropriate safeguards for those transfers.
We use reasonable technical and organizational measures to protect information, including encryption in transit and access controls. No online service can guarantee absolute security; protect your credentials and API keys, and limit access to your workspace.
EvaSay is for businesses and is not directed at children. Do not use an agent to collect personal information from children where the law requires parental consent.
We may update this policy as the service changes. We will post the new version here and change the date above; for material changes we will also notify account owners.
For privacy questions or requests, contact support@evasay.com.