PRIVACY POLICY

Last updated: October 24, 2026

TTP GO - AI Voice Conversation Platform

EFFECTIVE DATE: October 24, 2026

COMPANY: TTP GO LTD (Israeli company)

ADDRESS: 6 Smilanski Herzliya Israel, 4636228

PRIVACY OFFICER: Yinon Shiryan

CONTACT: support@talktopc.com

1. INTRODUCTION

This Privacy Policy explains how TTP GO LTD ("TTP GO," "we," "us," or "our") collects, uses, shares, and protects information when you use our AI-powered voice conversation platform and related services.

By using our Service, you consent to the practices described in this Privacy Policy. If you do not agree with this policy, please do not use our Service.

This policy covers two different kinds of people, and the rules are not the same for both. Account holders are our customers - the businesses and individuals who build AI Agents on our platform. Callers are the people who speak with those Agents by telephone or through a website widget. Where a section applies to only one of them, we say so. Section 7.4 explains what callers should do to exercise their rights.

2. INFORMATION WE COLLECT

2.1 Information You Provide

• Account Information: Name, email address, password, and billing information
• Agent Configurations: Settings, prompts, greetings, and preferences for your AI agents
• Voice Data: Voice recordings when call recording is enabled (user-controlled per agent)
• Text Inputs: Text messages, commands, and queries submitted to our Service
• Phone Numbers: If you purchase telephony features through our Service
• Knowledge Base Content: Documents, web pages and text you upload for your Agents to draw on

2.2 Information Collected Automatically

• Device Information: IP address, browser type, operating system, device identifiers
• Usage Data: Features used, call duration, API requests, timestamps
• Conversation Transcripts: Text transcripts of voice and chat conversations. These are produced by third-party speech-to-text providers - see Section 3
• Technical Logs: Error logs, performance metrics, and diagnostic information
• Caller Information: When people interact with your AI Agents, we collect their telephone number as supplied by the telephony carrier (for phone calls), their IP address (for website conversations), and an approximate location - country and city - derived from that IP address. We use the approximate location to help diagnose call quality and to detect abuse. We do not use precise or device-level location data, and we do not ask callers for their location.

3. HOW YOUR DATA IS PROCESSED

We use your information for the following purposes:

• Service Delivery: To provide, maintain, and improve our AI voice conversation services
• Account Management: To create and manage your account, process payments, and provide customer support
• Communication: To send service-related notifications, updates, and promotional materials (with consent)
• Security: To detect and prevent fraud, abuse, and security threats
• Legal Compliance: To comply with applicable laws and legal obligations
• Analytics: To analyze usage patterns and improve our Service (using anonymized data)

3.1 Speech and Language Processing - Please Read This Section

We do not operate our own speech recognition, speech synthesis or language models. Our platform works by passing conversation data to specialist third-party providers in real time:

• What the caller says is sent as audio to a third-party speech-to-text provider, which returns a text transcript.
• The Agent's reply is produced by a third-party large language model provider, which receives the conversation so far as text.
• The Agent's voice is produced by a third-party text-to-speech provider, which receives the text to be spoken.
• Where an Agent is configured to use a realtime speech model, the caller's audio itself - not merely a transcript - is streamed to and from that provider for the duration of the call.

Section 4.1 lists these providers. A small number of speech synthesis models run on our own servers; which provider handles a given conversation depends on how the Agent has been configured by its owner.

3.2 Model Training

We do not train any AI model on your voice data or conversation content. We do not build models at all. What our third-party providers may do with data we send them is governed by their own terms, which differ between providers and between service tiers. We are in the process of agreeing written terms with our providers that restrict retention and prohibit training on our data; Section 6.3 describes the current position.

4. DATA SHARING AND THIRD-PARTY SERVICES

4.1 Service Providers Who Receive Conversation Data

We share data with the following categories of provider in order to deliver the Service. Which specific providers are involved in any one conversation depends on how that Agent is configured.

Each provider handles the data it receives under its own privacy terms and retention periods. Those periods are set by the provider, not by us, and are generally not the same as the retention periods in Section 5, which describe only the copies we hold ourselves.

4.2 Analytics Providers

We use the following analytics services to understand how our website and dashboard are used. They receive website usage data only; they do not receive conversation content, call audio or transcripts.

• Google Analytics
• Microsoft Clarity
• Yandex Analytics
• Facebook Analytics

4.3 Payment Processing

Payment processing is handled by Stripe. We do not store your full credit card information on our servers.

4.4 Components We Run Ourselves

Some parts of the platform that would commonly be outsourced are run on our own infrastructure, so the data in them is not shared with a third party. These include our conversation observability and tracing system, which holds conversation transcripts, and several text-to-speech models.

4.5 We Do NOT Sell Your Data

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

5. DATA RETENTION

The periods below apply to the copies of data we hold ourselves. They do not govern the copies held by the providers listed in Section 4.1.

Account holders can delete their account at any time, and can download their data before doing so (Section 7).

6. INTERNATIONAL DATA TRANSFERS

6.1 Where Our Own Systems Are

Our application servers and database are hosted with OVH in France, which is within the European Economic Area. Voice recordings are stored in Amazon S3 in the United States (the us-east-1 region). Our company is registered in Israel, and our staff are in Israel, so our personnel access the Service from Israel.

