Privacy Policy

This notice describes the public website and BCG-operated software at a high level. A customer Data Processing Addendum, product notice, or applicable order form may add more specific terms.

1. Who is responsible

BCG Engineering, LLC, 131 Continental Dr, Suite 305, Newark, DE 19713, United States, operates this website and provides software and orchestration tools. Contact: contact@bcg-engineering.com.

2. Information we collect

We may process contact details, inquiry content, account and billing details, workspace configuration, support messages, device and log data, IP address, browser information, security events, and information submitted through forms. When a customer enables voice or AI workflows, the service may process phone numbers, call detail records, recordings, transcripts, prompts, scripts, contact-list metadata, agent inputs and outputs, and integration events.

3. Why we use information

Provide, maintain, secure, troubleshoot, and support the service.
Respond to inquiries and manage professional relationships.
Prevent fraud, abuse, unauthorized access, and unlawful traffic.
Measure reliability and improve operations where permitted.
Meet legal, accounting, audit, dispute-resolution, and enforcement obligations.

4. Roles and customer instructions

For customer content processed on a customer’s behalf, the customer generally determines the purposes and means of processing and BCG acts as a service provider or processor where applicable. The customer is responsible for notices, lawful bases, consents, data minimization, retention, deletion, and rights requests relating to people in its lists or calls. BCG processes that content only to provide, secure, and support the contracted service, subject to the agreement and documented instructions.

5. Voice, recording and AI data

Customers must provide all required disclosures and obtain all required consents before recording, transcribing, analyzing, cloning, or storing a voice or conversation. Voice characteristics can be biometric or sensitive under some laws. Customers must not submit regulated data unless the required addendum, configuration, access control, retention, and provider terms are in place. AI output is not automatically accurate or lawful.

6. Providers and transfers

We may use hosting, communications, telephony, AI-model, storage, analytics, support, and security providers. Customer content may be processed in countries where those providers operate. Where required, appropriate contractual transfer mechanisms and data-processing terms should be used. The selected provider’s privacy notice and service terms also apply.

7. Retention and deletion

We retain information only as long as reasonably necessary for the stated purpose, the customer’s configured retention period, contractual obligations, security investigation, dispute resolution, or legal requirements. Customers must configure call, transcript, and log retention to the minimum necessary and request deletion when appropriate. Backups and legal records may persist for limited periods.

8. Security

We use reasonable administrative, technical, and organizational safeguards appropriate to the service, including access controls, encrypted transport where supported, monitoring, and incident response practices. No internet service is completely secure. See Security for the public security summary.

9. Cookies and analytics

The website may use essential storage, server logs, or limited analytics needed for operation, security, and performance. Any non-essential tracking should be enabled only with the consent required in the visitor’s jurisdiction. Browser settings can restrict cookies, although some functions may stop working.

10. Rights and requests

Depending on location, individuals may request access, correction, deletion, restriction, portability, or objection, or withdraw consent where applicable. Send requests to contact@bcg-engineering.com. We may verify identity and, for customer-controlled data, coordinate with the relevant customer. Individuals may also contact their local data-protection authority.

11. Children and sensitive uses

The service is intended for business use and is not directed to children. Do not use it to make decisions about employment, credit, housing, healthcare, insurance, education, law enforcement, or other high-impact contexts without documented legal authorization, safeguards, human review, and any required agreement.

12. Changes

We may update this policy when our processing or legal obligations change. The effective date is shown below; material changes will be communicated where required.

Last updated: September 4, 2026. This notice is general information and is not legal advice.