Privacy Policy

This Privacy Policy describes how JCER LLC, a limited liability company organized under the laws of the State of Delaware, United States, doing business as Zevaux (“Zevaux,” “we,” “us,” or “our”) collects, uses, processes, stores, and discloses information in connection with:

• Our AI-powered phone receptionist services;
• Our web-based dashboard, integrations, and automation tools;
• Our website located at zevaux.com and related online properties;
• Any software, APIs, SMS features, voice processing tools, or applications we provide (collectively, the “Services”).

YOU CONSENT TO ZEVAUX’S PRIVACY PRACTICES AS DESCRIBED IN THIS POLICY BY USING THE SERVICES IN ANY MANNER. IF YOU DO NOT AGREE WITH THIS PRIVACY POLICY, DO NOT ACCESS OR USE THE SERVICES.

This Privacy Policy does not govern how Subscribers collect or use data through the Services in connection with their own business operations. Callers and end users should contact the business they interacted with directly for privacy inquiries relating to that business’s practices.

Zevaux may update this Privacy Policy from time to time. Material changes will be communicated by email to your registered address or by prominent notice within the Services. Continued use of the Services after the effective date of any change constitutes acceptance of the revised policy.

This Privacy Policy applies to:

• Subscribers — businesses that contract with Zevaux to use the Services;
• Authorized Users — individuals permitted by Subscribers to access the Services on the Subscriber’s behalf;
• Callers or End Users — individuals who interact with a Subscriber’s AI Receptionist;
• Website Visitors — individuals who visit zevaux.com or engage with our marketing materials.

This Privacy Policy does not govern how Subscribers use data they collect through the Services. Callers should contact the Subscriber they interacted with for any privacy inquiries relating to that Subscriber’s practices.

“Personal Information” means information that identifies, relates to, describes, references, or could reasonably be linked to an identifiable individual. Personal Information may include:

• Identifiers such as name, email address, phone number, IP address, or device ID;
• Call recordings and voice data;
• SMS message content;
• Email content when authorized through integrations;
• Appointment and scheduling details;
• CRM data uploaded or connected by Subscribers;
• Commercial and transaction data;
• Internet or device activity information;
• Inferences generated through AI processing.

Information that is aggregated or de-identified so that it cannot reasonably be linked to an identifiable individual is not considered Personal Information under this Policy.

Sensitive Personal Information. Zevaux does not collect Sensitive Personal Information for its own purposes and does not use or disclose Sensitive Personal Information to infer characteristics about any individual. If a Caller voluntarily discloses sensitive information (such as health information or financial details) during an interaction with an AI Receptionist, that information is processed solely to fulfill the Caller’s immediate request and is governed by the Subscriber’s privacy practices, not Zevaux’s.

4.1 Information Collected from Subscribers

When a business subscribes to Zevaux, we collect information necessary to provide and operate the Services. This includes business name, contact information, billing information (processed by our third-party payment processor — Zevaux does not store payment card details), authorized user credentials, and configuration settings.

Subscribers may connect external tools such as CRM systems, calendars, scheduling platforms, email accounts, or automation services. We access such connected data only as instructed by the Subscriber in order to provide the requested functionality.

Subscribers are solely responsible for ensuring they have the legal authority to share any Personal Information with Zevaux and that such sharing complies with applicable law.

4.2 Information Collected from Callers

When a Caller interacts with a Subscriber’s AI Receptionist, Zevaux processes information the Caller chooses to provide. This may include:

• Caller name and contact information;
• Call content and voice data;
• Appointment and scheduling details;
• SMS responses;
• Any information voluntarily disclosed during the interaction.

Calls may be recorded and transcribed for service functionality, quality assurance, system improvement, and in accordance with Subscriber configuration settings.

IMPORTANT: A CALLER’S INTERACTION WITH AN AI RECEPTIONIST MAY BE ACCESSED AND PROCESSED BY ZEVAUX AND ITS AUTHORIZED SERVICE PROVIDERS SIMULTANEOUSLY AND IN REAL TIME. BY CONTINUING TO INTERACT WITH AN AI RECEPTIONIST, THE CALLER CONSENTS TO THIS REAL-TIME PROCESSING. IF A CALLER DOES NOT CONSENT TO SUCH ACCESS, THEY SHOULD END THE INTERACTION IMMEDIATELY.

