Privacy Policy

1. Bellvox’s role when processing information

Bellvox may process personal information in two different capacities.

1.1 Information we process for our own business purposes

Bellvox determines how and why personal information is processed when the information relates to activities such as:

• Operating our website;
• Managing customer accounts;
• Providing demonstrations;
• Managing subscriptions and billing;
• Responding to inquiries;
• Providing customer support;
• Improving and securing our Services;
• Conducting sales and marketing activities; and
• Meeting legal and regulatory obligations.

In these circumstances, Bellvox generally acts as a data controller, business, or similar responsible entity under applicable privacy laws.

1.2 Information we process on behalf of customers

Bellvox customers may configure AI receptionists to communicate with their callers, leads, patients, customers, employees, or other individuals.

When Bellvox processes calls, recordings, transcripts, contact information, appointment details, or other information on behalf of a customer, the customer generally decides:

• Why the information is collected;
• Which individuals are contacted;
• What the AI agent says and asks;
• Whether calls are recorded;
• How long information should be retained;
• Which integrations receive the information; and
• How the information will be used.

In these circumstances, Bellvox generally acts as a data processor, service provider, or similar entity acting on the customer’s instructions.

Individuals who wish to exercise rights concerning information controlled by a Bellvox customer should normally contact that customer directly. Bellvox will reasonably assist customers with valid privacy requests where required.

2. Information we collect

The information Bellvox collects depends on how you interact with the Services.

2.1 Information you provide directly

We may collect information that you voluntarily provide, including:

• Full name;
• Business name;
• Job title;
• Email address;
• Telephone number;
• Country or location;
• Account login information;
• Password or authentication details;
• Billing contact information;
• Subscription information;
• Support inquiries;
• Product feedback;
• Demo booking information;
• Communication preferences;
• Information submitted through website forms;
• Information shared during meetings or demonstrations; and
• Any other information you choose to provide.

We ask that you do not provide sensitive personal information unless it is necessary, permitted by law, and appropriate for the intended use of the Services.

2.2 Account and workspace information

When a customer creates or manages a Bellvox account, we may collect:

• User and administrator names;
• Business email addresses;
• Telephone numbers;
• User roles and permissions;
• Workspace identifiers;
• Team membership;
• Account settings;
• Authentication records;
• Login history;
• Security events;
• Subscription plan;
• Usage limits; and
• Customer configuration information.

2.3 Voice-call and conversation information

When an individual interacts with a Bellvox-powered AI receptionist, we may process information such as:

• Caller telephone number;
• Recipient telephone number;
• Date and time of the call;
• Call duration;
• Call status;
• Audio recordings;
• Voice data;
• Speech-to-text transcripts;
• AI-generated responses;
• Call summaries;
• Sentiment or conversation classifications;
• Reasons for calling;
• Questions and requests;
• Appointment information;
• Contact information provided during the call;
• Customer-support details;
• Lead qualification responses;
• Call-transfer information;
• Agent performance information; and
• Technical data associated with the interaction.

Whether a call is recorded depends on the customer’s configuration, the Services being used, and applicable law.

Bellvox customers are responsible for providing any legally required notices and obtaining any legally required consent before recording, transcribing, analyzing, or otherwise processing calls.

2.4 Appointment and scheduling information

When Bellvox assists with appointment scheduling, we may process:

• Name;
• Telephone number;
• Email address;
• Requested service;
• Appointment date and time;
• Time zone;
• Assigned employee or location;
• Calendar availability;
• Rescheduling or cancellation requests;
• Appointment notes;
• Reminder preferences; and
• Information required by the customer to complete the booking.

2.5 Lead and customer information

Customers may use Bellvox to qualify leads, respond to inquiries, or collect information from potential customers. This information may include:

• Contact details;
• Company information;
• Product or service interests;
• Requested budget;
• Preferred time to be contacted;
• Location;
• Qualification responses;
• Communication history;
• Sales status; and
• Notes supplied by the caller or customer.

2.6 Information from connected services

Customers may connect Bellvox to third-party applications, including:

• Customer relationship management platforms;
• Calendar services;
• Scheduling platforms;
• Telephone providers;
• Email services;
• Messaging platforms;
• Help-desk platforms;
• Workflow automation services;
• Customer databases; and
• Other business applications.

Depending on the permissions granted by the customer, Bellvox may receive or transmit contact records, calendar availability, appointment details, customer notes, lead information, task information, communication history, support tickets, user identifiers, and authentication tokens.

