Back

Privacy Policy

Last updated: February 25, 2026

1. Introduction

InCoko ("we," "us," or "our") is a Conversational AI Studio operated by Biz Digital IT. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform to create, test, and deploy voice AI agents.

By accessing or using InCoko, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the platform.

2. Information We Collect

Account Information

Name, email address, workspace name, and authentication credentials managed through AWS Cognito.

Voice Call Data

Call recordings, transcripts, call duration, caller phone numbers, and AI-generated call insights (summaries, sentiment, topics, action items).

Agent Configuration

Business knowledge bases, agent behavior settings, greeting scripts, call flows, evaluation criteria, and industry-specific content you provide.

Appointment & Campaign Data

Appointment details, campaign leads (names, phone numbers, custom fields), qualification results, and scheduling preferences.

Usage Data

Pages visited, features used, agent performance metrics, and analytics data.

Technical Data

IP address, browser type, device information, and cookies/local storage used for essential platform functionality.

3. How We Use Your Data

  • Service Delivery: To operate, maintain, and improve the InCoko platform, including agent creation, testing, and deployment.
  • AI Processing: To power voice AI agents using your configuration data, generate call insights, and provide AI chat assistance during agent setup.
  • Communication: To send service-related notifications, respond to access requests, and provide customer support.
  • Security: To detect, prevent, and address fraud, abuse, and technical issues.
  • Legal Compliance: To comply with applicable laws, regulations, and legal processes.

4. Third-Party Processors

We use the following third-party services to process your data:

ServicePurposeData Processed
AWS CognitoAuthenticationEmail, password (hashed)
Amazon BedrockAI processingAgent config, chat messages, transcripts
TwilioVoice callsPhone numbers, call recordings, call metadata
Amazon S3File storageRecordings, exports, uploaded files
Amazon SESEmail deliveryEmail addresses, notification content

5. Data Retention

We retain your data for as long as your account is active or as needed to provide services. You may request deletion of your data at any time by contacting us. Upon account deletion, we will remove your personal data within 30 days, except where retention is required by law.

Call recordings and transcripts are retained according to your workspace settings. We are developing automated data retention policies to give you more control over data lifecycle.

6. Your Rights

CCPA Rights (California Residents)

  • Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected.
  • Right to Delete: Request deletion of your personal information.
  • Right to Portability: Receive your data in a portable format.
  • Right to Opt-Out of Sale: We do not sell your personal information.
  • Non-Discrimination: We will not discriminate against you for exercising your rights.

GDPR Rights (EU/EEA Residents)

  • Right of Access: Request a copy of your personal data.
  • Right to Rectification: Request correction of inaccurate data.
  • Right to Erasure: Request deletion of your data ("right to be forgotten").
  • Right to Restrict Processing: Request limitation of how we process your data.
  • Right to Data Portability: Receive your data in a machine-readable format.

To exercise any of these rights, contact us at privacy@incoko.ai.

7. State-Specific Privacy Rights

California (CCPA/CPRA)

California residents have the right to: know what personal information is collected and how it is used; request deletion of personal information; opt-out of the sale or sharing of personal information (we do not sell personal information); limit the use of sensitive personal information; and non-discrimination for exercising privacy rights. To submit a verifiable consumer request, contact us at privacy@incoko.ai. We will verify your identity before processing requests. You may also designate an authorized agent to make requests on your behalf.

Virginia (VCDPA)

Virginia residents have the right to: access and obtain a copy of personal data; request deletion of personal data; correct inaccuracies; opt out of processing for targeted advertising, sale, or profiling. You may appeal our decision regarding your request by contacting us at the email above. If your appeal is denied, you may contact the Virginia Attorney General.

Colorado (CPA)

Colorado residents have the right to: opt out of targeted advertising, sale of personal data, and certain profiling; access, correct, and delete personal data; and obtain a portable copy of personal data. You may designate an authorized agent or use a universal opt-out mechanism. Appeals may be directed to the Colorado Attorney General.

Connecticut (CTDPA)

Connecticut residents have the right to: access, correct, and delete personal data; obtain a portable copy; opt out of targeted advertising, sale, and profiling. To exercise these rights, contact us at the email above. Appeals may be directed to the Connecticut Attorney General.

8. Cookies & Local Storage

We use cookies and browser local storage for the following purposes:

KeyCategoryPurpose
incoko-auth-tokenEssentialAuthentication session (cookie)
incoko-consentEssentialCookie consent preferences (cookie)
themeEssentialDark/light mode preference
incoko-wizard-stateFunctionalAgent wizard draft progress
incoko-tour-*FunctionalProduct tour completion tracking

You can manage your cookie preferences through the consent banner or in Settings > Privacy.

9. International Transfers

Your data is processed and stored in the United States (AWS us-east-1 region). If you are accessing InCoko from outside the United States, your data will be transferred to and processed in the US. By using the platform, you consent to this transfer.

10. Children's Privacy

InCoko is not directed at individuals under the age of 13 (or 16 in the EU/EEA). We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will promptly delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the platform after changes constitutes acceptance of the updated policy.

12. Contact Information

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us: