Trust and data · updated 19 October 2026
How Revvox treats your applicants. And their data, in plain words.
What Vira does on every call, who decides, what it cannot do, where data is kept and for how long. Only what runs today; anything else is marked. The legal detail is in our privacy policy, DPA and sub-processor list.
On every call
Consent, honesty and hours.
Checked by the system, not left to habit.
Consent first, opt-out always
The applicant agrees to be called when they apply, on your form or the job board's. Dial only calls applicants added with that consent, and checks the consent and opt-out record before every dial. Anyone who says stop is never called again by your workspace.Only at reasonable hours
Calls go out only inside the hours and days you allow, in the applicant's local time. Someone who applies at night is called the next morning. Two attempts at most.Only fair questions
Vira never asks about religion, caste, gender, marital status or health, and asks age only to confirm the applicant is 18 or over. You approve every question before calls start.In the applicant's language
14+ languages. You pick the language for each role.Every answer on record
Each call is recorded and transcribed, so every result can be checked against what the applicant actually said.
Who decides
A person decides every hire.
Vira screens; your team chooses.
Pass, Check or Not fit, with the reason
Every result shows why, in plain words, next to the applicant's own answer. For example: expects a higher salary than the band you set for the role.A person decides every Check
When an answer is unclear or outside your rules, the applicant waits as a Check for someone on your team, with the recording and transcript one click away.No automated rejection
Vira never tells an applicant they are rejected and never makes an offer. Not fit is a label for your team, with the reason; you can open it, listen and change it. Dial sends a Not fit applicant nothing unless your team sets up a follow-up.
What Vira can't do
The limits, stated up front.
So nobody is surprised later.
- Make a hiring decision or an offer. People on your team do that.
- Score faces, voices, accents or video. There is no AI video interview and no AI scoring of video.
- Watch for cheating or proctor a test.
- Call outside the hours you allow, or call anyone who has opted out.
- Ask about religion, caste, gender, marital status or health.
- Read or update your ATS or job board. Those integrations are not built; applicants arrive from a list, your careers form or a signed link.
- Run a coding round. That is in development, waitlist only.
- Clone anyone's voice. Revvox does not clone voices, and an applicant's recording is never used to make one.
Where data lives
Where it is stored.
And kept only as long as needed.
Database
Applicant, call and transcript records: MongoDB Atlas, Mumbai region.Files
Candidate videos, ID photos and uploaded files: Amazon Web Services, Mumbai region (ap-south-1).Call audio
The voice provider (ElevenLabs) runs the call and keeps the recording: in the United States, or in the Mumbai region for workspaces with that data residency switched on.Call analysis
Summaries and answer extraction run on OpenAI in the United States; the in-app assistant on Anthropic in the United States.Training
Your calls are never used to train or fine-tune a model.
How long we keep it
| What | Kept for |
|---|---|
| Call transcripts | 180 days by default; each workspace can set a shorter period |
| Call recordings | 90 days by default; each workspace can set a shorter period |
| Candidate videos | 90 days by default; each workspace can set a shorter period |
| ID photos | 30 days by default; each workspace can set a shorter period |
| Applicant records and results | While your account is open; after it closes, 30 days to export, then deleted within 30 days |
| Permission and do-not-call records | 7 years, kept on purpose as proof a call was allowed |
An applicant's data is erased on request, including the voice provider's copies of their calls. Every provider, what it sees and where it runs: sub-processor list.
Data rights
Who is responsible, briefly.
And what applicants can ask.
Who is responsible for what
Your company decides why applicants are called, so it is the controller of their data. Revvox processes it only on your instructions, under our data processing agreement.Applicants' rights
An applicant can ask to see, correct or delete their data, or withdraw consent. Saying stop on a call withdraws it at once. Requests that reach us are passed to you and acted on.Complaints
Email us with “Grievance” in the subject. We acknowledge within 7 days and resolve within 30 days. Applicants can also complain to the data protection authority where they live.Breaches
If a personal data breach happens, we inform the authorities and affected people as the law requires, and tell affected customers without undue delay.
Payments
Paid through Dodo Payments.
The merchant of record, with a tax invoice.
Dodo Payments is the merchant of record
You pay Dodo Payments, by card or a local payment method, and get a tax invoice. Revvox does not store card numbers.No surprise bills
You buy credits up front. At zero credits, calls stop; nothing is charged after the fact.Cancel anytime
No lock-in and no minimum. A monthly plan runs to the end of the month you paid for.
Not in place yet
What we don't have yet.
Said here before you have to ask.
SOC 2 or ISO 27001
No certification yet. We will name it here when we have one.Independent penetration test
Not done yet.Do-not-call registry checks from the product
Shipping next. Until then, consent on your form is what allows the call.Anything not on this page
Ask us. We would rather say we don't know than guess.
Encryption, access control and how to report a vulnerability: security.
Questions
Trust questions,
answered straight.
Is an AI deciding who gets hired?
No. Vira asks the questions and marks each applicant Pass, Check or Not fit with the reason. A person on your team decides every Check, makes every offer, and can open any result, listen to the call and change it.
Can an applicant stop the calls?
Yes. Saying stop on a call ends every future call from your workspace at once. They can also ask you, or email us, to have their data deleted.
Do you train AI models on our calls?
No. Your calls are never used to train or fine-tune a model.
Is Revvox SOC 2 certified?
No. We have no SOC 2 or ISO 27001 certification yet, and no independent penetration test yet. The security page lists what runs today.
Something you need is not on this page?
Ask us at hello@revvox.io. We would rather say we don't know than guess.
Ready to screen every applicant, at every scale?
Get started, or book a demo. Cancel anytime.