Bellvox only accesses information from connected services according to the permissions granted and the customer’s configuration. Customers may disconnect integrations through the applicable platform or Bellvox account settings, where available.

2.7 Payment information

When you purchase Bellvox Services, payment information may be collected and processed by our payment provider. Bellvox may receive limited information such as billing name, billing address, payment method type, last four digits of a payment card, transaction status, invoice information, subscription amount, and payment dates.

Bellvox does not intend to directly store complete payment-card numbers or card security codes unless explicitly stated otherwise.

2.8 Website and device information

When you visit or use the Bellvox website or platform, we may automatically collect your Internet Protocol address, browser type, device type, operating system, language settings, approximate location derived from an IP address, pages visited, links selected, referring website, session duration, date and time of access, login activity, error logs, device identifiers, cookie identifiers, and product usage events.

2.9 Customer-support information

When you contact Bellvox support, we may collect your name and contact information, account or workspace information, the content of your request, attachments, screenshots, call or meeting recordings, troubleshooting information, device or browser information, and communications between you and Bellvox.

2.10 Information from business partners and public sources

We may receive professional or business-related information from referral partners, resellers, event organizers, business directories, public company websites, professional networking platforms, marketing partners, data providers, and other lawful public or commercial sources. This may include names, business contact details, job titles, company information, and professional interests.

2.11 Bellvox mobile app

Bellvox customers and their team members can use the Bellvox mobile app for iPhone and Android to follow and manage their workspace. In addition to the information described above, the app processes:

• Microphone audio, only while you place a call with the app’s built-in dialer. The audio is streamed to our telephony provider to carry the call; the app does not record it. Call recording, where it is turned on for a workspace, is described in section 9.
• On a phone where the app sends notifications, a push notification token for your device, issued by our push notification provider, so we can send you the alerts you choose. Notifications show what happened and a partly hidden phone number, never the text of a message or a transcript. You can turn activity updates off in the app’s Menu, and all notifications off in your device settings. The token is removed when you sign out of the app.
• Call-quality diagnostics from the dialer, processed by our telephony provider to keep calls working.
• What you type to Otto, the in-app assistant. Otto answers with the help of an outside AI service. What you type, and the Bellvox account data Otto needs to answer (such as your calls, messages, contacts and agents), is sent to that AI service to produce the reply. The app asks for your permission before your first message to Otto.
• Reports you send about AI-generated content (the in-app assistant’s answers, AI call summaries and your agents’ AI replies), including the reported text and, for the assistant, the question before it, so we can review them.

The app contains no advertising, does not track you across other companies’ apps or websites, and does not collect your precise location.

You can ask us to delete your account and its data from inside the app: open Menu, then Delete account, then Request deletion. The app sends the request to us and signs you out. If it cannot send the request, it opens our deletion page instead. If you own a workspace, we contact you about its data before anything is removed. We carry out each request by hand and complete it within 30 days. bellvox.ai/delete-account.html explains what is deleted, what may be kept, and how to ask by email instead.

2.12 WhatsApp, Facebook Messenger and Instagram (Meta)

Bellvox customers can connect their WhatsApp Business Account, Facebook Page or Instagram professional account to Bellvox. They do this through Meta’s own sign-in window (Facebook Login and WhatsApp Embedded Signup). The customer chooses which accounts and permissions to share, and Bellvox then answers and sends messages on those accounts for the customer.

What we receive about the connected business

When a business connects, Bellvox receives from Meta:

• an access token, which lets Bellvox act for that business;
• the identifiers and names of the accounts the business chose;
• for WhatsApp: the phone number, display name, name status and quality rating, and the business’s message templates with their review status;
• for Facebook Pages and Instagram accounts: the profile picture, link and follower count;
• whether the connection still works.

Tokens are kept encrypted in a secure store. They are never shown to anyone, including the business, and are deleted when the business disconnects. For WhatsApp, Bellvox also keeps the number’s two-step verification PIN, encrypted.

What we receive about people who message the business

When someone writes to a connected business, Bellvox receives:

• the identifier Meta gives that person for that business (their WhatsApp phone number, or a page-scoped or Instagram-scoped id);
• their name as shown on that platform (their WhatsApp profile name, first and last name on Messenger, or name and username on Instagram);
• the content and time of each message;
• delivery and read updates.

