Vaami
Security & data protection

Your callers' data, protected in every country you call.

Voice calls carry personal and sensitive information. VAAMI is built to protect it with encryption, access controls and short default retention, and to support the local rules that apply wherever your callers are.

At a glance

How we protect call data.

Encrypted in transit and at rest

Call audio, transcripts and account data are encrypted while moving between systems and while stored.

Access controls

Call recordings and transcripts are available to your account administrators through the platform, not left in open storage.

90-day default retention

Call recordings and transcripts are permanently deleted after 90 days by default, so you are not holding audio longer than you need to.

No model training without consent

End-customer voice data is processed only to deliver the service and is not used to train our AI models without your explicit consent.

You own your data

You keep ownership of the data you upload, configure or generate. We process it only as needed to deliver and improve the service.

Deletion on request

You can ask us to delete your data at any time, subject to legal retention requirements. Card data stays with our payment processor and is never stored on our servers.

Data lifecycle

What happens to a call, start to finish.

1. The call

A caller speaks to your VAAMI agent over your phone line. Audio is processed to understand and respond in real time.

2. Processing & integrations

Transcripts and outcomes flow only to the CRM, calendar or telephony systems you choose to connect.

3. Storage

Recordings, transcripts and call logs are stored encrypted and shown to your administrators in the dashboard.

4. Deletion

Recordings and transcripts are removed after the retention window, or sooner when you ask.

Local regulations

Built to support the rules where you operate.

Privacy and telemarketing law differs by country. Here is what applies in each market we serve and how VAAMI helps you meet it.

India

Key regulations

Digital Personal Data Protection Act, 2023; TRAI telecom rules (DLT, DND)

How VAAMI helps

DLT-registered sender ID configuration and DND scrubbing in outbound campaigns. Entity registration is completed by your business, with our team guiding onboarding.

United Kingdom

Key regulations

UK GDPR; Data Protection Act 2018; PECR (incl. TPS / CTPS)

How VAAMI helps

Privacy by design for call data, data subject rights handling, and screening of outbound lists against TPS / CTPS.

United States

Key regulations

TCPA and FTC telemarketing rules; state privacy and call-recording laws

How VAAMI helps

Controls for consent-based outbound calling and recording disclosures, configured per state and use case.

Australia

Key regulations

Privacy Act 1988 (Australian Privacy Principles); Do Not Call Register Act 2006

How VAAMI helps

Support for call-recording notices and Do Not Call Register checks in outbound campaigns.

Canada

Key regulations

PIPEDA and provincial privacy laws; CRTC unsolicited telecommunications rules (National DNCL)

How VAAMI helps

Support for consent, identification at call start and National DNCL screening for outbound calling.

UAE & Middle East

Key regulations

UAE Federal Decree-Law No. 45 of 2021 (PDPL); TDRA telecom rules

How VAAMI helps

Data minimisation, purpose-limited processing and configurable retention for regional deployments.

This page is an overview, not legal advice. Laws change, so confirm the rules for your campaigns with your own legal adviser.

Shared responsibility

Who does what.

AreaYour businessVAAMI
Securing the platform and stored call dataManage who in your team has administrator accessEncryption, access controls and secure infrastructure
Retention and deletionTell us if you need a different window or a deletion90-day default deletion and deletion on request
Consent and call disclosuresDecide the lawful basis and the recording notice for your callersConfigure greetings and call flows to your wording
Do-not-call and calling-hours rulesProvide lists and confirm your regulatory registrationsApply scrubbing and calling-window settings in the pipeline
Data subject requestsReceive and verify requests from your customersHelp locate and delete the relevant call data
FAQ

Security and data protection questions.

How does VAAMI protect call recordings and transcripts?

Call data is encrypted in transit and at rest, and access to recordings and transcripts is limited to your account administrators through the platform. Recordings and transcripts are permanently deleted after 90 days by default.

Is my call data used to train AI models?

No. End-customer voice data is processed only to deliver the service and is not used to train our AI models without your explicit consent.

Can I get your security and data protection documentation?

Yes. Email us with your company, the countries you call in and your use case, and we will share the relevant documentation and answer your security questionnaire. Use the Request documentation button on this page to send a pre-filled email.

Does VAAMI follow local regulations in each country?

We build the platform so customers can meet the rules that apply to them in India, the UK, the US, Australia, Canada and the UAE, including do-not-call screening, consent and recording notices, and retention controls. Because responsibilities are shared, final compliance for a campaign sits with the calling business, and we help you configure it correctly during onboarding.

Can I delete my data?

Yes. You can request deletion at any time by emailing developer@empowerxlabs.com, subject to legal retention requirements. Recordings and transcripts are also deleted automatically after the default retention window.

Where can I read the full privacy policy?

Our privacy policy at vaami.ai/privacy covers what we collect, how we use and retain it, and your rights.

Read the full privacy policy and terms of service.

Security review

Running a security review? We will help.

Tell us the countries you call in and your use case. We will send the relevant documentation and walk your team through how call data is handled.