DecreaMedia · Legal
Privacy Policy
Contents
1.-Who we are
DecreaMedia ([LEGAL ENTITY / Erick Untiveros Lazaro]), based in Huancayo, Junín, Peru, develops and distributes the Vocalia and Zellia WordPress plugins. Contact: privacy@decreamedia.com.
2.-Roles & scope
This policy covers two distinct relationships:
- Our customers (people who buy and install the plugins). Here we act as a controller for the limited account, license, and billing data we need.
- End visitors (people who talk to the voice agent on a customer’s website). Here the website owner is the controller; DecreaMedia and OpenAI act as processors/sub-processors that handle the voice session on the owner’s behalf and instructions.
3.-Data we handle
| Category | Examples | From whom |
|---|---|---|
| License & account | Email, site domain, plan tier, license key, redemption status | Customers |
| Billing | Order ID, plan, transaction status (card data is held by the payment provider, not us) | Customers |
| Configuration | API key (stored encrypted), agent settings, knowledge-base content you provide | Customers |
| Voice session | Audio streamed during a conversation, transcripts, and derived responses | End visitors |
| Technical | Session tokens, connection logs, timestamps, error diagnostics | Both |
4.-How voice data flows
Because the plugins are BYOK and real-time, it helps to see exactly what happens during a conversation:
- An end visitor starts a conversation with the voice agent on the customer’s website.
- Our backend at agente.emprenda.pro issues a short-lived (ephemeral) session credential so the browser can connect securely.
- The visitor’s browser connects directly to OpenAI’s Realtime API over WebRTC, using the website owner’s OpenAI API key.
- Audio and transcripts are processed by OpenAI under OpenAI’s terms and data policies to generate the agent’s spoken responses.
- We store the API key in encrypted form solely to establish this connection, and we log limited technical/diagnostic data.
We do not sell voice data, and we do not use conversation content to train any model. Processing of the audio itself by the AI Provider is governed by OpenAI’s policies.
5.-Why we process data
- To provide the service — validate licenses, establish voice sessions, deliver features (performance of contract).
- To bill and support — process purchases, respond to support requests (contract / legitimate interests).
- To secure and improve — detect abuse, debug errors, maintain reliability (legitimate interests).
- To comply with law — meet legal and tax obligations.
6.-Third-party processors
We share data only with providers that help us run the service:
| Provider | Purpose |
|---|---|
| OpenAI | Realtime voice processing (via your API key) |
| AppSumo | Purchases and license redemption (AppSumo customers) |
| Dodo Payments · Paddle | Direct payment processing / merchant of record |
| Resend | Transactional email (e.g., purchase confirmations) |
| Affonso | Affiliate referral tracking |
| Hosting provider Banahosting | Backend & licensing infrastructure hosting |
7.-Data retention
We keep license and billing records for as long as your license is active and as required for legal, tax, and accounting purposes. Encrypted API keys are retained while your integration is active and are deleted on request or when you remove the plugin. Technical logs are kept for a limited period ([e.g., 30–90 days]) for security and debugging.
8.-International transfers
We operate from Peru and use providers that may process data in other countries, including the United States (e.g., OpenAI, payment and email providers). Where required, transfers are made under appropriate safeguards such as the providers’ standard contractual clauses.
9.-Security
We use technical and organizational measures to protect data, including encryption of API keys at rest, short-lived session credentials, and access controls on our backend. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
10.-Your rights
Depending on your location, you may have rights to access, correct, delete, restrict, or object to the processing of your personal data, and to data portability. To exercise these rights, contact us at privacy@decreamedia.com. End visitors of a website should contact that website’s owner first, since the owner controls that data.
11.-Website owners’ duties
If you install Vocalia or Zellia on your site, you are responsible for lawfully handling your visitors’ data. This includes displaying your own privacy notice, disclosing that an AI voice agent is in use, and obtaining any consent required in your jurisdiction (for example, for processing voice recordings). You must configure your OpenAI account and any data-processing settings in line with your obligations.
12.-Children
The plugins are business tools not directed at children. We do not knowingly collect personal data from children. Website owners are responsible for compliance where their audience may include minors.
13.-Changes
We may update this policy and will revise the «Last updated» date above. Material changes will be communicated where reasonably possible.
14.-Contact
DecreaMedia — privacy@decreamedia.com
Huancayo, Junín, Peru