Bellvox also stores the replies sent from the business’s account, whether written by the business’s AI agent, by its staff in Bellvox, or by its staff in Meta’s own apps.

How we use it

Only to provide the messaging service the business asked for:

• to show the conversations in the business’s Bellvox inbox;
• to let the business’s AI agent reply (the message and the conversation so far are sent to our AI model provider to write the reply; see section 7.1);
• to let the business’s staff reply;
• to send the WhatsApp templates and campaigns the business sets up;
• to show the business its message counts and the health of the connection;
• to honour opt-outs.

When someone sends STOP, Bellvox stops automatic messages to them on that channel and keeps a record of the opt-out so it is respected. Sending START turns them back on.

What we don’t do

Bellvox does not:

• use data from Meta’s platforms for advertising;
• sell it;
• share it with data brokers;
• use it to build profiles of people beyond the business’s own conversation history;
• use it to train AI models;
• share one business’s Meta data with another business.

Who controls this data

For these messages, the business that uses Bellvox decides what is collected and how it is used, and Bellvox acts on its behalf (see section 1.2). Meta’s own processing is governed by Meta’s privacy policies.

3. Sensitive personal information

Depending on how a customer configures Bellvox, calls or integrations could contain sensitive information. Sensitive information may include:

• Health or medical information;
• Financial information;
• Government identifiers;
• Account credentials;
• Precise location information;
• Biometric information;
• Information about children;
• Racial or ethnic information;
• Religious information;
• Political opinions; or
• Other information classified as sensitive under applicable law.

Customers must not configure Bellvox to collect sensitive information unless the collection is necessary for a lawful business purpose; the customer has an appropriate legal basis; required notices have been provided; required consent has been obtained; the collection is permitted under the customer’s agreement with Bellvox; and appropriate security measures have been implemented.

Bellvox does not authorize customers to collect complete payment-card information, passwords, authentication codes, government identification numbers, or similarly high-risk information through AI voice agents unless Bellvox has expressly approved the applicable workflow in writing.

4. How we use personal information

Bellvox may use personal information for the following purposes.

4.1 Providing the Services

We may use information to provide AI receptionist services; answer and route calls; generate AI responses; transcribe conversations; create call summaries; schedule appointments; qualify leads; send communications; complete requested integrations; manage customer accounts; operate customer dashboards; provide analytics; and deliver other requested functionality.

4.2 Operating and administering accounts

We may use information to create and maintain accounts; authenticate users; manage permissions; process subscriptions; issue invoices; communicate about account activity; enforce usage limits; and provide administrative notices.

4.3 Customer support

We may use information to respond to questions; resolve technical problems; investigate errors; diagnose service issues; provide onboarding assistance; handle complaints; and improve support quality.

4.4 Improving Bellvox

We may analyze information to improve call quality; improve speech recognition; reduce latency; evaluate AI performance; identify failed or incomplete interactions; improve routing and scheduling; develop new features; test product functionality; understand how customers use the Services; and improve reliability and user experience. Where reasonably possible, Bellvox may use aggregated or de-identified information for these purposes.

4.5 AI processing

Bellvox uses artificial intelligence and automated systems to provide its Services. These systems may process conversation information to recognize speech; understand caller intent; generate spoken or written responses; extract requested information; summarize calls; categorize interactions; trigger workflows; select appropriate routing destinations; and complete customer-configured tasks.

AI-generated information may be inaccurate, incomplete, or inappropriate. Customers remain responsible for testing their agents, reviewing important interactions, and providing appropriate human oversight.

4.6 Safety and security

We may use information to protect customer accounts; detect unauthorized access; prevent fraud; investigate abuse; monitor system integrity; identify malicious activity; enforce our Terms of Service; protect Bellvox, our customers, and other individuals; and maintain the security and availability of the Services.

4.7 Communications and marketing

Where permitted by law, we may use contact information to respond to demo requests; send product information; provide service announcements; share educational materials; invite users to events; send newsletters; conduct customer research; and inform users about relevant Bellvox products or features.

You may opt out of promotional emails through the unsubscribe link in the message or by contacting us. You may continue to receive non-promotional communications concerning your account, transactions, security, or Services.

4.8 Legal and compliance purposes

We may use and disclose information to comply with legal obligations; respond to lawful requests; establish or defend legal claims; enforce agreements; resolve disputes; conduct audits; maintain business records; and protect legal rights.

