M
Memox
Try Memox live

Privacy Policy

Last updated: May 31, 2026

1. Who We Are

Memox Inc. (“Memox,” “we,” “our,” or “us”) provides AI voice and chat agents for businesses. We are the data controller responsible for the personal data described in this policy. This policy explains what we collect when you visit memox.io, interact with our AI chat or voice demos, book a demo, or otherwise contact us, and what rights you have over that data.

Registered address: 43253 Brookford Sq, Ashburn, VA 20147, US. For any privacy question or request, contact us at [email protected].

2. Information We Collect

Information you give us:

  • Contact details (name, email, phone number) when you book a demo, request a call, or get in touch.
  • Business details you enter to tailor a demo (your industry and what you sell or provide).
  • The content of messages you send us, including chat conversations with our AI agent.

Chat and voice interaction data:

  • Transcripts and metadata of conversations you have with the Memox AI chat agent.
  • If you use the “Call me” feature, the phone number you provide and call-related data (including call audio and metadata) processed through our telephony provider (Telnyx) to place the call.

Information collected automatically:

  • Technical data such as IP address, browser type, device information, and approximate location.
  • Usage data such as pages viewed, referring site, links clicked, and time on page.
  • Cookies and similar technologies (see Section 4).

3. How We Use Your Information

We use personal data for the following purposes, relying on the legal bases noted (where the GDPR applies):

  • Provide and operate our website, demos, and services — performance of a contract / legitimate interests.
  • Respond to inquiries and schedule and conduct demos — legitimate interests (managing pre-sales communications).
  • Place a requested call via the “Call me” feature using the phone number you provide — your request / consent. Call audio and metadata are processed through our telephony provider (Telnyx).
  • Measure and improve site and product performance through analytics — consent (where required) / legitimate interests.
  • Market our products, including advertising and measurement on third-party platforms — consent.
  • Maintain security, prevent fraud, and comply with legal obligations — legal obligation / legitimate interests.

4. Cookies & Tracking Technologies

We use cookies and similar technologies in three categories. Non-essential cookies load only after you accept them in our cookie banner; we use consent signals so that analytics and advertising tools respect your choice. When you decline advertising cookies, some tools (including Google via Consent Mode) may still receive an anonymized or aggregated signal for measurement; no advertising identifiers are transmitted in that case.

  • Strictly necessary — required for the site to function and to remember your cookie choice.
  • Analytics — to understand site usage (PostHog and Google Analytics).
  • Advertising — to measure and personalize ads (Google Ads and the Meta Pixel).

You can change or withdraw your consent at any time by clicking the “Cookie Preferences” link in the footer of any page, which re-opens the consent banner. You can also clear your browser’s site data for memox.io, which resets your saved preference and causes the banner to reappear on your next visit. Withdrawing consent does not affect processing carried out before you withdrew it.

5. How We Share Your Information

We do not sell your personal data to third parties for their own commercial use. We do share certain data with advertising platforms (Google, Meta) for measurement and targeting, which may qualify as a “sale” or “sharing” under some U.S. state laws — see Section 8 for your opt-out rights. We share personal data with:

  • Service providers (processors) acting on our instructions, including: hosting and storage (Cloudflare), our product backend (hub.memox.io, operated by Memox Inc.), analytics (PostHog, Google), advertising and measurement (Google, Meta), telephony for the “Call me” feature (Telnyx).
  • Legal and compliance recipients where required by law, regulation, or legal process, or to protect our rights and users.
  • Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this policy.

Some advertising and analytics activity may constitute a “sale” or “sharing” of personal information for cross-context behavioral advertising under certain U.S. state laws. See Section 8 for how to opt out.

6. International Data Transfers

We and our service providers may process your personal data in the United States and other countries outside your own. Where we transfer personal data out of the European Economic Area, the United Kingdom, or Switzerland, we rely on the European Commission’s Standard Contractual Clauses. For transfers to the United Kingdom we rely on the UK International Data Transfer Addendum to those clauses, and for transfers involving Switzerland we rely on the Standard Contractual Clauses as recognized by the Swiss Federal Data Protection and Information Commissioner (FDPIC). You may contact us for copies of these safeguards.

7. Data Retention

We keep personal data only for as long as necessary for the purposes set out in this policy, including to provide our services, comply with legal obligations, resolve disputes, and enforce agreements. When data is no longer needed, we delete or anonymize it.

Indicative retention periods: demo/contact inquiry data — up to 24 months after last interaction; chat transcripts — up to 12 months; call audio and metadata — up to 90 days unless a longer period is needed to resolve a dispute; analytics data — per provider defaults (Google Analytics ~14 months, PostHog ~12 months). You may request erasure at any time.

8. Your Privacy Rights

EEA, UK, and Switzerland (GDPR / UK GDPR): You have the right to access, rectify, erase, restrict, or object to the processing of your personal data; the right to data portability; and the right to withdraw consent at any time. You also have the right to lodge a complaint with your local data protection supervisory authority. For example: in Germany, your state authority or the BfDI (bfdi.bund.de); in Austria, the Datenschutzbehörde (dsb.gv.at); in the UK, the ICO (ico.org.uk). A full list of EEA authorities is at edpb.europa.eu.

California (CCPA / CPRA): You have the right to know, access, correct, and delete your personal information; the right to opt out of the sale or sharing of personal information; and the right not to be discriminated against for exercising your rights. To opt out of sale or sharing, or to make any request, contact us at [email protected].

Virginia (VCDPA): If you are a Virginia resident, you have the right to access, correct, delete, and obtain a portable copy of your personal data; to opt out of targeted advertising and profiling; and to appeal a refusal of your request. To exercise these rights, contact us at [email protected].

To exercise any right, email us at [email protected]. If you are in the EEA, UK, or Switzerland, we will respond within one month of receiving your request; we may extend this by up to two further months for complex or multiple requests and will notify you within the first month. If you are in California or Virginia, we will respond within 45 days, extendable by a further 45 days with notice. We may need to verify your identity before acting on a request.

9. Data Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Children’s Privacy

Our website and services are intended for businesses and are not directed to children. We do not knowingly collect personal data from children. If you believe a child has provided us personal data, contact us and we will delete it.

11. Changes to This Policy

We may update this policy from time to time. We will post the updated version on this page and revise the “Last updated” date above. Material changes will be communicated where required by law.

12. Contact Us

For questions about this policy or your personal data, or to exercise your rights, contact:

Privacy Policy | Memox