VoxSmart™ Mobile Application Privacy Policy
Last updated: March 2026
Who We Are
VoxSmart Limited is a compliance technology company registered in England and Wales (no. 05691475). Our registered office is at The Ministry, Borough Road, London, SE1 1DN.
For privacy queries: privacy@voxsmart.com
Our Role
The App is deployed by your employer to capture business communications for regulatory compliance. VoxSmart acts as a data processor – your employer is the data controller and is responsible for how your data is used. Questions about your employer's use of your data should be directed to them directly.
What We Collect
On your employer's behalf, the App captures:
- Voice calls, SMS, voicemail and instant messages (including WhatsApp and WeChat) on employer-issued devices
- Associated metadata (date, time, duration, parties)
- Device identifiers (e.g. IMEI)
- Product analytics to help shape the roadmap
Captured communications may incidentally contain sensitive personal data. We do not seek to collect this deliberately.
Why We Collect It
Your employer is subject to financial services regulations – including MiFID II, FCA SYSC 10A, SEC/FINRA rules and their global equivalents – or other similar regulations, that may require business communications to be recorded, archived and supervised.
Processing is carried out to fulfil those legal obligations on your employer's behalf.
How Long We Keep It
Retention periods are set by your employer in line with applicable regulation – typically 5 to 7 years for financial services firms. Data is securely deleted on termination of our agreement with your employer, unless law requires otherwise.
Who We Share It With
- Your employer – for supervision and compliance purposes
- Approved subprocessors – including Microsoft, AWS, Twilio, HubSpot, Zoho, and Nuance, each bound by data protection agreements
- Regulators or courts – where legally required
We do not sell your data or use it for advertising.
International Transfers
Data may be processed outside the UK/EEA. Where this occurs, we rely on Standard Contractual Clauses or adequacy decisions to ensure your data remains protected.
Security
We use encryption, access controls, and undergo annual ISO27001 audits and CREST-certified penetration testing to protect your data.
Your Rights
Depending on your location, you may have rights to access, correct, delete or restrict your data. As VoxSmart is a processor, please contact your employer in the first instance. Note that regulatory retention obligations may limit some rights (such as erasure) during the mandatory retention period.
You may also complain to your local data protection authority:
- UK: ico.org.uk
- EU: your national supervisory authority
- US (California): cppa.ca.gov
- Australia: oaic.gov.au
- Others: contact us for guidance
Changes
We may update this policy from time to time. The latest version will always be available on the App link and App Store listing.