Subscribers are responsible for providing legally required notice to Callers and obtaining any necessary consent for call recording, transcription, and real-time processing under applicable federal and state law, including laws in two-party consent states.

4.3 Google API and Authorized Integration Data

If a Subscriber connects Google services or other authorized third-party integrations, Zevaux may access authorized data from those services solely to provide the requested functionality, such as sending emails, managing calendar events, or triggering automated workflows.

• Zevaux does not sell data obtained through authorized integrations.
• Zevaux does not use Google API data for advertising purposes.
• Zevaux does not use data obtained from Google Workspace APIs to train, develop, or improve generalized artificial intelligence (AI) or machine learning (ML) models.
• Zevaux’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

4.4 Automatically Collected Information

When individuals access our website or dashboard, we may automatically collect technical information, including:

• IP address;
• Browser type and version;
• Device type and operating system;
• Usage logs and session data;
• Cookie identifiers and similar tracking data.

We use this information to maintain security, improve performance, analyze usage trends, and prevent fraud.

We use Personal Information solely for legitimate business purposes, including:

• Providing, operating, and improving the Services;
• Processing calls, SMS interactions, and email communications;
• Generating transcripts and call summaries;
• Scheduling appointments and sending reminders;
• Enabling integrations and automations requested by Subscribers;
• We use AI to process conversations, generate responses, and automate workflows. Any system improvements are based only on de-identified and aggregated data and explicitly exclude data obtained from Google Workspace APIs.
• Detecting and preventing fraud, misuse, and security incidents;
• Complying with legal obligations and enforcing our Terms of Service;
• Communicating with Subscribers about their accounts, product updates, and service-related matters.

Zevaux does not sell Personal Information. Zevaux does not share Caller Personal Information with third parties for cross-platform or cross-contextual advertising purposes.

Marketing Communications. Zevaux may use Subscriber contact information to send product updates, feature announcements, and marketing communications. Subscribers may opt out of marketing communications at any time by following the unsubscribe link in any email or by contacting support@zevaux.com. Opting out of marketing does not affect delivery of operational, billing, or account-related communications, which Subscribers will continue to receive while their subscription is active.

Zevaux uses artificial intelligence and machine learning technologies to process conversations, generate responses, detect caller intent, classify leads, and automate workflows. These processes may constitute automated decision-making or profiling under applicable privacy laws.

Subscribers are responsible for providing Callers with notice of automated processing and a method to opt out where required by law. A Caller may reduce or prevent automated AI processing by requesting human intervention during a call or by ending the interaction.

We use de-identified and aggregated data excluding Google Workspace API data to improve system reliability and user-facing features. We do not use data obtained from Google Workspace APIs to train, fine-tune, or develop generalized artificial intelligence or machine learning models.

Subscribers remain responsible for their own data governance, AI usage disclosures, and regulatory compliance obligations related to their use of AI features within the Services.

Google Workspace API data including Gmail and Calendar data is used solely to provide user-requested features such as sending emails and managing calendar events. It is not used for advertising, profiling, or training AI models.

7.1 With Subscribers

Information collected from Callers through a Subscriber’s AI Receptionist is made available to that Subscriber. The Subscriber determines how it uses, retains, and shares that information under its own privacy practices. Zevaux does not sell Caller Personal Information. Subscribers may use Caller data according to their own privacy practices — Callers should review the Subscriber’s privacy notice to understand how their data is used and to exercise any applicable opt-out rights.

7.2 With Service Providers

We share data with authorized service providers who assist in operating and improving the Services, including cloud infrastructure providers, telecommunications carriers, analytics services, and payment processors. These service providers are contractually required to safeguard Personal Information and use it only for authorized purposes consistent with this Privacy Policy.

