This policy explains how Velstera AI collects, uses, shares, retains, and protects information through this website, service requests, client accounts, billing administration, the public Ava demonstration, and configured AI receptionist services.
Information you provide
We may collect your name, business name, work email, phone number, website, industry, approximate call volume, current call-handling process, goals, requested features, preferred contact method, support messages, and other business information you choose to provide. Do not submit passwords, payment-card details, medical information, financial-account information, or unrelated customer records through the general service-request form.
Client accounts and billing information
When a client creates or uses a Velstera account, we process the contact email and name, a salted one-way password hash, session records, business name, assigned plan, service status, billing period, usage totals, provider identifiers, and invoice references. Stripe processes payment details on its pages. Velstera’s website database does not store full payment-card or bank-account numbers.
Caller and AI receptionist information
When Ava handles a configured call, Velstera and its approved voice, telephony, AI, and integration providers may process the caller’s phone number, name, voice, call content, stated request, language, routing details, call timestamps and duration, and other information included in the approved workflow. If enabled for that client, call audio, transcripts, summaries, extracted fields, or appointment and follow-up details may also be created and processed.
The website database currently stores limited call-usage metadata for service administration and billing, such as a provider call identifier, direction, duration, timestamp, assigned client account, and meter status. It is designed not to copy caller phone numbers, call audio, transcripts, or summaries into that database. Those items may still be processed or retained by the configured voice or integration provider when the corresponding feature is enabled.
AI and recording notices
Ava is an AI virtual receptionist, not a human. The public demo provides an AI and possible recording/transcription notice before the external demo link. Client call greetings and workflows should include the disclosures and consent process approved for the client’s jurisdictions. Recording and transcription requirements vary by location, and a client may not remove or contradict an approved notice.
How we use information
We use information to evaluate service requests; contact prospective and current clients; create and secure accounts; configure, test, operate, support, and improve approved call workflows; route calls and requests; provide enabled transcripts or summaries; measure usage; process billing; troubleshoot; prevent misuse; comply with law; and maintain business, security, and legal records. We do not use the public service-request form as permission for unrelated automated marketing calls.
Service providers and disclosures
We use service providers for website hosting and cloud databases, payment processing, email and communications, telephony, voice and AI processing, and client-approved calendars, CRMs, or automations. These providers process information for the functions they perform and are subject to their own contracts and privacy practices. Relevant providers can include Stripe for payments and Retell AI or another approved voice platform for AI calls. We may also disclose information when required by law, to protect rights or safety, to investigate misuse, or in connection with a business transaction subject to appropriate protections.
Sale, targeted advertising, and cookies
Velstera does not currently sell personal data submitted through this website or use it for targeted advertising. The current website does not deploy advertising pixels or targeted-advertising cookies. It stores your English or Spanish preference in first-party browser storage and a functional cookie so the site can keep your selected language as you move between pages. Hosting and security infrastructure may process basic device, IP address, request, and diagnostic information needed to deliver and protect the site. If these practices change, this policy and any required choices or notices will be updated.
Retention
We retain service requests, account records, usage records, support information, and billing references only as reasonably needed to provide and secure the service, resolve disputes, collect amounts due, maintain legal and tax records, and enforce agreements. Call audio, transcripts, and summaries are retained only when enabled; their retention depends on the client’s approved configuration, provider settings, legal requirements, and written agreement. Because those settings may differ by client, Velstera confirms the applicable call-data configuration before launch rather than promising one universal retention period. We delete or de-identify information when it is no longer reasonably needed, subject to backups, legal obligations, disputes, and provider deletion processes.
Security
Velstera uses measures intended to reduce risk, including access controls, password hashing, secure and HTTP-only session cookies, same-origin checks for sensitive account actions, signed provider webhooks, rate limits on public forms and authentication attempts, and limited storage of payment and call content in the website database. No online system is completely secure, and these measures are not a guarantee against every incident.
Your rights and choices
You may choose not to submit a request or create an account. Depending on applicable law, you may request access, correction, deletion, or a copy of personal information, or exercise other available privacy rights, by emailing contact.velstera@gmail.com. We may need to verify your identity and authority. Some billing, security, or legal records may be retained as permitted or required. Callers may also contact the business they called, which controls its own customer relationship; Velstera assists clients with validated requests relating to the configured service.
Children
The website and service are intended for businesses and are not directed to children. Do not use the website or public demo to submit personal information about a child. A client workflow involving minors requires separate review and approval before activation.
Updates and contact
We may update this policy as the business, website, providers, or services change. The date above identifies the current version. Questions or privacy requests may be sent to contact.velstera@gmail.com.