Privacy
Last updated: 2026-09-29
Controller
Thomas Koch, Seidenweg 12, 3012 Bern, Switzerland. For any question about your data: hello@voko.ch.
What data we process
Five cases. When you visit the site, we measure audience anonymously and without cookies. When you leave us your email address, we keep it to reply to you and for nothing else. When you talk to the voice demo, we keep the text of the exchange, never the audio: see the next section. When you try Voko with your website, we read the public pages of the address you give, and keep your email address and the website address to contact you about Voko. The demo assistant is deleted after 24 hours; the text of the conversation is kept for at most 30 days, the audio never. When a business uses Voko for its own telephone line, we process what that service requires: the account and its users, the assistant's configuration, and for each call its date, its duration and the minutes billed, which we keep as long as the account exists, plus the caller's number and a summary, erased after 30 days, or after the delay the business chose for its assistant (from 24 hours to no automatic deletion). The audio of a call is recorded only if the business switches recording on for its assistant; the assistant then announces at the start of every call that it may be recorded. In that case the business answers for its callers' data and Voko acts on its instructions. If the business keeps its contacts in Voko (name, number, email, company, tags, note), we keep them until it deletes them, and at most as long as the account exists. The list goes to no provider: when a contact calls, the assistant receives only that contact's name, company and note, plus the summary of their last three calls if the business chose so. The same goes for its team directory (name, role, number, email), read from the page it names or entered by hand: the assistant receives the names and roles, and the numbers only to transfer a call. Here too the business answers for this data and Voko acts on its instructions. We sell no data. Outside the providers listed below, we pass it to no one.
The demo on this site
The voice demo on this site keeps the text of the conversation for at most 180 days. We read it for one reason only: to understand what visitors ask and to improve the service. The audio is never recorded: it is processed live and then gone. Write to us and we delete the text of a conversation on request.
Sub-processors
We name them one by one, rather than writing vaguely that we work with partners. Site and console hosting: Vercel Inc., United States. The console's functions run in Frankfurt. Database and accounts: Supabase Inc., United States, on a database hosted in Zurich. Voice assistant and transcription: ElevenLabs Inc., United States. Phone numbers, call routing and SMS: Twilio Inc., United States. Internal tracking of demo and call-back requests (name, number, need): Notion Labs, Inc., United States. Internal alerts to the Voko team (name, email or number on a booking, call-back or signup): Slack Technologies, LLC, United States. Appointment booking: Cal.com Inc., United States. Reading websites built with JavaScript (the website demo, setting up an assistant): Jina AI GmbH, Germany (part of Elastic). It receives only the site's public address. Email delivery: Resend Inc., United States. Payments: Stripe, Inc., United States. Language model and website summary: Google LLC, United States. Advertising measurement: Google Ireland Ltd and Google LLC (United States) for Google Ads, and Meta Platforms, Inc. for the Meta pixel, only if you accepted cookies. When you create an account, talk to Voko on the phone, book a demo or take out a subscription, we also report it to Meta and to Google from our own servers, whether or not you accepted cookies, so we know which ads are working: depending on the case, they receive your email address and phone number (and Meta your name) only in hashed form, never in plain text. When you take one of these steps on our website (trying the demo, asking to be called back, creating an account, booking a demo or paying for a subscription), they additionally receive, in plain text because their interfaces require it, the IP address and browser you were using, and the identifier of the ad you clicked if you came from one. Meta also receives the page you were on, the country of your connection and Meta's cookie identifiers if you accepted them. We tell Google whether you accepted or declined cookies, as its rules require. This is used only to attribute the step to the ad that prompted it, and we delete it from our systems after 30 days. Address check in the console: the Swiss Confederation's geo.admin.ch service. Vercel, ElevenLabs, Twilio, Stripe, Google, Meta, Notion and Slack are certified under the Swiss-U.S. Data Privacy Framework, which the Federal Council recognises as offering adequate protection. Supabase, Cal.com and Resend are not on that list: there, the transfer rests on the standard contractual clauses of their data-processing agreement. We do not claim to host your data in Switzerland.
Cookies and analytics
The site runs without any advertising cookie until you accept one, with one exception: if you arrive by clicking an ad, we keep that click's identifier (the code Google or Meta adds to the link) in a cookie of our own for 90 days, whatever you choose, so that a step you take later can be attributed to that ad in the reports described above. It holds nothing else about you. Basic audience measurement is anonymous and cookieless. If you accept cookies, we also note which advertising link brought you to the site (Google Ads, Meta) so we know which ads are working, and include it when we report an account or a subscription to Meta or Google. We also keep your cookie choice in a cookie, so that our servers can respect it. You can change your mind at any time through the Cookies link in the footer.
Your rights
Under the revised Swiss Federal Act on Data Protection you may request access to your data, its correction or its deletion, and object to its processing. An email to hello@voko.ch is enough, with no form and no justification needed. We answer within 30 days.
Security and retention
Data is transmitted encrypted and kept only as long as the stated purpose requires. Email addresses we collect are deleted on request.