1. Telephony Data We Process
Grapphen Vox processes telecommunications and account data strictly necessary to initiate phone calls, route WebRTC audio streams, and deliver SMS messages:
- Account & Billing Data: Company name, administrator email address, billing contacts, and carrier surcharge invoices.
- Call Detail Records (CDRs): Originating phone number (ANI), destination number (DNIS), call duration, timestamp, SIP response codes, and network packet quality metrics.
- Messaging Logs: Inbound and outbound SMS/MMS messages, delivery receipt statuses, and campaign opt-out records.
2. Audio Tracks & Call Recording Security
When call recording is activated by workspace administrators, dual-channel stereo audio is captured to separate candidate and agent voices.
Encrypted Archival: Recorded call audio is encrypted at rest using AES-256 and transmitted exclusively over TLS 1.3 channels. Customer audio is never sold, licensed, or shared with data brokers.
3. Sofia Voice AI Guardrails & Model Privacy
Sofia Voice AI analyzes audio in real time to generate conversational responses during pre-screens.
- Zero Model Training: Audio feeds and conversation transcripts are never used to train commercial LLMs or speech models.
- Transient Inference: Neural audio synthesis occurs within volatile memory buffers and is wiped after session closure.
4. Customer Proprietary Network Information (CPNI)
Under Federal Communications Commission (FCC) regulations, your call detail records constitute Customer Proprietary Network Information (CPNI). Grapphen Vox strictly limits internal staff access to CPNI to authorized technical troubleshooting upon explicit customer ticket authorization.
5. Your Rights Under GDPR & CCPA
We respect the data privacy rights of all customers and candidates:
- Right to Erasure: Administrators may trigger automated deletion of call recordings, SMS logs, and AI transcripts at any time.
- Right to Portability: Complete CDR reports and audio recordings can be exported in standardized CSV and WAV formats.
6. Data Retention Schedule
CDRs are retained for 12 months for carrier billing reconciliation. Audio recordings and transcript logs are retained per workspace policy (default 30 days) and permanently purged from cloud storage thereafter.
7. Data Protection Officer & Inquiries
To submit privacy inquiries, GDPR rights requests, or sub-processor questions, please contact our Data Protection Officer:
Grapphen LLC
Attention: Data Protection Officer & CPNI Compliance
30 N Gould Street, Ste 66690
Sheridan, WY-82802, United States
Direct Privacy Desk: [email protected]
