Last updated: July 8, 2026
Privacy Policy.
Peekinduck AI ("Peekinduck", "we", "us") is a cloud-based SaaS platform that lets software vendors deploy AI-powered voice agents: interactive demo agents that guide prospects through a live product demo, and an in-product assistant widget that answers user questions and executes in-app actions. This policy explains how we handle your data and the choices you have.
How we protect your data
Encryption
- All traffic is enforced over TLS 1.2 or higher.
- Real-time audio streams are encrypted end to end by the WebRTC transport layer (DTLS-SRTP).
- Databases are encrypted at rest with AES-256; files in object storage use server-side encryption.
Access control
- Passwords are bcrypt-hashed and never stored in plaintext. OAuth sign-in via Google or Microsoft is also available.
- Sessions use short-lived access tokens with rotating refresh tokens, transmitted over HTTPS only.
- Access is organization-scoped: a user can only access data belonging to their own organization, with no cross-tenant access by design.
- Roles (owner, admin, member) restrict destructive operations to owner and admin roles.
- Widget sessions receive a short-lived token scoped to that session only, and each widget agent enforces an origin allowlist.
Data retention and deletion
- Session transcripts and analytics are retained for the duration of the customer's subscription.
- Customers can delete individual sessions, visitors, or agents at any time via the dashboard or API.
- On account deletion, all associated data is purged.
Where your data lives
The platform is hosted in secure cloud data centers in the United States, with databases and file storage encrypted at rest. No Peekinduck software is installed on your infrastructure; the web widget is a lightweight JavaScript file loaded from our CDN.
Third-party sub-processors
We rely on a small set of carefully selected service providers to operate the platform:
| Category | Role | Data shared |
|---|---|---|
| Language model providers (OpenAI, Google, Anthropic) | Conversation inference | Session transcript turns |
| Speech and voice partners | Speech recognition, voice synthesis | Live session audio, agent response text |
| Real-time communications infrastructure | Encrypted audio/video transport | Real-time session streams |
| Cloud hosting, storage, and CDN providers | Application hosting, file storage, content delivery | Platform data and documents |
| Stripe | Payment processing | Billing info only |
No customer data is used to train third-party models under standard API agreements. A complete, current sub-processor list is available to customers and prospective customers on request, and is included in our data processing agreements.
Your choices
- Review, export, or delete session data from your dashboard or via the API.
- Delete your account to purge all associated data.
- Contact us for data processing agreements or security questionnaires.
Contact
For privacy questions, data processing agreements, or further technical queries, contact the Peekinduck AI team.
Changes to this policy
We may update this policy from time to time. Material changes will be reflected on this page with an updated date above.