Security

This page describes how Pay Host LLC approaches security for Voiceie, our AI receptionist service for business customers. It supplements our Privacy Policy and Terms of Service.

Security is a shared responsibility. We implement safeguards designed to protect the Service, but no system is perfectly secure. You also play an important role by protecting account credentials, configuring appropriate call flows, and using Voiceie in compliance with applicable laws.

This page is provided for transparency and does not create a separate warranty, service-level agreement, insurance obligation, audit certification, or security guarantee unless expressly agreed in a signed written agreement.

1. Our Security Approach

We use administrative, technical, and organizational measures intended to protect customer data and Service infrastructure, including:

• Access controls limiting internal access to systems and customer data on a need-to-know basis;
• Authentication protections for administrative and customer-facing systems;
• Encryption in transit for data transmitted over public networks, where supported by the relevant systems;
• Monitoring, logging, and alerting for operational and security-relevant events;
• Credential and integration access practices designed to reduce unnecessary exposure of connected accounts;
• Vendor review for critical subprocessors that support telephony, hosting, payments, and AI processing;
• Backup and recovery processes designed to support business continuity;
• Change management and deployment practices intended to reduce the risk of unauthorized or unstable releases.

Security controls may vary by system, provider, integration, plan, and stage of deployment. We periodically review practices as the Service evolves.

2. Data Handling

2.1 Account and business data

Account information, onboarding details, routing rules, and integration settings are stored in systems used to operate Voiceie. Access is restricted to authorized personnel and service providers supporting the Service.

2.2 Call, message, and transcript data

Call metadata, recordings where enabled, transcripts, summaries, SMS content, and booking records are processed to deliver the Service. These records may pass through telephony carriers, speech-processing providers, and cloud infrastructure vendors under contractual safeguards.

Customers should avoid routing highly sensitive or regulated information through Voiceie unless their intended workflow, notices, consents, and agreement with Pay Host support that use case.

2.3 Payment data

Payment card information is processed by Stripe. Pay Host does not store full payment card numbers on its own servers. Stripe maintains PCI-DSS compliant processing infrastructure for card payments it processes.

3. Infrastructure and Third-Party Providers

Voiceie relies on reputable third-party providers for hosting, telecommunications, payment processing, email delivery, analytics, and AI-related processing. We select providers based on reliability, security posture, and suitability for the Service. Their security practices are governed by their own policies and contractual obligations with Pay Host.

Because telecommunications and integrations depend on external networks and APIs, outages or security incidents affecting third parties may impact Voiceie even when our own systems remain operational.

4. Customer Responsibilities

To help keep your account secure, you should:

• Use strong, unique passwords and limit account access to authorized staff;
• Keep business contact, on-call, and routing information accurate and current;
• Review integration permissions for calendars, CRMs, and other connected tools;
• Promptly remove access for former employees or contractors;
• Notify us immediately at contact@voiceie.com if you suspect unauthorized account access, credential compromise, or misuse;
• Configure call recording, SMS, and customer notices in accordance with applicable law.

5. Incident Response

If we become aware of a security incident that materially affects customer data or Service integrity, we will investigate promptly and take reasonable steps to contain, remediate, and notify affected customers or authorities where required by law or contract.

If you discover a vulnerability or believe there has been unauthorized access involving Voiceie, report it to contact@voiceie.com with relevant details. Please do not publicly disclose vulnerabilities before giving us a reasonable opportunity to investigate. We do not authorize destructive testing, social engineering, denial-of-service testing, spam, access to other customers' data, or testing that violates law or third-party terms.

6. Retention and Deletion

We retain operational and call-related records according to the needs of the Service, your configuration, backup cycles, and legal obligations. When data is no longer required, we take reasonable steps to delete, anonymize, or securely isolate it. See our Privacy Policy for more information.

7. Limitations

Security measures reduce risk but cannot eliminate it entirely. Pay Host does not guarantee that the Service will be free from unauthorized access, interception, loss, or alteration. You use Voiceie at your own risk to the extent permitted by our Terms.

8. Contact

For security questions or to report a concern:

Pay Host LLC
Voiceie Security
Email: contact@voiceie.com
State of organization: New Mexico, USA