5. Legal bases for processing

Where applicable law requires Bellvox to identify a legal basis, we may process personal information based on one or more of the following:

Contractual necessity

Processing may be necessary to provide Services requested by a customer or to take steps before entering into a contract.

Legitimate interests

We may process information where necessary for legitimate business interests, including operating Bellvox; securing the Services; improving our products; preventing misuse; communicating with business contacts; and managing customer relationships. We consider the potential effect of the processing on individuals before relying on legitimate interests.

Consent

We may rely on consent when required, including for certain marketing communications; cookies; call recordings; sensitive-data processing; or optional product functions. Consent may be withdrawn, subject to applicable law.

Legal obligations

We may process information where necessary to comply with legal or regulatory obligations.

Protection of important interests

In limited circumstances, information may be processed to protect an individual’s vital interests or those of another person.

6. AI training and model improvement

Bellvox may work with third-party artificial intelligence, speech recognition, text-to-speech, telephony, hosting, or analytics providers to deliver the Services.

Bellvox does not sell customer conversations.

Bellvox will not use customer call recordings, transcripts, or customer-provided content to train publicly available general-purpose AI models unless the customer has expressly authorized that use; the use is clearly disclosed; or the information has been aggregated or de-identified so it can no longer reasonably identify an individual or customer.

Bellvox may use limited interaction information to evaluate and improve the reliability, security, and performance of its Services, subject to contractual commitments, customer settings, and applicable law. Customers requiring stricter data-use restrictions should contact Bellvox before deploying the Services.

7. How we share personal information

Bellvox may share information in the circumstances described below.

7.1 Service providers and subprocessors

We may share information with providers that help us operate Bellvox, including providers of cloud hosting; data storage; telephony; speech-to-text transcription; text-to-speech services; artificial intelligence models; authentication; email delivery; SMS delivery; customer support; analytics; error monitoring; cybersecurity; payment processing; CRM systems; calendar integrations; and business administration.

What these providers do:

• Hosting and database providers store account and workspace data, such as contacts, call records, recordings, transcripts and messages, sign people in, run parts of the Services, and host the Bellvox web app, our voice services and this website.
• Telephony providers provide phone numbers and carry phone calls, including calls placed from the app’s dialer, and text and WhatsApp messages. Where phone calls are recorded, the telephony provider records them. For businesses that connect WhatsApp through our telephony provider, those WhatsApp messages also pass through WhatsApp, which is run by Meta.
• Meta Platforms (WhatsApp, Facebook Messenger and Instagram) carries the messages a business sends and receives on those channels when it connects them directly to Bellvox. Meta also provides the sign-in window the business uses to connect them, and reviews the business’s WhatsApp message templates.
• Real-time audio providers carry the live sound of calls between the caller and the AI agent, and record calls made from a web browser where recording is on.
• AI model providers provide the AI that listens and replies on calls, writes call transcripts and summaries, answers text, WhatsApp, Facebook Messenger, Instagram and website chat messages, checks calls against a customer’s compliance rules, and produces the answers of Otto, the in-app assistant.
• Voice providers give the AI agents their speaking voices, and on some agents turn the caller’s speech into text.
• A payment processor processes payments for plans and credits.
• An email delivery provider sends our emails, such as the emails that confirm an address or reset a password, and the codes the website emails before a form is accepted or a call on the website starts.
• Google signs you in when you choose Sign in with Google on the web.
• Other providers deliver the app’s push notifications, supply the lettering used in our emails, find a business by its name and town when “No website? Use your business name” is used on this website, and keep what is sent through the website’s forms, and the details given before a call on the website.
• Cloudflare checks, with its Turnstile check, that “Create your agent” on this website is used by a person and not by a script. For that check only, it reads details of your browser and device and your network address. Nothing is asked of you unless the check needs it.
• An app connection provider connects the outside apps a customer chooses to link to Bellvox.

These providers may process information only to perform services for Bellvox and are expected to protect it according to their contractual obligations. A current list of material subprocessors is available on request.

7.2 Customer-directed sharing

Bellvox may disclose or transmit information when instructed by a customer, including to the customer’s CRM; calendar services; employees; business locations; customer-support systems; marketing platforms; workflow tools; telephone providers; and other customer-selected third parties. Bellvox is not responsible for how independently controlled third parties use information after receiving it at the customer’s direction.