7.3 Legal Compliance

We may disclose Personal Information if required by law, subpoena, court order, or governmental request, or when we reasonably believe disclosure is necessary to protect the rights, property, or safety of Zevaux, our Subscribers, Callers, or others, or to detect, prevent, or respond to fraud or security incidents.

7.4 Business Transfers

If JCER LLC undergoes a merger, acquisition, reorganization, or asset sale, Personal Information may be transferred as part of that transaction. We will provide notice of any such transfer that materially affects how your Personal Information is used.

7.5 SMS Consent and Opt-In Data Protection

Zevaux does not sell, rent, share, lease, or transfer text messaging originator opt-in data, SMS consent records, or related Personal Information to any third parties for marketing, promotional, or advertising purposes under any circumstances.

SMS consent data is used solely for the purpose of delivering transactional communications requested by the end user in accordance with the Subscriber’s configuration. This restriction applies to all third parties and affiliates without exception.

Subscriber account data is retained while the account remains active. Following account cancellation or termination, Subscriber data is retained for a reasonable period as communicated at the time of cancellation, after which it is deleted, de-identified, or securely archived in accordance with our internal data retention policies and applicable law.

Caller data processed through an AI Receptionist is retained according to the Subscriber’s instructions and the terms of our agreement with that Subscriber. Callers should contact the Subscriber they interacted with to request deletion or modification of their data.

Marketing contact data is retained until you opt out or until we determine that it no longer serves a legitimate business purpose.

When we no longer have a business or legal need for Personal Information, we delete, de-identify, or securely archive it. Where deletion is not immediately feasible (such as data in backup archives), we securely store and isolate it from further processing until it can be permanently deleted.

Zevaux implements commercially reasonable administrative, technical, and physical safeguards to protect Personal Information from unauthorized access, disclosure, alteration, or destruction. These measures include:

• Encryption of data in transit and at rest;
• Access controls and role-based permissions;
• Personnel security training and confidentiality obligations;
• Regular security monitoring and incident response protocols;
• Contractual security requirements imposed on all authorized service providers.

No internet-based system can be guaranteed to be completely secure. Data transmission over the internet occurs at the user’s own risk. In the event of a confirmed data breach affecting Personal Information under Zevaux’s control, we will provide notification as required by applicable law.

The Services are designed for business use and are not directed to individuals under the age of 16. Subscribers must not use the Services to interact with individuals under 16. Zevaux does not knowingly collect Personal Information from anyone under 16.

If we become aware that Personal Information has been collected from a person under 16 without appropriate consent, we will delete that information promptly. If you believe we may have inadvertently collected information from a minor, please contact us at support@zevaux.com.

Depending on your jurisdiction, you may have rights regarding your Personal Information. This section describes those rights. Note that Callers must direct privacy requests to the Subscriber they interacted with, as Subscribers control Caller data. Subscribers and website visitors may submit requests directly to Zevaux at support@zevaux.com.

11.1 General Privacy Rights

Depending on applicable law, you may have the right to:

• Know what Personal Information we collect, use, and disclose about you;
• Access a copy of your Personal Information;
• Correct inaccurate Personal Information;
• Request deletion of your Personal Information (subject to legal and contractual limitations);
• Restrict or object to certain processing of your Personal Information;
• Data portability — receive your data in a structured, machine-readable format;
• Opt out of the sale or sharing of your Personal Information (Zevaux does not sell Personal Information);
• Not be discriminated against for exercising your privacy rights.

We will respond to verified privacy requests as required by applicable law. Some rights may be limited by legal obligations, contractual requirements, or practical feasibility.

11.2 California Residents

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

• Right to Know: You may request disclosure of the categories and specific pieces of Personal Information we have collected about you, the sources of that information, our business purposes for collecting it, and the categories of third parties with whom we share it.
• Right to Delete: You may request deletion of Personal Information we have collected from you, subject to certain exceptions.
• Right to Correct: You may request correction of inaccurate Personal Information.
• Right to Opt Out of Sale or Sharing: Zevaux does not sell Personal Information and does not share Personal Information for cross-contextual behavioral advertising.
• Right to Limit Use of Sensitive Personal Information: Zevaux does not collect or use Sensitive Personal Information for purposes beyond those permitted by the CPRA.
• Right to Non-Discrimination: We will not discriminate against you for exercising your California privacy rights.
• Shine the Light: California residents may request information about disclosures of Personal Information to third parties for their own direct marketing purposes. Zevaux does not make such disclosures.

