Privacy Policy

Last updated 13 October 2026

What Oxumi collects, why, and who else sees it. We collect what the product needs to run your calls, we do not sell it, and we do not keep call recordings.

1. Who we are

Oxumi is operated by company legal name, registered address. For anything in this policy, contact privacy contact email.

2. What we collect

Account details. Your name, email address, company name if you give one, the time you accepted these policies, and your password, which is stored only as a salted hash that cannot be read back.

What you build. Your projects, agents and call flows, including the wording and settings you give them.

Call records. For each call: the details you supplied for it, the transcript, the answers the agent collected, the outcome, and timing measurements. Call audio is streamed to our speech provider to be transcribed and spoken; Oxumi does not keep recordings.

Technical data. A session cookie that keeps you signed in, and your IP address at sign-in, used briefly to limit repeated failed attempts.

3. How we use it

  • To provide the service: run your calls and show you the results.
  • To keep accounts secure and prevent abuse.
  • To send essential messages, such as a password reset link.
  • To fix problems and understand how the product performs.

4. People your agents call

When you use Oxumi to call someone, you decide why and how their information is used, and we process it on your behalf and on your instructions. You are responsible for telling those people how you handle their data and for having a lawful reason to call them. If someone you called contacts us directly, we will refer them to you.

5. Who we share it with

We do not sell personal data. It is shared only with providers that the service needs in order to work:

  • Speech provider (ElevenLabs): call audio and the agent’s spoken text, for transcription and speech.
  • Language-model provider: the conversation text and your flow’s instructions go to the provider selected for the agent (Anthropic, OpenAI or Google).
  • Hosting and database: hosting provider and region.

We may also disclose information where the law requires it.

6. Cookies

Oxumi sets one cookie: an essential session cookie that keeps you signed in. It cannot be read by scripts in the page. We do not use advertising or analytics cookies.

7. How long we keep it

Account and project data is kept while your account is open. Deleting a project removes its agents and call records. When an account is closed we delete its data within retention period, apart from anything the law requires us to keep.

8. Security

Passwords and session tokens are stored only as hashes. Each account can reach only its own projects, agents and calls. No system is perfectly secure, so please use a strong, unique password and tell us if you suspect unauthorised access.

9. Your choices and rights

You can ask for a copy of your data, ask us to correct it, or ask us to delete your account. Depending on where you live you may have further rights under data-protection law, including the right to complain to a regulator. Write to privacy contact email and we will respond within response period.

10. Changes to this policy

If we change how we handle personal data, we will update this page and its date, and tell you about significant changes before they take effect.