7.3 Professional advisers

We may share information with lawyers, accountants, auditors, insurers, consultants, and other professional advisers where reasonably necessary.

7.4 Business transfers

Information may be disclosed or transferred in connection with a merger; acquisition; financing; reorganization; sale of assets; due diligence process; insolvency; or similar business transaction. Where required, Bellvox will provide appropriate notice before personal information becomes subject to a materially different privacy policy.

7.5 Legal and safety disclosures

We may disclose information where we reasonably believe disclosure is necessary to comply with law; respond to a court order, subpoena, or lawful government request; protect the rights or safety of Bellvox, our customers, or others; investigate fraud or security incidents; enforce agreements; or prevent illegal or harmful activity.

7.6 Aggregated or de-identified information

We may share information that has been aggregated or de-identified so it cannot reasonably identify an individual.

8. Sale and sharing of personal information

Bellvox does not sell personal information for monetary payment. Bellvox does not sell call recordings, conversation transcripts, caller information, or customer databases.

Some privacy laws define “sale,” “sharing,” or “targeted advertising” broadly. Certain analytics or advertising technologies used on the Bellvox website could fall within these definitions, depending on how they are configured. Where required, Bellvox will provide individuals with the ability to opt out of such processing.

Bellvox does not knowingly sell or share the personal information of children.

9. Call recordings and consent

Call-recording and wiretapping laws vary by jurisdiction. Some locations require consent from one participant, while others require notice or consent from every participant.

Bellvox customers are responsible for determining whether calls may be recorded; configuring appropriate announcements; obtaining required consent; providing legally sufficient privacy notices; selecting an appropriate retention period; responding to caller privacy requests; and ensuring their use complies with applicable telecommunications and privacy laws.

Bellvox may provide technical tools that help customers communicate recording notices, but Bellvox does not determine whether a particular announcement or workflow is legally sufficient. Individuals who do not wish to be recorded should inform the business operating the applicable Bellvox agent.

10. Automated decision-making

Bellvox’s AI systems may automatically classify caller intent; determine which workflow to follow; route a call; identify appointment availability; categorize a lead; generate a conversation summary; or recommend a next action.

Bellvox should not be used to make decisions that produce legal or similarly significant effects concerning an individual without appropriate human involvement, safeguards, and a lawful basis. Customers are responsible for determining whether their use of Bellvox involves regulated automated decision-making and for implementing any required notices, consent mechanisms, reviews, or appeal rights.

11. Data retention

Bellvox retains personal information only for as long as reasonably necessary to provide the Services; meet customer instructions; maintain accounts; resolve disputes; enforce agreements; protect security; meet legal requirements; and maintain appropriate business records. Retention periods may differ based on the type of information.

Account information

Account and subscription information may be retained while an account is active and for a reasonable period afterward.

Call recordings and transcripts

Recordings and transcripts may be retained according to customer configuration; the applicable subscription; contractual requirements; technical settings; and legal obligations.

Messages from WhatsApp, Messenger and Instagram

Conversations are kept in the business’s Bellvox workspace until the business deletes them or closes its account. Opt-out records are kept for as long as needed to respect them.

When a business disconnects a Meta account, Bellvox deletes that account’s access token and connection straight away, and stops receiving its messages. The business can then delete the past conversations or ask us to.

Marketing information

Marketing contact information may be retained until the individual opts out or the information is no longer required.

Security information

Security logs may be retained for a period reasonably necessary to investigate incidents and protect the Services.

Backups

Deleted information may remain in secure backups for a limited period before being overwritten or deleted according to standard backup processes.

Bellvox may retain information longer where required by law, necessary for legal claims, or needed to prevent fraud or abuse.

12. Data deletion

Customers may request deletion of account or customer data, subject to legal retention requirements; contractual obligations; security needs; backup cycles; dispute resolution; fraud prevention; and technical limitations.

When Bellvox processes data on behalf of a customer, individuals should submit deletion requests to that customer.

Following a valid deletion request, Bellvox will take reasonable steps to delete or de-identify eligible information from active systems. Residual copies may remain temporarily in protected backups and will be deleted or overwritten according to Bellvox’s backup schedule.