To submit a California privacy request, contact us at support@zevaux.com. We will verify your identity before processing your request and respond within the timeframes required by law.

11.3 Other State Privacy Rights

Residents of states including Colorado, Connecticut, Virginia, Utah, Nevada, and other states with applicable consumer privacy laws may have similar rights to those described above. Zevaux honors privacy rights as required by the law of the state in which you reside. To exercise your rights, contact support@zevaux.com and identify your state of residence.

11.4 Automated Decision-Making Opt-Out

If applicable law entitles you to opt out of automated decision-making or profiling, you may do so by requesting human intervention during a call interaction or by ending the interaction. For other requests related to automated processing, contact support@zevaux.com.

We use cookies and similar technologies to operate our website, analyze traffic, and enhance user experience. Specifically:

• Analytics cookies help us understand how visitors interact with our website, including which pages are visited most frequently and how users navigate the site.
• Functional cookies enable core website functionality and remember your preferences.
• Marketing cookies may be used to analyze and deliver relevant content across platforms.

You may block or adjust how cookies interact with your device by changing your browser settings or by installing a third-party cookie management tool. Note that disabling certain cookies may affect the functionality of the website.

We do not currently respond to browser “Do Not Track” signals. If our practices change in this regard, we will update this Privacy Policy accordingly.

Zevaux is operated primarily in the United States. If you access the Services from outside the United States, please be aware that your Personal Information may be transferred to, processed, and stored in the United States, where data protection laws may differ from those of your jurisdiction.

By using the Services, you consent to the transfer and processing of your Personal Information in the United States as described in this Privacy Policy. Where required by applicable law, we will implement appropriate safeguards for international data transfers.

The Services are intended for use by businesses operating within the United States. Zevaux does not warrant that the Services are appropriate or legally compliant for use outside the United States.

14.1 Subscriber Account Controls

Subscribers can access, update, or delete certain Personal Information by logging into their Zevaux account and adjusting their settings. For assistance or to revoke a consent previously provided, contact support@zevaux.com.

14.2 Email Communications

Zevaux may send Subscribers support emails related to their account and, if opted in, marketing emails. You can unsubscribe from marketing emails by following the unsubscribe link in any email or by contacting support@zevaux.com. Opting out of marketing emails does not affect operational account communications.

14.3 SMS Communications

If you provide your wireless number, you consent to Zevaux sending you service-related text messages. We will only send you marketing text messages if you have explicitly opted in. You may unsubscribe from text messages at any time by replying STOP, CANCEL, UNSUBSCRIBE, QUIT, END, or REVOKE to any message. Messaging and data rates may apply.

Callers may receive text messages from Zevaux on behalf of a Subscriber. These messages are sent according to the Subscriber’s configuration and privacy practices. Contact the Subscriber with questions or concerns about those messages.

14.4 Caller Privacy Requests

If you are a Caller who interacted with an AI Receptionist, please contact the Subscriber (the business you called) directly with any privacy requests related to that interaction. Zevaux processes Caller data as a service provider to the Subscriber and is not the appropriate party to fulfill Caller-directed privacy requests except where required by law.

The Services may integrate with or link to third-party platforms and services. Zevaux has no control over the privacy practices of third-party services and is not responsible for their content, data practices, or privacy policies. You should review the privacy notices of any third-party services you connect or interact with through the Services.

We may update this Privacy Policy from time to time to reflect changes in our practices, the Services, or applicable law. When we make material changes, we will notify you by email to your registered address or by prominent notice within the Services, and we will update the “Last Updated” date at the top of this document.

Your continued use of the Services after the effective date of any updated Privacy Policy constitutes your acceptance of the revised policy. If you do not agree with the changes, you should discontinue use of the Services and cancel your subscription.