Privacy Policy
Last updated: April 2026
GDPR Compliance
Soravox is fully compliant with the General Data Protection Regulation (GDPR). We process personal data only as necessary to provide our services, and we do so with appropriate legal bases including consent and legitimate interest.
Data Collection
We collect information necessary to provide our AI voice agent services, including:
- Account information (name, email, business details)
- Shopify store data (products, orders, policies) accessed via authorized OAuth connection
- Call recordings and transcripts generated by our voice agents
- Usage metrics for billing purposes
Data Ownership
Your data belongs to you. Specifically:
- We never use your data to train our AI models
- Call recordings and transcripts are your property
- You can export or delete your data at any time
- When you cancel your account, your data is permanently deleted within 30 days
Data Security
We employ enterprise-grade security measures:
- AES-256 encryption for data at rest
- TLS 1.3 encryption for data in transit
- Regular security audits and penetration testing
- Access controls and audit logging
Our technology is trusted by government agencies in Latin America, meeting strict public sector security requirements.
Your Rights
Under GDPR and applicable data protection laws, you have the right to:
- Access your personal data
- Rectify inaccurate data
- Request deletion of your data
- Restrict or object to processing
- Data portability
- Withdraw consent at any time
Contact
For privacy-related inquiries, contact us at privacy@soravox.com