Privacy Policy

Last updated July 1, 2026

Who we are

Vocryn AI provides administrative call-automation software to healthcare practices. This policy covers the information we collect through our website and through the Casey service. Where we handle protected health information (PHI) on behalf of a clinic, we do so as a business associate under a signed Business Associate Agreement, and that agreement governs.

Information we collect

Through our website we collect what you choose to give us in a form: your name, work email, phone number, practice name, and the software you use. We also collect basic technical information such as browser type, approximate region, and which pages you viewed.

Through the Casey service we process call audio, transcripts, and the information a caller provides to complete an administrative request — for example a name, date of birth, appointment preference, insurance details, or pharmacy. Some of this is PHI.

How we use it

Website information is used to respond to your enquiry, arrange a demo, and improve our site. Service information is used solely to deliver the service to the clinic that engaged us, and to support and secure that service.

We do not sell personal information. We do not use your patient data to train shared or third-party AI models.

Legal bases and roles

For website enquiries we act as a controller of your business contact details. For call data processed on behalf of a clinic, the clinic is the covered entity and we act as its business associate and processor, acting only on documented instructions.

Sharing

We share information only with subprocessors necessary to deliver the service — such as cloud hosting, speech recognition, language modelling, and telephony providers — each under contract and, where PHI is involved, under a BAA. A current subprocessor list is available on request.

We may disclose information where legally required, or to protect the rights and safety of people or of Vocryn.

Storage, location, and retention

All processing and storage takes place in United States regions. No personnel outside the United States have access to call recordings or transcripts.

Retention is configurable by each clinic, including a zero-retention mode in which audio is discarded at the end of the call and only the structured outcome written to the clinic system is kept. Website enquiry records are kept for up to 24 months unless you ask us to delete them sooner.

Security

We use TLS 1.3 for data in transit and AES-256 for data at rest, with managed key rotation, role-based least-privilege access, single sign-on where available, and complete audit logging of access and configuration changes.

Your rights

Depending on where you live, you may have rights to access, correct, delete, or port your personal information, and to object to certain processing. Contact us and we will respond within the timeframe the applicable law requires.

If your request concerns PHI held on behalf of a clinic, please contact that clinic. As a business associate we will support them in responding, but we cannot action such requests directly.

Cookies

We use only what is needed to make the site work and to understand aggregate traffic. We do not run advertising trackers, and we do not sell or share information for cross-context behavioural advertising.

Call recording consent

Call recording is configured by each clinic. Roughly a dozen US states require all-party consent to record. Clinics are responsible for ensuring their disclosure language meets the requirements of their state, and we provide configurable announcements to support that.

Children

Our website is not directed to children. Where a clinic uses Casey for paediatric patients, that information is handled as PHI under the clinic’s BAA and its own privacy practices.

Changes

If we change this policy materially we will update the date above and, for service changes affecting clinics, notify the clinic administrator directly.

Questions

Write to care@vocryn.com or call 1-571-703-4510. For anything a compliance reviewer needs, ask for our security package and we will usually send it the same business day.

This page is provided for information and is not legal advice. Have your own counsel review any agreement before you sign it.