Privacy Policy

In short

• We use your data to run Weyvox for you: your business phone line, your four AI agents and your business records. We do not sell your data, we show no advertising, and we do not use your data to train AI models.
• Before any of your data is sent to an AI company, you sign Your data and AI in the app. It names the three AI companies we use — Anthropic, OpenAI and Google — and what each receives (section 5). Until you sign, nothing is sent to them; you can withdraw your signature at any time in Settings → Your data and AI, and the agents then stop.
• Your data is stored in the European Union. Some AI and other service providers process data outside the European Economic Area, mainly in the United States, under the safeguards in section 6.
• We make no audio recordings of calls. On calls an agent handles, the conversation is written down as text for the agent's call note, and the agent says so at the start of the call. For a call an agent places from a chat, that transcript is kept for 24 hours; for other calls only the call note remains.
• Your data is encrypted in transit and at rest, and sensitive data is also encrypted with a separate Weyvox key.
• You can see, correct, export and delete your data. Deleting your account in the app erases it, and an account whose registration is never completed is erased automatically after 10 days (section 7 lists what we must keep).

1. Who is responsible for your data

This policy covers the Weyvox app for iPhone and Android and the weyvox.com website. Weyvox is the name of the app and of our business. The AI agents inside the app are Leo (AI coordinator), Cindy (AI receptionist), Marc (AI manager) and Alice (AI marketer).

We have not appointed a Data Protection Officer because Art. 37 GDPR does not require one for us. The contact above handles all privacy matters. Our supervisory authority is the French CNIL.

When we act for you. Your customers, your staff, the people who comment on your posts and the people your agents call or text are often not Weyvox users. For their personal data you are the controller, and we process it on your instructions as your processor (Art. 28 GDPR), only to provide the features you use. Our processing terms for this role are in section 25 of the Terms of Use.

2. What data we collect

We describe the data in the order it reaches us: your account and registration, your phone line, the agents, your goals, your business records, social media and media, your team, your subscription and usage, and then technical and website data.

Account

• Phone number. Your phone number is your identity in Weyvox. It opens your account and signs you in. Sign-in is confirmed with a one-time SMS code generated and checked by our SMS provider. We do not store the codes. They expire within minutes, and we keep only short-lived counters that limit repeated attempts.
• Profile. Your first and last name. Your date of birth, which the registration form asks for to confirm that you are 18 or older. Your profile photo, if you add one. Your gender (man or woman), or Prefer not to say, which you choose when you register and can change under Settings → Personal information; the agents use it as you set it and never guess it, and if you prefer not to say, they write to you without gendered forms. Your position in your business — for example owner, director or manager — which Leo asks during registration; tell him if it changes. The time you accepted our Terms. The agents read your name, gender and position so that they address you correctly and know whom they work for.
• Your signature under “Your data and AI”. When you signed, which version, the app language, the platform and the app version, and when you withdrew it. We keep this record as proof of your agreement for as long as your account exists.
• App language. The language you choose for the app is also the language in which agents start calls and write their notes.
• PIN and recovery codes. If you set a PIN (Settings → Account → Security), it is a second factor when you sign in. We never keep the PIN or its ten recovery codes as you typed them. We keep only a one-way fingerprint of each, with the counters that slow down guessing. Nobody at Weyvox can read them, and nobody will ever ask you for them.
• The phone your account is on. A Weyvox account is active on one phone at a time. We record an identifier for the phone you signed in on and the time you did so. Signing in on a new phone signs the old one out.

Registration and the introduction to the agents

Registration has five stages. Each stage uses only the data it needs.

1. Data protection: a page that explains how we protect your data. It uses none of your data.
2. Registration: the account data above. Before you can continue, you open and sign Your data and AI; only then is anything sent to an AI provider (the first is the check of your name).
3. Meet Leo: Leo first checks that Weyvox fits you — that you run a business, are starting one, or are a director or manager who leads people in one, in a sector we serve (Terms, section 2). If it does not, he records why in a few words, registration cannot be completed, and the account, with that note, is deleted automatically after 10 days; if you work in a business and lead no one, he asks you to pass Weyvox on to your manager, who can register the business and add you to the team. Otherwise he asks your position in the business and whether it already operates or you are just starting it, and fills in your business profile with your real details: Leo saves what you tell him — and what he reads on your website or public page, if you give him a link — into your business profile and price list, and personal facts about you into his memory. He also asks what brought you to Weyvox — the problem you want solved — tells you in a few words what each agent does and asks which of them you need; you choose your team with checkmarks. The agents you leave out are switched off (you can switch any agent on or off at any time in Settings), and the problem you described is saved, in your own words, to the agents' memory, so the agents you chose can start on it after registration.
4. Meet the agents: only the agents you chose take part, and each shows how it would handle your problem. Cindy can make a free test call (up to two calls of up to 6.5 minutes each) to the phone number you registered with, from a Weyvox service number, to tell you by voice how she will handle it and to answer your questions. No orders or text messages are created during these calls; a note of the call appears in your chat with her. Marc can prepare the document that fits your problem; if you give him the issuer details his documents need, such as your legal name, tax number and bank details, he saves them for your documents. Alice can create a photo, a short clip or a reel for a post, from your own photos and videos if you send them. None of this is required. If you chose no agent, this stage is skipped.
5. Subscription: you choose a plan (see Subscription, balance and usage).

One team. During registration, what you write to each agent you chose and its answers, and the transcript of Cindy's test call, are shared with the other agents of your team and with her test call, so that no one asks you the same thing twice. For this, every message of the registration chats is also stored on our server, encrypted with the separate Weyvox key, and deleted as soon as registration is complete, or with the account.

Your details stay. Everything you gave and everything created during the introduction stays in your account. Leo's first messages are written in the language of your app; when you write in another language, the agents switch to it. The introduction is paid for by Weyvox and is not charged to your balance. We record what it costs us, for our own accounts.

Unfinished registration. Registration is complete once you subscribe to a plan. Until then, signing in again takes you back to the stage where you stopped. If you have not subscribed within 10 days of confirming your phone number, the account is deleted automatically, with all its data, in the same way as when you delete it yourself in the app (see section 7).

Your business line

• Phone numbers. The Weyvox operator numbers you buy in the app (up to ten per account), their countries, the state of their monthly fees and the dates of the charges. If a temporary number is issued while your application is reviewed, the same applies to it.
• Identity documents for a number. Some numbers can only be registered with identity information, because telecom rules and our telephone operator require it. During the purchase you upload the requested documents (for example an identity document or proof of address) and form details (such as name, date of birth and address). We use them for one purpose only: submitting your number registration to the operator. While you type the address, suggestions come from an address lookup provider (for French numbers, France’s national address base run by IGN; for other countries, Geoapify — see section 5), which receives only the text you type (Geoapify also the number’s country). If you write to the operator’s verification team in the app, Anthropic translates the messages, into English for the operator and into your language for you, and only after you sign Your data and AI. We keep them only while the application needs them. Once the number is activated, the documents, the form details and the application record are erased automatically within 24 hours. A document you replace or remove during the application is erased within about 3 hours. A cancelled or expired application is cleaned up the same way.
• Your own business number. If you connect a number you already have, we store the number, the state of its caller ID check and the one-time code exchange that proved it is yours. You switch on call forwarding with your own operator. It works in their network, and we cannot switch it on or read its state.
• Calls. Every call runs over the public telephone network, carried by our telephone operator, which necessarily sees the numbers and the duration. We keep the call details (the parties, direction, date, time, duration and outcome) as the call history of your line, together with the routing and cost data needed to connect and bill each call. We make no audio recordings of calls, and no call audio is stored.
• Calls an agent handles. When Cindy answers or places a call, or takes over a call you are on, AI providers process the conversation in real time: a voice model hears the other person and speaks, and a language model does the work behind it (checking prices, creating an order, sending an SMS). At the start of the call the agent tells the other person that it is an AI agent and that the call is being recorded for a call note. This means the conversation is written down as text (a transcript) from which the agent writes its note. The audio itself is not kept. At the start of an outbound call, the system also checks whether a person or a voicemail answered. While an agent is on a call you can listen in from the app. The audio reaches your phone live and is not stored.
• Your own voice on a call with an agent. If you take a call over from an agent, what you say is also written down as text in real time by our speech-to-text provider. It becomes part of that call's transcript, so your words appear in the agent's note and the agent knows what was said when it takes the call back. No recording of your voice is kept. A call you handle yourself, start to finish, without an agent, is neither recorded nor written down as text.
• Call notes and transcripts. After a call handled by an agent, the agent writes a short note into the conversation with that number in the Calls tab. The note stays until you delete it or your account. For a call an agent places from a chat, the full transcript is kept for 24 hours, so you can ask follow-up questions about the call, and is then deleted automatically; for other calls only the note remains.
• Settings for a number. Choices kept for a particular caller, such as whether an agent answers that number and the language the agent speaks with that person. The agent remembers this language after a call.
• Keypad tones. When an agent works through a phone menu for you ("press 1 for bookings"), it sends keypad tones on the call. The digits can be sensitive (a booking reference, an account number, a code you dictated). They are passed to the telephone operator only to press the keys on that call and are not stored. Our technical logs record only that keys were pressed and how many, never which ones.

SMS to your customers

Cindy and Marc can send SMS to your customers. Examples are a confirmation of what was agreed on a call, which is sent only after the customer agreed to receive it, or a message you ask for. For each SMS we keep the text, the recipient's number and the delivery status. They are shown in the conversation with that number in the Calls tab. The SMS is delivered by our telephone operator, which processes the number and the text to deliver it. The recipient sees the sender name "Weyvox", and the text starts with your business name. These records are kept until you delete the conversation or your account. Anyone who does not want to be contacted through Weyvox can block their number at weyvox.com/optout/. The block covers both SMS and calls.

Your agents and your chats with them

• Your chats. The messages you write to the agents (in one shared chat, with @Name to address someone), the attachments you send, your instructions, and the agents' answers and handovers to each other (for example "Leo → Marc"). Your phone shows your chat history, and we keep a server copy so it is there again on a new phone. That copy is encrypted with the separate Weyvox key, is never shown to other users and is never used to train any model. Voice messages you send are converted into text by our speech-to-text provider.
• What the AI provider receives. To produce an answer, the agent sends your message to our AI provider's model, together with the context the answer needs. That context can include your business profile, relevant memory, and the records the agent looks up. The provider processes it as our processor, and it may not use the data to train its models.
• Web search and links. When an agent searches the web or opens a link, the search query or the address is processed by our AI provider to fetch the results.
• Agent memory. Personal facts about you that Leo saves to help you (for example "prefers morning appointments", a door code), including temporary facts with an end date, and the problem you came to Weyvox with, saved at registration so your agents can start on it. Facts about your business are kept in your business records, not in memory. It also holds the names of people you mention, reminders the agents have promised, and short summaries of recent calls and chats. The memory is listed on Leo's page (What the agent knows about me). You can delete single entries or wipe it all at once. With Leo's Autonomy switched on, Leo removes outdated reminders and facts himself and tells you in one line. With it off, and always on the Start plan, he asks you first. The memory is encrypted with the separate Weyvox key.
• Background work. The journals and results of the longer tasks the agents carry out for you.
• Media library. The photos, videos, audio and files you give the agents, and the images, videos, audio and documents they create, are kept in the media library (Materials) so the agents can use them later. For example, Marc can put your photos into a presentation, or Alice can edit your videos into a reel. When a photo arrives, our AI provider writes a short text description of it, so the agents can find the right photo without looking at all of them. The library is encrypted with the separate Weyvox key and counts towards your storage. Your files are seen only by you until you add one to your business's Shared materials folder; then the administrator, the deputy and team members with access to the folder see it too, and removing it from the folder makes it yours alone again.
• Location, with your phone's permission. If you allow location access, your approximate position is attached to the messages you write to the agents, so they can answer questions about places ("find a pharmacy near me"). The position is passed along with that request to produce the answer and is not stored on our servers. It is never used on phone calls. You can withdraw the permission at any time in your phone's settings.
• Contacts, with your phone's permission. So that Cindy can call someone you name ("call Anna"), the app uploads a copy of your contacts to our servers while it has the contacts permission. The copy holds names and phone numbers only, with no emails, photos or other fields. It is updated when your address book changes, and numbers blocked at weyvox.com/optout/ are filtered out of it. It is never shown to other users and never used for advertising. If you withdraw the permission, the copy is deleted from our servers the next time you open the Weyvox tab.
• Your settings for the agents. Which agents are switched on — including an agent switched on just for one task: when it was switched on and in which chat, cleared as soon as it switches off again — each agent's Autonomy, the communication style you choose for Leo, and the agents' other switches.