6.2 Where Conversation Data Goes

Conversations with our AI Agents are processed outside Israel as a matter of course, because the speech and language providers we depend on operate outside Israel. Depending on how an Agent is configured, conversation audio and text may be processed in:

• the United States - Microsoft, Google, OpenAI, Anthropic, Amazon, ElevenLabs, Cartesia, Soniox, Telnyx, Twilio, Stripe, xAI
• China - Moonshot AI, which may be selected as a language model or used as an automatic fallback if the primary model is unavailable
• other countries where our providers operate

We cannot offer a configuration in which conversation content is processed only within one country or region.

6.3 Safeguards

We rely on the international transfer mechanisms offered by each provider, including the EU-US Data Privacy Framework where a provider is certified under it. We are in the process of putting written data processing agreements in place with the providers listed in Section 4.1, including terms on retention limits and on the use of our data for model training, and we will update this policy as that work is completed.

7. YOUR RIGHTS

7.1 Legal Basis for Processing (EU/UK Users)

Where the GDPR applies, we process personal data on the following bases: performance of a contract (to provide the Service you have signed up for); legitimate interests (security, fraud prevention, and maintaining and improving the Service); consent (marketing communications and non-essential cookies, which you may withdraw at any time); and legal obligation (keeping financial records).

7.2 GDPR Rights (EU Users)

If you are located in the European Union, you have the following rights:

• Right to Access: Request a copy of your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your data ("right to be forgotten")
• Right to Portability: Receive your data in a machine-readable format
• Right to Object: Object to processing of your data
• Right to Restrict: Request restriction of processing
• Right to Withdraw Consent: Withdraw any consent you have given, at any time
• Right to Complain: Lodge a complaint with your national data protection authority

7.3 CCPA Rights (California Users)

If you are a California resident, you have the following rights:

• Right to Know: Know what personal information is collected and how it is used
• Right to Delete: Request deletion of your personal information
• Right to Non-Discrimination: Not be discriminated against for exercising your privacy rights

Note: We do not sell your personal information.

7.4 If You Are a Caller, Not an Account Holder

If you spoke with an AI Agent operated by one of our customers, that customer decided why the conversation took place and what is done with it. Under data protection law they are the data controller and we act only on their instructions as their processor. To see, correct or delete what was said on that call, please contact the business you called. If you contact us instead, we will pass your request on to them and tell you that we have done so; we are not permitted to delete their records on our own initiative.

7.5 Exercising Your Rights

To exercise any of these rights, email us at support@talktopc.com. Account holders can also export their data and delete their account from the Privacy section of their account settings. We will verify your identity before acting on a request, and will respond within 30 days (GDPR) or 45 days (CCPA).

8. DATA SECURITY

We implement industry-standard security measures to protect your data:

• Encryption of data in transit (TLS/SSL)
• Encryption at rest for voice recordings stored in Amazon S3
• Access controls and authentication mechanisms
• Regular security assessments and monitoring
• Secure infrastructure hosted on reputable cloud providers

While we strive to protect your data, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

9. DATA BREACH NOTIFICATION

In the event of a data breach affecting your personal information, we will notify affected users and relevant authorities within 72 hours of becoming aware of the breach, as required by applicable law. Notification will be sent via email and/or through our Service.

10. CALL RECORDING

10.1 User-Controlled Recording

Call recording is an optional feature that you control on a per-agent basis. When you enable recording, you (the user) act as the data controller for the recordings, and we act as the data processor.

Separately from recording, a text transcript of every conversation is kept so that the Agent can hold a coherent conversation and so that you can review it afterwards. Turning recording off does not turn off transcripts.

10.2 Your Responsibilities

If you enable call recording, you are responsible for:

• Informing callers that calls may be recorded (e.g., through your agent's greeting or our per-agent disclaimer feature)
• Obtaining consent where required by applicable laws
• Complying with local, state, and federal recording consent laws

10.3 Recording Retention and Access

Recordings are deleted automatically within one year. You can download recordings at any time before deletion.

11. COOKIES AND TRACKING

We use cookies and similar tracking technologies to improve your experience, analyze usage patterns, and deliver targeted content. Before placing non-essential cookies, we obtain your consent through our cookie consent banner. You can manage your cookie preferences at any time through the banner or your browser settings. Disabling certain cookies may affect Service functionality.

We use two categories of cookie. Strictly necessary cookies keep you signed in and allow the site to function; they cannot be switched off. Analytics cookies, which are set only if you accept them, are placed by the providers listed in Section 4.2. The consent banner's Manage preferences panel shows the current categories and lets you change your choice at any time.

12. CHILDREN'S PRIVACY

Our Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately at support@talktopc.com.

13. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. We will notify you of material changes by email and/or by posting a notice on our Service. Your continued use of the Service after changes become effective constitutes acceptance of the revised policy.

14. CONTACT US

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

TTP GO LTD
Privacy Officer: Yinon Shiryan
Email: support@talktopc.com
Address: 6 Smilanski Herzliya Israel, 4636228
Website: https://talktopc.com

© 2026 TTP GO LTD. All rights reserved.