Deleting data from Meta’s platforms

• If you messaged a business on WhatsApp, Messenger or Instagram: ask that business to delete your conversation, or email privacy@bellvox.ai with the business’s name, the channel, and your name or number as shown there. We delete it within 30 days.
• If you connected your business’s accounts to Bellvox: disconnect them in Bellvox (Messenger and Instagram page, or WhatsApp → Senders). You can also remove Bellvox in Facebook (Settings and privacy → Settings → Business integrations) or in Meta Business Suite (Business settings → Integrations → Connected apps). Then email privacy@bellvox.ai, or follow bellvox.ai/delete-account.html, to have the data deleted. We delete it within 30 days.

13. Data security

Bellvox uses administrative, technical, and organizational safeguards designed to protect personal information. These safeguards may include encryption in transit; encryption at rest where supported; access controls; authentication measures; role-based permissions; monitoring and logging; secure development practices; vendor assessments; employee confidentiality obligations; backup procedures; incident-management processes; and security testing.

No method of transmission or storage is completely secure. Bellvox cannot guarantee that unauthorized access, loss, misuse, or disclosure will never occur.

Customers are responsible for protecting account credentials; managing user permissions; securing connected applications; reviewing integration access; using strong passwords; enabling available authentication features; and promptly reporting suspected unauthorized activity.

Security concerns may be reported to security@bellvox.ai.

14. International data transfers

Bellvox, its customers, and its service providers may operate in different countries. As a result, personal information may be processed outside the country in which it was originally collected. Those countries may have privacy laws that differ from the laws of your country.

Where required, Bellvox will use appropriate safeguards for international transfers, which may include contractual protections; standard contractual clauses; data-processing agreements; transfer risk assessments; adequacy mechanisms; or other legally recognized measures. Customers with specific data residency requirements should contact Bellvox before using the Services.

15. Cookies and similar technologies

Bellvox may use cookies, pixels, local storage, software development kits, and similar technologies. These technologies may be used to operate the website; maintain login sessions; remember preferences; protect account security; understand website usage; measure marketing performance; improve user experience; and diagnose technical problems.

Cookies may include:

Essential cookies

Required for security, authentication, account access, and basic website functionality.

Preference cookies

Used to remember language, region, display, or other user settings.

Analytics cookies

Used to understand website and product usage.

Advertising cookies

Used, where applicable and permitted, to measure campaigns or deliver relevant marketing.

Users may control cookies through Bellvox’s cookie banner; browser settings; device settings; and available industry opt-out tools. Disabling certain cookies may affect website or platform functionality.

16. Your privacy rights

Depending on your location and applicable law, you may have the right to:

• Know whether Bellvox processes your personal information;
• Request access to your information;
• Request correction of inaccurate information;
• Request deletion;
• Request restriction of processing;
• Object to processing;
• Withdraw consent;
• Request data portability;
• Opt out of certain marketing;
• Opt out of certain sales, sharing, or targeted advertising;
• Request information about recipients of your data;
• Appeal a decision concerning a privacy request; and
• Submit a complaint to a privacy regulator.

These rights may be limited or subject to exceptions. Bellvox may need to verify your identity before responding, and may request information reasonably necessary to complete verification. Bellvox will not unlawfully discriminate against individuals for exercising privacy rights.

17. How to submit a privacy request

Privacy requests may be submitted by email to privacy@bellvox.ai.

Your request should include your full name; your email address or telephone number; the nature of your relationship with Bellvox; the right you wish to exercise; and enough information for us to identify the relevant records.

Do not send sensitive identification documents unless Bellvox specifically requests them through an appropriate secure method. If your request concerns a call with a Bellvox customer, please identify the business involved, the approximate date of the interaction, and the telephone number used. Where Bellvox processes information solely on behalf of a customer, we may refer the request to that customer.

18. Authorized agents

Where applicable law permits, you may authorize another person to submit a request on your behalf. Bellvox may require evidence of the agent’s authority; verification of your identity; and confirmation that you authorized the request.

19. European Economic Area, United Kingdom, and Switzerland

Individuals in the European Economic Area, United Kingdom, or Switzerland may have rights under applicable data-protection laws, including rights of access, correction, erasure, restriction, objection, and portability.

Where Bellvox relies on consent, you may withdraw it at any time. Withdrawal does not affect processing that occurred before consent was withdrawn. Where Bellvox relies on legitimate interests, you may object based on your particular circumstances.

You may also complain to the data-protection authority in the country where you live or work or where you believe an infringement occurred.

Bellvox has not currently appointed a representative in the European Union or the United Kingdom. Data-protection requests and questions can be sent to privacy@bellvox.ai.

