Last updated: April 23, 2026
The data controller responsible for your personal data is:
Focus LabsFor GDPR-related inquiries, you may contact our data protection team at the email address above.
When you use our API, audio data is routed through our infrastructure to the voice AI provider serving your request. Audio streams are processed in real-time and are not permanently stored by VoxRouter. Audio data is forwarded to the selected provider and discarded by VoxRouter after the session ends. Each provider's own privacy policy governs how they handle audio data during inference.
We collect technical metadata including:
When you create an account, we collect:
Our website may use analytics to understand how visitors interact with our site. This is only enabled if you consent to analytics cookies. You can opt out at any time through your browser settings.
We process your data for:
Under GDPR, we process your data based on:
We rely on the following sub-processors to deliver the service. Each processes a defined category of data for a specific purpose. All sub-processors are bound by data-processing agreements consistent with GDPR.
Purpose: Text-to-speech inference for requests routed to the ElevenLabs voice catalog.
Data categories: TTS input text, voice identifier, response format. Audio is generated by ElevenLabs and streamed back to the caller; no account or billing data is shared.
Region: United States.
Purpose: Text-to-speech inference for requests routed to the Cartesia voice catalog.
Data categories: TTS input text, voice identifier, response format. Audio is generated by Cartesia and streamed back to the caller; no account or billing data is shared.
Region: United States.
Purpose: Payment processing, saved payment methods, customer-balance billing.
Data categories: Billing email, customer name, card metadata (issuer, last four), tax identifiers, invoices. Card numbers are entered directly into Stripe-hosted fields and never reach VoxRouter systems.
Region: United States, with EU data residency available on request.
Purpose: Edge hosting, TLS termination, request routing, DDoS protection, Workers / Durable Objects runtime, R2 / KV storage for configuration data.
Data categories: IP address, request headers, request bodies in transit, account configuration, API key hashes.
Region: Global edge network (closest point of presence to the caller).
Website analytics, enabled only with consent. Data processed in accordance with the analytics provider's privacy practices.
We will update this list at least 30 days before adding or replacing a sub-processor that handles personal data.
As a data subject, you have the following rights:
To exercise these rights, contact us at team@voxrouter.ai. We will respond within 30 days.
You also have the right to lodge a complaint with a supervisory authority. In France, this is the CNIL (Commission Nationale de l'Informatique et des Libertés).
Your data may be processed outside the European Economic Area (EEA), particularly in the United States through our cloud infrastructure and voice AI provider network. Such transfers are protected by Standard Contractual Clauses approved by the European Commission, ensuring an adequate level of data protection.
We implement appropriate technical and organizational measures to protect your data:
Our website uses:
You can manage cookie preferences through your browser settings.
VoxRouter is not intended for use by individuals under 16 years of age. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us immediately.
We may update this Privacy Policy from time to time. Material changes will be communicated via email or service notification. The "Last updated" date at the top indicates when the policy was last revised.
For privacy-related questions or to exercise your rights:
Focus Labs - Privacy Team