Privacy Policy
How Vesper AI collects, uses, stores and protects personal and patient data across our services.
Last updated: 22 April 2026
1. Who we are
Vesper AI ("we", "us", "our") provides AI voice receptionist software to private healthcare clinics. This policy explains how we process personal data when clinics use our services and when patients interact with our voice agents.
2. Data we process
We process the following categories of personal data:
- Caller details such as name, phone number and email address.
- Call audio recordings, transcripts and call metadata (time, duration, outcome).
- Appointment details, treatment interest and scheduling preferences.
- Clinic staff account information for users of our dashboard.
3. How we use data
We use personal data to operate the AI receptionist on behalf of the clinic, book and manage appointments, generate transcripts and analytics, improve service quality, and comply with our legal obligations.
4. Legal basis
We process personal data on the basis of our contract with the clinic (data controller), the clinic's legitimate interests in operating their practice, and where applicable, explicit consent obtained from the caller at the start of the call.
5. Data residency & security
All personal data is stored within the UK and EU. We use encryption in transit and at rest, role-based access controls, and regular security reviews. We are GDPR compliant and operate appropriate technical and organisational measures.
6. Sharing
We share data only with sub-processors strictly required to deliver the service (such as cloud hosting and telephony providers) under written data processing agreements. We never sell personal data.
7. Retention
Call recordings and transcripts are retained for the period agreed with the clinic, after which they are securely deleted. Account data is retained for the duration of the clinic's subscription and a short period afterwards for legal and audit purposes.
8. Your rights
Under UK and EU data protection law you have the right to access, rectify, erase, restrict, port or object to the processing of your personal data. To exercise these rights, contact your clinic (the data controller) or email us at hello@vesperlabs.ai.
9. Contact
For any privacy-related questions, please email hello@vesperlabs.ai.