20. United States state privacy rights

Residents of certain US states may have additional rights concerning personal information. Depending on applicable law, these may include rights to:

• Know the categories of information collected;
• Know the purposes for which information is used;
• Know the categories of recipients;
• Access specific pieces of information;
• Correct inaccurate information;
• Delete information;
• Obtain a portable copy;
• Opt out of sale;
• Opt out of sharing for cross-context behavioral advertising;
• Opt out of targeted advertising;
• Limit certain uses of sensitive information;
• Opt out of certain profiling; and
• Appeal a denied request.

Bellvox does not sell call recordings, transcripts, or customer databases for monetary payment. Requests may be submitted through the methods described in Section 17.

21. Egypt and other jurisdictions

Where applicable, Bellvox will process personal information in accordance with relevant local data-protection requirements. Individuals may have rights relating to transparency; access; correction; deletion; withdrawal of consent; objection to certain processing; and complaints to the appropriate authority.

The availability and scope of these rights depend on the jurisdiction, Bellvox’s legal role, and the circumstances of the processing.

22. Children’s privacy

Bellvox is intended for business use and is not directed to children. Bellvox does not knowingly collect personal information directly from children for its own commercial purposes.

Customers must not configure Bellvox to knowingly collect information from children unless the collection is lawful; appropriate parental or guardian consent has been obtained where required; the use is permitted by Bellvox; the customer has implemented appropriate safeguards; and the processing is covered by an appropriate written agreement.

Anyone who believes a child has provided personal information inappropriately may contact Bellvox at privacy@bellvox.ai.

23. Healthcare information

Bellvox should not be used to process protected health information or similar regulated medical information unless Bellvox and the customer have entered into all necessary written agreements and Bellvox has confirmed that the customer’s intended configuration is supported.

Bellvox does not claim HIPAA compliance through this Privacy Policy. A customer requiring HIPAA-supported Services must receive written confirmation from Bellvox and, where applicable, enter into a Business Associate Agreement before transmitting protected health information.

24. Financial and payment-card information

Bellvox is not intended to collect full payment-card information through ordinary AI conversations. Customers should use secure, approved payment providers for payment collection.

Bellvox does not claim PCI DSS compliance through this Privacy Policy. Customers must not instruct callers to provide complete card numbers, card security codes, passwords, banking credentials, or one-time authentication codes unless Bellvox has approved the relevant secure workflow.

25. Third-party websites and services

The Bellvox website or Services may contain links to third-party websites or integrate with third-party services. Bellvox does not control the privacy practices of independent third parties. Users should review the terms and privacy notices of those third parties before providing information or enabling an integration.

26. Do Not Track signals

Some browsers offer “Do Not Track” signals. There is currently no universally accepted standard for responding to all such signals. Bellvox may recognize legally required browser-based opt-out preference signals where applicable and technically supported.

27. Business customers’ responsibilities

Customers using Bellvox are responsible for their own privacy and legal obligations. Customers must:

• Maintain an accurate privacy policy;
• Explain their use of AI voice technology where required;
• Provide call-recording disclosures;
• Obtain required consent;
• Establish a lawful basis for processing;
• Limit collection to necessary information;
• Configure appropriate retention periods;
• Protect information exported from Bellvox;
• Respond to privacy requests;
• Ensure connected systems are secure;
• Avoid unlawful or deceptive communications; and
• Use Bellvox only for authorized purposes.

Bellvox’s Privacy Policy does not replace a customer’s own privacy notice.

28. Data Processing Addendum

Business customers requiring additional contractual protections may request a Data Processing Addendum. The Data Processing Addendum may address controller and processor responsibilities; processing instructions; confidentiality; security measures; subprocessors; data-subject requests; incident notifications; international transfers; data deletion; and audit information.

Requests may be sent to privacy@bellvox.ai.

29. Changes to this Privacy Policy

Bellvox may update this Privacy Policy to reflect changes to the Services; new features; changes in our data practices; changes in service providers; legal or regulatory developments; or security and operational improvements.

When changes are made, Bellvox will update the “Last Updated” date. Where required, Bellvox may provide additional notice by email, through the Services, or through a notice on the website. Continued use of the Services after an updated Policy becomes effective is subject to the updated Policy, to the extent permitted by law.

30. Contact Bellvox

Questions, concerns, or requests concerning this Privacy Policy may be directed to: