Privacy Policy

In short

• We use your data to run Weyvox for you: your business phone line, your four AI agents and your business records. We do not sell your data, we show no advertising, and we do not use your data to train AI models.
• Your data is stored in the European Union. Some AI and other service providers process data outside the European Economic Area, mainly in the United States, under the safeguards in section 6.
• We make no audio recordings of calls. On calls an agent handles, the conversation is written down as text for the agent's call note, and the agent says so at the start of the call. For a call an agent places from a chat, that transcript is kept for 24 hours; for other calls only the call note remains.
• Your data is encrypted in transit and at rest, and sensitive data is also encrypted with a separate Weyvox key.
• You can see, correct, export and delete your data. Deleting your account in the app erases it, and an account whose registration is never completed is erased automatically after 30 days (section 7 lists what we must keep).

1. Who is responsible for your data

This policy covers the Weyvox app for iPhone and Android and the weyvox.com website. Weyvox is the name of the app and of our business. The AI agents inside the app are Leo (team lead), Cindy (telephony), Marc (business) and Alice (marketing).

We have not appointed a Data Protection Officer because Art. 37 GDPR does not require one for us. The contact above handles all privacy matters. Our supervisory authority is the French CNIL.

When we act for you. Your customers, your staff, the people who comment on your posts and the people your agents call or text are often not Weyvox users. For their personal data you are the controller, and we process it on your instructions as your processor (Art. 28 GDPR), only to provide the features you use. Our processing terms for this role are in section 25 of the Terms of Use.

2. What data we collect

We describe the data in the order it reaches us: your account and registration, your phone line, the agents, your goals, your business records, social media and media, your team, your subscription and usage, and then technical and website data.

Account

• Phone number. Your phone number is your identity in Weyvox. It opens your account and signs you in. Sign-in is confirmed with a one-time SMS code generated and checked by our SMS provider. We do not store the codes. They expire within minutes, and we keep only short-lived counters that limit repeated attempts.
• Profile. Your first and last name. Your date of birth, which the registration form asks for to confirm that you are 18 or older. Your profile photo, if you add one. Your gender (man or woman), which you choose when you register and can change under Settings → Personal information; the agents use it as you set it and never guess it. Your position in your business — for example owner, director or manager — which Leo asks during registration; tell him if it changes. The time you accepted our Terms. The agents read your name, gender and position so that they address you correctly and know whom they work for.
• App language. The language you choose for the app is also the language in which agents start calls and write their notes.
• PIN and recovery codes. If you set a PIN (Settings → Account → Security), it is a second factor when you sign in. We never keep the PIN or its ten recovery codes as you typed them. We keep only a one-way fingerprint of each, with the counters that slow down guessing. Nobody at Weyvox can read them, and nobody will ever ask you for them.
• The phone your account is on. A Weyvox account is active on one phone at a time. We record an identifier for the phone you signed in on and the time you did so. Signing in on a new phone signs the old one out.

Registration and the introduction to the agents

Registration has five stages. Each stage uses only the data it needs.

1. Data protection: a page that explains how we protect your data. It uses none of your data.
2. Registration: the account data above.
3. Meet Leo: Leo first checks that Weyvox fits you — that you run a business, are starting one, or are a director or manager who leads people in one, in a sector we serve (Terms, section 2). If it does not, he records why in a few words, registration cannot be completed, and the account, with that note, is deleted automatically after 30 days; if you work in a business and lead no one, he asks you to pass Weyvox on to your manager, who can register the business and add you to the team. Otherwise he asks your position in the business and whether it already operates or you are just starting it, and fills in your business profile with your real details: Leo saves what you tell him — and what he reads on your website or public page, if you give him a link — into your business profile and price list, and personal facts about you into his memory. He also asks what brought you to Weyvox — the problem you want solved — tells you in a few words what each agent does and asks which of them you need; you choose your team with checkmarks. The agents you leave out are switched off (you can switch any agent on or off at any time in Settings), and the problem you described is saved, in your own words, to the agents' memory, so the agents you chose can start on it after registration.
4. Meet the agents: only the agents you chose take part, and each shows how it would handle your problem. Cindy can make a free test call (up to two calls of up to 6.5 minutes each) to the phone number you registered with, from a Weyvox service number, to tell you by voice how she will handle it and to answer your questions. No orders or text messages are created during these calls; a note of the call appears in your chat with her. Marc can prepare the document that fits your problem; if you give him the issuer details his documents need, such as your legal name, tax number and bank details, he saves them for your documents. Alice can create a photo, a short clip or a reel for a post, from your own photos and videos if you send them. None of this is required. If you chose no agent, this stage is skipped.
5. Subscription: you choose a plan (see Subscription, balance and usage).

Your details stay. Everything you gave and everything created during the introduction stays in your account. Leo's first messages are written in the language of your app; when you write in another language, the agents switch to it. The introduction is paid for by Weyvox and is not charged to your balance. We record what it costs us, for our own accounts.

Unfinished registration. Registration is complete once you subscribe to a plan. Until then, signing in again takes you back to the stage where you stopped. If you have not subscribed within 30 days of confirming your phone number, the account is deleted automatically, with all its data, in the same way as when you delete it yourself in the app (see section 7).

Your business line

• Phone numbers. The Weyvox operator numbers you buy in the app (up to ten per account), their countries, the state of their monthly fees and the dates of the charges. If a temporary number is issued while your application is reviewed, the same applies to it.
• Identity documents for a number. Some numbers can only be registered with identity information, because telecom rules and our telephone operator require it. During the purchase you upload the requested documents (for example an identity document or proof of address) and form details (such as name, date of birth and address). We use them for one purpose only: submitting your number registration to the operator. We keep them only while the application needs them. Once the number is activated, the documents, the form details and the application record are erased automatically within 24 hours. A document you replace or remove during the application is erased within about 3 hours. A cancelled or expired application is cleaned up the same way.
• Your own business number. If you connect a number you already have, we store the number, the state of its caller ID check and the one-time code exchange that proved it is yours. You switch on call forwarding with your own operator. It works in their network, and we cannot switch it on or read its state.
• Calls. Every call runs over the public telephone network, carried by our telephone operator, which necessarily sees the numbers and the duration. We keep the call details (the parties, direction, date, time, duration and outcome) as the call history of your line, together with the routing and cost data needed to connect and bill each call. We make no audio recordings of calls, and no call audio is stored.
• Calls an agent handles. When Cindy answers or places a call, or takes over a call you are on, AI providers process the conversation in real time: a voice model hears the other person and speaks, and a language model does the work behind it (checking prices, creating an order, sending an SMS). At the start of the call the agent tells the other person that it is an AI agent and that the call is being recorded for a call note. This means the conversation is written down as text (a transcript) from which the agent writes its note. The audio itself is not kept. At the start of an outbound call, the system also checks whether a person or a voicemail answered. While an agent is on a call you can listen in from the app. The audio reaches your phone live and is not stored.
• Your own voice on a call with an agent. If you take a call over from an agent, what you say is also written down as text in real time by our speech-to-text provider. It becomes part of that call's transcript, so your words appear in the agent's note and the agent knows what was said when it takes the call back. No recording of your voice is kept. A call you handle yourself, start to finish, without an agent, is neither recorded nor written down as text.
• Call notes and transcripts. After a call handled by an agent, the agent writes a short note into the conversation with that number in the Calls tab. The note stays until you delete it or your account. For a call an agent places from a chat, the full transcript is kept for 24 hours, so you can ask follow-up questions about the call, and is then deleted automatically; for other calls only the note remains.
• Settings for a number. Choices kept for a particular caller, such as whether an agent answers that number and the language the agent speaks with that person. The agent remembers this language after a call.
• Keypad tones. When an agent works through a phone menu for you ("press 1 for bookings"), it sends keypad tones on the call. The digits can be sensitive (a booking reference, an account number, a code you dictated). They are passed to the telephone operator only to press the keys on that call and are not stored. Our technical logs record only that keys were pressed and how many, never which ones.

SMS to your customers

Cindy and Marc can send SMS to your customers. Examples are a confirmation of what was agreed on a call, which is sent only after the customer agreed to receive it, or a message you ask for. For each SMS we keep the text, the recipient's number and the delivery status. They are shown in the conversation with that number in the Calls tab. The SMS is delivered by our telephone operator, which processes the number and the text to deliver it. The recipient sees the sender name "Weyvox", and the text starts with your business name. These records are kept until you delete the conversation or your account. Anyone who does not want to be contacted through Weyvox can block their number at weyvox.com/optout/. The block covers both SMS and calls.

Your agents and your chats with them

• Your chats. The messages you write to the agents (in one shared chat, with @Name to address someone), the attachments you send, your instructions, and the agents' answers and handovers to each other (for example "Leo → Marc"). Your phone shows your chat history, and we keep a server copy so it is there again on a new phone. That copy is encrypted with the separate Weyvox key, is never shown to other users and is never used to train any model. Voice messages you send are converted into text by our speech-to-text provider.
• What the AI provider receives. To produce an answer, the agent sends your message to our AI provider's model, together with the context the answer needs. That context can include your business profile, relevant memory, and the records the agent looks up. The provider processes it as our processor, and it may not use the data to train its models.
• Web search and links. When an agent searches the web or opens a link, the search query or the address is processed by our AI provider to fetch the results.
• Agent memory. Personal facts about you that Leo saves to help you (for example "prefers morning appointments", a door code), including temporary facts with an end date, and the problem you came to Weyvox with, saved at registration so your agents can start on it. Facts about your business are kept in your business records, not in memory. It also holds the names of people you mention, reminders the agents have promised, and short summaries of recent calls and chats. The memory is listed on Leo's page (What the agent knows about me). You can delete single entries or wipe it all at once. With Leo's Autonomy switched on, Leo removes outdated reminders and facts himself and tells you in one line. With it off, he asks you first. The memory is encrypted with the separate Weyvox key.
• Background work. The journals and results of the longer tasks the agents carry out for you.
• Media library. The photos, videos, audio and files you give the agents, and the images, videos, audio and documents they create, are kept in the media library (Materials for the agent) so the agents can use them later. For example, Marc can put your photos into a presentation, or Alice can edit your videos into a reel. When a photo arrives, our AI provider writes a short text description of it, so the agents can find the right photo without looking at all of them. The library is encrypted with the separate Weyvox key and counts towards your storage.
• Location, with your phone's permission. If you allow location access, your approximate position is attached to the messages you write to the agents, so they can answer questions about places ("find a pharmacy near me"). The position is passed along with that request to produce the answer and is not stored on our servers. It is never used on phone calls. You can withdraw the permission at any time in your phone's settings.
• Contacts, with your phone's permission. So that Cindy can call someone you name ("call Anna"), the app uploads a copy of your contacts to our servers while it has the contacts permission. The copy holds names and phone numbers only, with no emails, photos or other fields. It is updated when your address book changes, and numbers blocked at weyvox.com/optout/ are filtered out of it. It is never shown to other users and never used for advertising. If you withdraw the permission, the copy is deleted from our servers the next time you open the Weyvox tab.
• Your settings for the agents. Which agents are switched on — including an agent switched on just for one task: when it was switched on and in which chat, cleared as soon as it switches off again — each agent's Autonomy, the communication style you choose for Leo, and the agents' other switches.

Goals

On the Business and Professional plans you can set a goal with Leo. For each goal we keep:

• the agreement shown on the goal card: the result or measure, the deadline, the steps and which agents do them, the actions you allow, the cost estimate and the financial limit;
• the time you accepted it;
• what has been spent on it (taken from our usage records);
• snapshots of the measure, calculated from your own business records;
• the result of each step, with Leo's verdict;
• Leo's weekly reviews.

Goals stay in your account, and are deleted when you delete your account.

Your business records (Leo and Marc)

These records are what the agents need in order to work for your business. They are kept until you delete them or your account, and they never expire on their own.

• Business profile and price list. The business name and legal name, a description, who your customers are, contacts, opening hours and exceptions, payment and cancellation terms, delivery, frequent questions and what the agents may promise on their own. Your services and products with their prices. Agents quote prices only from this list. The business profile is kept by Leo, the price list by Marc. Nothing here is shown to anyone outside your business.
• Customers and orders. Customer cards (name, phone number, email, company, notes), orders with their stages, payment state and the team member assigned, and each order's history. Much of this is personal data of your customers, so it is encrypted with the separate Weyvox key and kept separate for each business.
• Business documents. The paperwork you upload (contracts, invoices, tax filings, supplier and staff files, licences) and the documents the agents write for you. We store the file, the details taken from it (type, other party, number, date, amount, expiry date), a text extract used for search, and any links to a customer or order. The agents can read these documents, because that is how they answer questions about them. A document is read when you upload it and again only when an agent needs something its text extract does not contain. A copy of a large file held by our AI provider for reading is deleted within 24 hours. For any sensitive document you can switch on "Do not let the agent read this". Its text extract and search entry are then erased, and the agents can no longer find or read it, while the document stays stored and visible to you. Documents and their extracts are encrypted with the separate Weyvox key.
• Deleting a document moves it to Deleted. It disappears from your lists and from the agents' search at once. You can restore it or delete it permanently from there, and it is erased automatically 90 days later. Until then it still counts towards your storage.
• Document templates and your forms. The details you issue documents under (name or company name, address, tax or registration number, bank details, email, phone), an optional logo, per-type defaults and custom fields. Also the forms Marc keeps for you from a blank you sent: its layout (encrypted with the separate Weyvox key), its fields and a link to the original file. A template is meant for your own details, not a third party's. When Marc builds a presentation or analyses a spreadsheet, he copies the files he needs into our AI provider's work environment, and the provider keeps them there for up to 30 days.
• Calendar. If you connect Google Calendar, we keep your Google account email, the calendar you choose for your busy times, the access tokens (encrypted), and only the busy periods of that calendar. Google gives us nothing else: no event titles, guests, places or descriptions. The bookings Marc takes are added to a separate “Weyvox” calendar that Weyvox creates in your Google account; we do not change your other calendars. If you use the calendars on your phone instead, the app reads them on the phone and sends us only the start and end times. Marc uses these busy times to book customers only when you are free.
• Analytics and reports. The Results tab and the agents' regular reports (for example a weekly summary) are calculated from records already in your account. They involve no new data collection.

Social media (Alice)

Alice runs the social media accounts of your business: Instagram, Facebook, TikTok, YouTube, LinkedIn, Threads, Pinterest and Bluesky. Only the account owner can connect accounts. Team members have no access to social media.

• Connecting. You connect each account yourself, on the network's own sign-in page. The connection goes through our social media publishing intermediary, established in Sweden (EU), which holds the access the network grants. We do not hold it. For Bluesky you create an app password in Bluesky's settings and enter it with your handle, never your main password. That connection is also held by the intermediary.
• What we store. The name, username and profile picture of each connected account. The posts Alice prepares and publishes (text and media) and your posting plan, both encrypted with the separate Weyvox key. Post statistics received from the networks. The identifiers (not the text) of comments Alice has already handled.
• Comments. Only if you switch on "Access to comments" does Alice read comments under your posts and answer them. A comment contains what the network provides about it, usually the author's public name and the comment text. It is passed to our AI provider to write the reply. Every reply is signed automatically as written by your business's AI agent. The people who comment are data subjects of your business, and you are the controller of their data.
• What we pass on. To publish a post, its text and media go to the intermediary and to the network. The intermediary keeps a post's media for up to 60 days. Where a network supports it, we mark AI-generated media as such.
• What goes out without you. Every post Alice prepares in the chat comes to you as a post card and is published only after you tap Publish. If your posting plan is approved and active and you switch on her Autonomy, she publishes the plan's posts on her own, including in the background, and reports to you; with Autonomy off, each plan post also waits for your Publish. A reel with quality defects is never published without your Publish anyway.
• Disconnecting and deleting. Disconnecting an account on Alice's Social media page also removes the connection at the intermediary. Deleting your Weyvox account cancels your scheduled posts and disconnects all your accounts. Anything already published stays on the network, under that network's own rules.

Media Alice analyses and creates

• Your videos. Each video you give the agents is analysed once, automatically, so Alice understands what is in it. Our AI provider receives the picture and sound, either through a link valid for a short time or as a temporary copy. The temporary copy is deleted no later than 2 hours after the analysis, and at once if you delete the video. Speech in the video is converted into text by our speech-to-text provider in the United States, which receives the whole file. Its copy of the text is deleted as soon as we have saved ours. The results (a description of the scenes, the transcript and the agent's notes) are encrypted with the separate Weyvox key and deleted together with the video.
• People in your media. Alice describes people only by their role ("a customer", "an employee"). She never identifies them and never recognises faces.
• What Alice creates. Photos, short video clips, voice-overs, music and sound effects, cleaned-up audio, and videos edited from your own footage. Your instructions and the reference images or files needed go to our AI providers. The provider keeps the record of a generated video clip for 2 days, so you can ask for changes, and we then delete it. For voice-overs, sound effects and audio clean-up, our audio provider in the United States receives the text, the description or the file. The copy it creates is deleted as soon as we have saved the result. The music provider does not store the tracks.
• Video editing runs in our own rendering service in the EU. Nothing is left there once the job is done. Previews are deleted after 14 days, unfinished editing plans after 90 days, and the finished videos go to your media library.
• AI marking. Generated images, clips and audio, and edited videos, carry built-in marking of AI-generated content, and we add the "AI-generated" label when publishing to networks that support it.

Trends and YouTube (YouTube API Services)

Alice's Trends, and her ability to watch a public YouTube video from a link, use YouTube API Services. When you use them, Google's Privacy Policy also applies: www.google.com/policies/privacy.

• No access to your YouTube account. Weyvox calls YouTube API Services from our servers with its own key. We do not sign in to YouTube for you and do not receive data from your YouTube account through these features. Connecting your YouTube channel for publishing is separate and is described under Social media above.
• What we store from YouTube: the video identifier, title, channel name and identifier, the channel's subscriber count (when the channel shows it), publication date, thumbnail address, duration, and view, like and comment counts. The list is shared by all users and is not linked to you. It is refreshed daily and kept for no more than 14 days. A video is removed sooner if YouTube stops returning it.
• No video files. We do not download or store YouTube videos. Thumbnails are loaded from YouTube's servers, so YouTube receives your phone's connection data when the Trends screen shows them. Tapping a video opens YouTube.
• "Analyze" and "Create similar". These buttons open a chat with Alice with a message that contains the video's link and your request, not a copy of YouTube's data about the video. Alice then watches the video from the link, as described below.
• Watching a video from a link. When you or Alice ask to watch a public YouTube video, the link and your question go to our AI provider, which reads the video directly from YouTube. From YouTube API Services we ask only for the video's duration and up to 20 of its top public comments. Only the text of the comments is used, without the names of their authors, and only for that one answer: they go to our AI provider together with the video, and we do not store them or show them in the app.

Your team (team members)

• Who they are. On the Business and Professional plans an administrator can add team members, staff who work within the rights of their role, under Settings → Team. A team member does not register. The administrator enters their first and last name, date of birth (team members must be 18 or older) and gender, which the agents use to address them correctly, and, optionally, a phone number as a note, and gives them an eight-character access code. We store those details, a one-way fingerprint of the code (never the code itself), the identifier of the phone the code was used on, the times of their sign-ins, the rights the administrator gave them for their role (their own or all orders and customers, business documents, Results, the price list and business profile, seeing prices, marking payments), any monthly spending limit, the role description and the agents assigned to them. If Cindy is assigned and the administrator passes them one of the Weyvox numbers, their calls on that line are part of the line's call history.
• Activity. In each team member's card, the administrator sees their activity for a chosen period (7 days by default, up to 90). It shows the orders assigned to them (open and completed), their actions in order histories (stage changes, payments, notes), the number and minutes of calls on their line, what they spent under their name, and their last sign-in. The administrator can also ask Leo about it in their own chat. Activity is calculated from records that already exist. Nothing extra is collected.
• Charges. What a team member spends is charged to the administrator and shown in the administrator's usage records with the team member's name. The team member sees only their own spending.
• Who is responsible. The administrator is the controller of the personal data of the staff they add. Weyvox processes it to provide the feature.
• Removal and deletion. When the administrator removes someone from the team, the access code stops working at once, their sessions end and their orders are released. The team member's sub-account is deleted automatically 90 days after removal. Their name stays on the order history entries they made, as part of the business's records. A team member can delete their own sub-account at once with Settings → Leave the team. Deleting the administrator's account deletes every team member attached to it.

Subscription, balance and usage

• Purchases. Subscriptions and balance top-ups are sold by Apple (App Store) or Google (Google Play). They process your payment under their own terms, and we never receive your card details. From the store we receive what we need to provide what you bought: the plan or top-up, the store's transaction and purchase identifiers, the start and end of each period, and the subscription's status (active, cancelled, in the store's payment retry period, expired, refunded).
• Credit and balance. Your monthly subscription credit and its expiry date, your personal balance, and your top-ups.
• Usage records. What each use cost, by day and operation: agents' work, calls, SMS, media, storage, numbers and team member seats. For an administrator with a team, each record shows the team member who caused the charge.

Technical and device data

Notification tokens, a device and app identifier, the app version and platform, the IP address, and short-lived technical logs created when the app talks to our servers. We use them to deliver calls and notifications, keep the service secure and fix problems. The app contains no third-party advertising, analytics or tracking software.

Website visitors (weyvox.com)

• The site sets no cookies and uses no advertising or cross-site trackers.
• To see how many people visit and which pages they read, the site uses Cloudflare Web Analytics from our hosting provider. It sets no cookies, does not fingerprint visitors or follow them across sites, and gives us only aggregate figures: page views, the page or site a visit came from, the country, the browser type and how fast pages load.
• Our hosting provider processes standard connection data (such as IP addresses) to deliver and protect the site. When a page loads data from our servers (for example the plan prices), our servers process the same connection data.

People who block their number at weyvox.com/optout/

This notice is for people who use the weyvox.com/optout/ form, usually people who are not Weyvox users.

• What we collect: your phone number, first name, last name and date of birth, the time you blocked or unblocked the number, and the verification that you received the code by SMS or phone call. We also keep a security log of each request: the number, a one-way fingerprint of your IP address, the browser type and the result.
• Why: the number is needed to carry out the block. The block stops agents from calling, texting or answering the number, stops the number from registering a Weyvox account, and removes it from the copies of users' contacts. The name and date of birth are recorded only to show who asked for the block or its removal. This matters if a number passes to a new holder or a request is disputed. They do not change how the block works. The security log protects the form against abuse.
• Legal basis: carrying out your objection to the use of your number (Art. 21 and Art. 6(1)(c) GDPR). Recording the requester's details and the security log rely on our legitimate interest in showing that a request was genuinely made and in protecting the form (Art. 6(1)(f)).
• How long: an active block is kept for as long as it is in force. After you lift it, the entry is deleted 12 months later. An unfinished request is deleted within 24 hours. The security log is kept for 12 months.
• Who receives it: our telephone operator, only to deliver the code by SMS or call. Weyvox users are never told who blocked a number.
• Your rights: the rights in section 9. Erasing the register entry also lifts the block.

Support and abuse reports

If you contact us, we keep your message and contact details for as long as your request needs. You can report abuse (spam, threats, fraud, unlawful use of a number, an agent or published content) by email to support@weyvox.com, with the number or link and the time concerned. We keep what you send for as long as the case needs it, and we never tell the reported person who reported them.

3. Why we use your data, and our legal bases

Where we rely on legitimate interest, we have weighed it against your rights, and you can object at any time (section 9).

4. Calls and recording

5. Who we share data with

We do not sell your personal data and do not share it with advertisers. To run Weyvox we use a small number of service providers (processors). They act on our documented instructions under contracts that meet Art. 28 GDPR, and they fall into these categories:

• App stores and platform providers: distribution of the app and push notifications.
• A telephone operator: phone numbers, calls to and from ordinary phones, SMS to your customers, and, where the rules require it, receiving the identity information you provide to register a number. For that last task the operator also has its own regulatory obligations.
• An SMS verification provider: sign-in codes.
• Hosting, database, file storage and cloud computing providers (EU regions): running our servers, the agents and video editing, and storing your data.
• AI providers: language models that power the agents, their notes, photo descriptions and document reading; a real-time voice model for calls; speech-to-text for voice messages, your voice on calls you take over from an agent and speech in your videos; and models that analyse video and create images, video clips, voice-overs, music and sound. They process this content only to provide the feature to us, and they may not use it to train their models.
• A social media publishing intermediary, established in Sweden (EU): connecting your social media accounts, publishing posts, reading comments and posting replies. It keeps a post's media for up to 60 days.
• A mapping provider: only when an agent needs place information for a task.
• An email provider: messages you send to our support address.

A current list of our processors by name is available on request at support@weyvox.com.

Services that are not our processors. Some services act for you or on their own account rather than for us. What they receive is governed by their own terms and privacy policies:

• Apple and Google as sellers of your subscription and top-ups. They process the payment as independent controllers.
• Your Google Calendar. We read it on your instruction and with your consent, and you can disconnect it at any time in the app or at myaccount.google.com/permissions.
• YouTube, through YouTube API Services (see Trends and YouTube).
• The social networks you connect. A post Alice publishes on your instruction is received by the network in order to publish it. What has been published stays there under the network's own rules. Disconnecting the account or deleting your Weyvox account does not remove it from the network.
• The people your agents call or text on your behalf, who receive what the agent says or writes.

We may also disclose data where the law requires it, or to protect our rights, our users or the public.

Google API data: Limited Use

Weyvox's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

• we do not sell that information;
• we do not transfer it to advertising platforms, data brokers or information resellers;
• we do not use it to serve or personalise advertising;
• we do not use it to determine creditworthiness or for lending.

Nobody at Weyvox reads it, except with your explicit consent, where it is strictly necessary for security, or to comply with the law. We do not use raw or derived data obtained through Google Workspace APIs to develop, improve or train non-personalised artificial intelligence or machine learning models, and we do not store it together with such models. When an agent needs your availability, it receives only the free time windows derived from your calendar, never event titles or details. That request is processed by our AI provider as our processor, only to produce the answer you asked for, and the provider may not use it to train its models.

6. Where your data is stored, and transfers outside the EU

We store your data in the European Union. Some processing does take place outside the European Economic Area, mainly in the United States. This covers some AI providers (language, voice, speech-to-text and media models), the audio provider for voice-overs and sound, and some platform services. For those transfers we rely on the safeguards in Chapter V GDPR: an adequacy decision (such as the EU–US Data Privacy Framework, where the provider is certified) and/or the European Commission's Standard Contractual Clauses, with additional measures where appropriate. Our social media publishing intermediary is established in Sweden. Where data passes from it to a place outside the EEA, the transfer relies on the Standard Contractual Clauses. You can ask us for more information about these safeguards at the contact address above.

7. How long we keep your data

We keep personal data only as long as each purpose needs it. These are the periods built into our systems:

Deleting your account erases your data on our servers and what the app kept on your phone: the local encrypted databases, their encryption key and cached files. It releases your numbers, cancels your scheduled posts, disconnects your social media accounts and your calendar, and deletes the copies our AI providers still hold. A copy that cannot be reached at that moment stays in a deletion queue that is no longer linked to your account, and is retried until it is gone. Deleting your Weyvox account cancels a Google Play subscription (its renewal is turned off; the month already paid for is not refunded) but not an App Store subscription: Apple does not let us cancel it, so cancel it in iPhone Settings before you delete. Details: weyvox.com/delete-account/.

Copies may remain briefly in backups until the normal backup cycle overwrites them.

8. The AI agents: automated processing and transparency

• The agents act on your instructions and within your settings. For each agent you control "Agent at work" (you can switch off any agent except Leo) and Autonomy. With Autonomy on, Leo tidies up his memory himself, Cindy places calls herself, Marc books, updates orders, sends SMS and prepares documents himself (he marks a payment only on your word), and Alice publishes the posts of your approved posting plan herself (a post prepared in the chat always waits for your Publish). With Autonomy off, each of them asks you first.
• Goals. When you accept a goal, the agents carry out only the actions listed on its card; each paid action is checked against the goal's financial limit and reserved before it starts, and only the agents' own work on a step already under way can take the goal slightly over the limit (Terms, section 12).
• No automated decisions with legal effect. Weyvox takes no decision about you that has legal or similarly significant effects based on automated processing alone (Art. 22 GDPR). Restricting or closing an account for a breach of the Terms of Use is decided by a person after a report reaches us by email. You are told which rule was broken, and you can contest the decision at support@weyvox.com.
• AI transparency (Art. 50 of the EU AI Act, Regulation (EU) 2024/1689):
  • on every call, an agent says at the start that it is an AI agent and that the call is being recorded for a call note (written down as text; no audio is kept); this cannot be switched off;
  • every reply Alice writes to a comment is signed as coming from your business's AI agent;
  • generated and edited media carry built-in marking of AI-generated content.
• No training on your data. We do not train AI models, and our AI providers may not use your data to train theirs.

9. Your rights

Under the GDPR you have the right to:

• access your data;
• correct it;
• erase it, as a whole or in part;
• restrict some processing;
• object to processing based on legitimate interest;
• receive your data in a portable form (portability);
• withdraw consent at any time (for example contacts, location or the calendar), without affecting processing done before.

Much of this you can do yourself in the app: delete messages, chats, memory entries, documents, media, customers and orders, or your whole account (Settings → Account → Delete account). For anything else, including erasing only certain data, write to us. If you no longer have the app, you can ask for account deletion as described at weyvox.com/delete-account/.

Under Art. 85 of the French Data Protection Act, you can also give instructions about what happens to your data after your death. Send them to the contact address.

To use any right, write to support@weyvox.com. We answer within one month, as the GDPR requires, and we may ask you to prove that the account's phone number is yours. You can also lodge a complaint with the CNIL (Commission Nationale de l'Informatique et des Libertés), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, www.cnil.fr.

If you are not a Weyvox user

Your number can reach our systems without you ever using Weyvox. A business that uses Weyvox may have saved you as a customer. Its agent may have called you or sent you an SMS on the owner's instruction. Or a user who allowed Weyvox to access their contacts may have you in their address book.

You can stop this yourself at weyvox.com/optout/. You confirm the number by SMS or phone call, and the block takes effect at once. The number can no longer register a Weyvox account. Agents will neither call it, send it SMS nor answer its calls (a call from it to a Weyvox number is rejected instead of being answered by an agent, or rings the person as an ordinary call if they answer their calls themselves), and it is removed from the contacts copies on our servers and kept out of future ones. You can lift the block on the same page, because phone numbers get reassigned. If the number has a Weyvox account, delete the account first, then block the number. For any other request about your data held in a Weyvox user's account, write to us. We will pass it on to that user, who is the controller, and help them answer.

10. Security

We use technical and organisational measures that match the risk (Art. 32 GDPR). In plain terms:

• Encryption. Everything between the app and our servers is encrypted in transit. Everything we store is encrypted at rest.
• The separate Weyvox key. Sensitive data is also encrypted with a separate Weyvox key before it is stored: business documents and their extracts, customer cards and orders, agent memory and the media library, your social media posts and posting plan, the server copy of your chats with the agents, and identity documents. A raw copy of our database or storage is unreadable without that key. We hold the key, and the agents read this data in order to work for you. For business documents, the "Do not let the agent read this" switch keeps a document out of the agents' reach.
• Separation. Each account's data, and each business's data for a team, is kept separate, and access is checked on every request. Files in your account are never available at a public address. A post's media becomes public only when the post is published. Identity documents are stored apart from everything else.
• Your account and phone. An account is active on one phone at a time. A PIN adds a second factor when you sign in, and you can lock the app with your phone's biometrics (Settings → Account → Security). The app's local data is encrypted with a key that exists only on that phone and is never copied to other devices.
• Short retention of the most sensitive data (call transcripts, identity documents, provider copies), as set out in section 7.

No system is perfectly secure. If a breach occurs, we will notify the CNIL and, where required, you (Arts. 33–34 GDPR).

11. Children

Weyvox is not for children. You must be at least 18 years old to use it, and so must every team member. Registration requires confirming that you are 18 or older, and the service refuses accounts without it. We do not knowingly collect data from anyone under 18. If you believe a minor has given us data, contact us and we will delete it.

12. Changes to this policy

We may update this policy. We change the "Last updated" date and version above, and we tell you in the app or by other appropriate means before significant changes take effect.

13. Contact

For any privacy question or request: support@weyvox.com.