Goals

On the Business and Professional plans you can set a goal with Leo. For each goal we keep:

• the agreement shown on the goal card: the result or measure, the deadline, the steps and which agents do them, the actions you allow, the cost estimate and the financial limit;
• the time you accepted it;
• what has been spent on it (taken from our usage records);
• snapshots of the measure, calculated from your own business records;
• the result of each step, with Leo's verdict;
• Leo's weekly reviews.

Goals stay in your account, and are deleted when you delete your account.

Your business records (Leo and Marc)

These records are what the agents need in order to work for your business. They are kept until you delete them or your account, and they never expire on their own.

• Business profile and price list. The business name and legal name, a description, who your customers are, contacts, opening hours and exceptions, payment and cancellation terms, delivery, frequent questions and what the agents may promise on their own. Your services and products with their prices. Agents quote prices only from this list. The business profile is kept by Leo, the price list by Marc. Nothing here is shown to anyone outside your business.
• Customers and orders. Customer cards (name, phone number, email, company, notes), orders with their stages, payment state and the team member assigned, and each order's history. Much of this is personal data of your customers, so it is encrypted with the separate Weyvox key and kept separate for each business.
• Business documents. The paperwork you upload (contracts, invoices, tax filings, supplier and staff files, licences) and the documents the agents write for you. We store the file, the details taken from it (type, other party, number, date, amount, expiry date), a text extract used for search, and any links to a customer or order. The agents can read these documents, because that is how they answer questions about them. A document is read when you upload it and again only when an agent needs something its text extract does not contain. A copy of a large file held by our AI provider for reading is deleted within 24 hours. For any sensitive document you can switch on "Do not let the agent read this". Its text extract and search entry are then erased, and the agents can no longer find or read it, while the document stays stored and visible to you. Documents and their extracts are encrypted with the separate Weyvox key.
• Deleting a document moves it to Deleted. It disappears from your lists and from the agents' search at once. You can restore it or delete it permanently from there, and it is erased automatically 90 days later. Until then it still counts towards your storage.
• Document templates and your forms. The details you issue documents under (name or company name, address, tax or registration number, bank details, email, phone), an optional logo, per-type defaults and custom fields. Also the forms Marc keeps for you from a blank you sent: its layout (encrypted with the separate Weyvox key), its fields and a link to the original file. A template is meant for your own details, not a third party's. When Marc builds a presentation or analyses a spreadsheet, he copies the files he needs into our AI provider's work environment, and the provider keeps them there for up to 30 days.
• Calendar. If you connect Google Calendar, we keep your Google account email, the calendar you choose for your busy times, the access tokens (encrypted), and only the busy periods of that calendar. Google gives us nothing else: no event titles, guests, places or descriptions. The bookings Marc takes are added to a separate “Weyvox” calendar that Weyvox creates in your Google account; we do not change your other calendars. If you use the calendars on your phone instead, the app reads them on the phone and sends us only the start and end times. Marc uses these busy times to book customers only when you are free.
• Mailbox. If you connect your mail — up to 5 mailboxes: Gmail, iCloud or Yahoo with an app password you create in that account, or any other mail with IMAP and SMTP with its password — we keep, for each mailbox, the email address, the password and the names of its mail servers, encrypted with a separate Weyvox key, and the point up to which Leo has gone through its Inbox. To find the servers of other mail, Weyvox looks up only the domain of your address in public DNS and in Mozilla Thunderbird's public database of mail settings; the full address goes only to the settings server of your mail's own domain. We do not keep the emails themselves: Leo reads them from your mailbox each time he works with them — a new email from a person, or what you ask him to find — without marking them as read or moving them. An email Leo proposes to send is kept as a card in your chat (encrypted, up to 30 days) until you tap “Send”; for emails sent through Weyvox we keep only which conversation it was and whether Leo sent it on his own, without content (30 days). Newsletters, notifications and automatic replies are not passed to the agent.
• Analytics and reports. The Results tab and the agents' regular reports (for example a weekly summary) are calculated from records already in your account. They involve no new data collection.

Social media (Alice)

Alice runs the social media accounts of your business: Instagram, Facebook, TikTok, YouTube, LinkedIn, Threads, Pinterest and Bluesky. Only the administrator or a deputy administrator can connect accounts. A team member can work only on the networks the administrator ticks for them, and each post records which person prepared it.

• Connecting. You connect each account yourself, on the network's own sign-in page. The connection goes through our social media publishing intermediary, established in Sweden (EU), which holds the access the network grants. We do not hold it. For Bluesky you create an app password in Bluesky's settings and enter it with your handle, never your main password. That connection is also held by the intermediary.
• What we store. The name, username and profile picture of each connected account. The posts Alice prepares and publishes (text and media) and your posting plan, both encrypted with the separate Weyvox key. Post statistics received from the networks. The identifiers (not the text) of comments Alice has already handled.
• Comments. Only if you switch on "Access to comments" does Alice read comments under your posts and answer them. A comment contains what the network provides about it, usually the author's public name and the comment text. It is passed to our AI provider to write the reply. Every reply is signed automatically as written by your business's AI agent. The people who comment are data subjects of your business, and you are the controller of their data.
• What we pass on. To publish a post, its text and media go to the intermediary and to the network. The intermediary keeps a post's media for up to 60 days. Where a network supports it, we mark AI-generated media as such.
• What goes out without you. Every post Alice prepares in the chat comes to you as a post card and is published only after you tap Publish. When your posting plan is approved and active, she prepares the plan's posts in the background on any plan, and each comes to you as a post card with a notification and waits for your Publish; only if, on the Business or Professional plan, you switch on her Autonomy does she publish the plan's posts on her own and report to you. A reel with quality defects is never published without your Publish anyway.
• Disconnecting and deleting. Disconnecting an account on Alice's Social media page also removes the connection at the intermediary. Deleting your Weyvox account cancels your scheduled posts and disconnects all your accounts. Anything already published stays on the network, under that network's own rules.

Media Alice analyses and creates

• Your videos. Each video you give the agents is analysed once, automatically, so Alice understands what is in it. Our AI provider receives the picture and sound, either through a link valid for a short time or as a temporary copy. The temporary copy is deleted no later than 2 hours after the analysis, and at once if you delete the video. Speech in the video is converted into text by our speech-to-text provider in the United States, which receives the whole file. Its copy of the text is deleted as soon as we have saved ours. The results (a description of the scenes, the transcript and the agent's notes) are encrypted with the separate Weyvox key and deleted together with the video.
• People in your media. Alice describes people only by their role ("a customer", "an employee"). She never identifies them and never recognises faces.
• What Alice creates. Photos, short video clips, voice-overs, music and videos edited from your own footage. Your instructions and the reference images or files needed go to our AI providers. The provider keeps the record of a generated video clip for 2 days, so you can ask for changes, and we then delete it. For voice-overs, OpenAI receives the text to be read and, to time the subtitles, the voice-over it produced. The music provider does not store the tracks.
• Video editing runs in our own rendering service in the EU. Nothing is left there once the job is done. Previews are deleted after 14 days, unfinished editing plans after 90 days, and the finished videos go to your media library.
• AI marking. Generated images, clips and audio, as well as edited videos, carry built-in marking of AI-generated content, and we add the "AI-generated" label when publishing to networks that support it.

Watching YouTube videos (YouTube API Services)

Alice's ability to watch a public YouTube video from a link uses YouTube API Services. When you use it, Google's Privacy Policy also applies: www.google.com/policies/privacy.

• No access to your YouTube account. Weyvox calls YouTube API Services from our servers with its own key. We do not sign in to YouTube for you and do not receive data from your YouTube account through this feature. Connecting your YouTube channel for publishing is separate and is described under Social media above.
• No video files. We do not download or store YouTube videos.
• Watching a video from a link. When you or Alice ask to watch a public YouTube video, the link and your question go to our AI provider, which reads the video directly from YouTube. From YouTube API Services we ask only for the video's duration and up to 20 of its top public comments. Only the text of the comments is used, without the names of their authors, and only for that one answer: they go to our AI provider together with the video, and we do not store them or show them in the app.

Your team (team members)

• Who they are. On the Business and Professional plans an administrator can add people to the team under Settings → Team: team members, staff who work within the rights of their position, and, on the Professional plan, deputy administrators, who can do everything in the business except the subscription, balance, numbers, the team list, goals and deleting the account. A team member does not register. The administrator adds them through a card that Leo prepares, giving their first and last name, date of birth (team members must be 18 or older), gender, which the agents use to address them correctly, their position and, optionally, a phone number as a note, and gives them an eight-character access code. What the administrator writes to Leo about the person is processed like any other chat with the agents; the access code is never passed to the agents. We store those details, a one-way fingerprint of the code (never the code itself), the identifier of the phone the code was used on, the times of their sign-ins, their role, the rights the administrator gave them (the agents assigned to them and, for each, its functions: editing the business profile; their own or the whole business's orders, customers and documents, money, business documents and editing services and prices; incoming and outgoing calls on a business line; the social networks they may run; Alice's Montage studio; and which agents act on their own for them), their monthly spending limit (or no limit) and their position. If Cindy is assigned and the administrator passes them one of the Weyvox numbers, their calls on that line are part of the line's call history.
• Activity. In each team member's card, the administrator sees their activity for a chosen period (7 days by default, up to 90). It shows the orders assigned to them (open and completed), their actions in order histories (stage changes, payments, notes), the number and minutes of calls on their line, what they spent under their name, and their last sign-in. The administrator can also ask Leo about it in their own chat. Activity is calculated from records that already exist. Nothing extra is collected.
• Charges. What a team member spends is charged to the administrator and shown in the administrator's usage records with the team member's name. The team member sees only their own spending.
• Who is responsible. The administrator is the controller of the personal data of the staff they add. Weyvox processes it to provide the feature.
• Removal and deletion. When the administrator deletes someone from the team (Delete team member), the access code stops working at once, their orders are released and their sub-account is deleted at once, together with their chats with the agents. Their name stays on the order history entries they made, and the orders, documents and posts they made stay in the business, as part of the business's records. A team member can delete their own sub-account at once with Settings → Account → Delete account. Deleting the administrator's account deletes every team member attached to it.

Subscription, balance and usage

• Purchases in the app. Subscriptions and extra credit packs bought in the app are sold by Apple (App Store) or Google (Google Play). They process your payment under their own terms, and we never receive your card details. From the store we receive what we need to provide what you bought: the plan or credit pack, the store's transaction and purchase identifiers, the start and end of each period, and the subscription's status (active, cancelled, in the store's payment retry period, expired, refunded). The store gives you its own receipt, not an invoice in your company's name.
• Purchases on our website. On weyvox.com you can buy a subscription or extra credit packs directly from us and turn on auto top-up; only these payments come with an invoice in your company's name (with your company details and VAT). You sign in with your phone number (see Website visitors below); if you have no account yet, your payment creates one with that number, and you complete registration in the app with the same number. The payment is processed by our payment provider, Stripe, which receives your card details; we never do. For the invoice you enter your name or your company's name, its billing address, its VAT or tax number (required in the countries where it can be checked) and an email address. Stripe keeps them in your customer record, calculates the VAT, issues the invoice and emails it to you; we read these details to show them in your account, where you can change them. Your invoices are shown in your account on weyvox.com and, as PDF files, in Payment history in the app. We keep the Stripe customer, subscription, payment and invoice identifiers, the plan, its periods and the subscription's status. Stripe keeps the card you pay with for the renewals of your subscription and, if you turn on auto top-up, for those charges, until you remove it or your account is deleted; for auto top-up we keep the card brand and its last four digits, the threshold and pack you chose, and the result of the last charge.
• A payment link by SMS. When you reach the subscription stage of registration, we send one text message per account, through our telephone operator, to the phone number you confirmed, in your language. It tells you that an invoice in your company's name is available only when you pay on our website, and carries a personal link for that. The link is valid for 24 hours and only allows buying a subscription for your account. We keep only a one-way fingerprint of the link and when the message was sent, so that it is never sent twice. It is sent only to numbers in the European Union and Ukraine, and not to team members, to accounts that already have a subscription, or to numbers blocked at weyvox.com/optout/.
• Credits. Your plan credits and their expiry date, your extra credits, the total for the current period that the app and your account on weyvox.com show, and your purchases of credit packs.
• Usage records. What each use cost, by day and operation: agents' work, calls, SMS, media, storage, numbers and team member seats. For an administrator with a team, each record shows the team member who caused the charge.

Technical and device data

Notification tokens, a device and app identifier, the app version and platform, the IP address, and short-lived technical logs created when the app talks to our servers. We use them to deliver calls and notifications, keep the service secure and fix problems. The app contains no third-party advertising, analytics or tracking software. To find and fix errors, the app, the billing account on our website, our servers and the agents send technical error reports to an error reporting provider (see section 5).

Website visitors (weyvox.com)

• The site sets no advertising, analytics or tracking cookies and uses no cross-site trackers. The only cookies are strictly necessary ones: the sign-in cookie of your account on weyvox.com, described below, which keeps you signed in, and, only on the page of your account when you open the payment form, the fraud-prevention cookies of our payment provider, Stripe, whose script is loaded only there.
• To see how many people visit and which pages they read, the site uses Cloudflare Web Analytics from our hosting provider. It sets no cookies, does not fingerprint visitors or follow them across sites, and gives us only aggregate figures: page views, the page or site a visit came from, the country, the browser type and how fast pages load.
• Our hosting provider processes standard connection data (such as IP addresses) to deliver and protect the site. When a page loads data from our servers (for example the plan prices), our servers process the same connection data.
• Signing in to your account on weyvox.com. You sign in as in the app: your phone number, a one-time code by SMS or phone call from our SMS provider, and your PIN if you have set one. To keep the form from being used to send codes automatically, it is protected by Cloudflare Turnstile, a check from our hosting provider that a person is using the page; it sets no advertising cookies and does not track you across sites. We also count requests per network address, keeping only a one-way fingerprint of the IP address with the counters, for 2 days. After you sign in, the session lasts up to 2 hours and is kept only in that browser tab. So that you do not need a new SMS code every time, the browser also keeps a sign-in key: a strictly necessary cookie set by our server (api.weyvox.com), which the page’s scripts cannot read and which is sent only to our server. It works only for your account on weyvox.com, lasts 90 days from your last visit and is erased when you sign out; we store only a one-way fingerprint of it.

People who block their number at weyvox.com/optout/

This notice is for people who use the weyvox.com/optout/ form, usually people who are not Weyvox users.

• What we collect: your phone number, first name, last name and date of birth, the time you blocked or unblocked the number, and the verification that you received the code by SMS or phone call. We also keep a security log of each request: the number, a one-way fingerprint of your IP address, the browser type and the result.
• Why: the number is needed to carry out the block. The block stops agents from calling, texting or answering the number, stops the number from registering a Weyvox account, and removes it from the copies of users' contacts. The name and date of birth are recorded only to show who asked for the block or its removal. This matters if a number passes to a new holder or a request is disputed. They do not change how the block works. The security log protects the form against abuse.
• Legal basis: carrying out your objection to the use of your number (Art. 21 and Art. 6(1)(c) GDPR). Recording the requester's details and the security log rely on our legitimate interest in showing that a request was genuinely made and in protecting the form (Art. 6(1)(f)).
• How long: an active block is kept for as long as it is in force. After you lift it, the entry is deleted 12 months later. An unfinished request is deleted within 24 hours. The security log is kept for 12 months.
• Who receives it: our telephone operator, only to deliver the code by SMS or call. Weyvox users are never told who blocked a number.
• Your rights: the rights in section 9. Erasing the register entry also lifts the block.

Support and abuse reports

If you contact us, we keep your message and contact details for as long as your request needs. You can report abuse (spam, threats, fraud, unlawful use of a number, an agent or published content) by email to support@weyvox.com, with the number or link and the time concerned. We keep what you send for as long as the case needs it, and we never tell the reported person who reported them.

3. Why we use your data, and our legal bases

Where we rely on legitimate interest, we have weighed it against your rights, and you can object at any time (section 9).

4. Calls and recording

5. Who we share data with

We do not sell your personal data and do not share it with advertisers. To run Weyvox we use a small number of service providers (processors). They act on our documented instructions under contracts that meet Art. 28 GDPR, and each of them is bound by contract to give your data the same or equal protection as this policy and the GDPR require. They fall into these categories:

• App stores and platform providers: distribution of the app and push notifications.
• A telephone operator (Telnyx): phone numbers, calls to and from ordinary phones, SMS to your customers, the one text message with the payment link during registration, and, where the rules require it, receiving the identity information you provide to register a number. For that last task the operator also has its own regulatory obligations.
• Address lookup providers: address suggestions while you type the address for registering a phone number — for French numbers the national address base (Base Adresse Nationale) of IGN, a French public body; for other countries Geoapify, operated by Keptago Ltd, established in Cyprus (EU). They receive only the text you type (Geoapify also the number’s country).
• An SMS verification provider: sign-in codes.
• A payment provider (Stripe): payments on weyvox.com, subscriptions and auto top-up, VAT calculation, and issuing and emailing invoices. Card details are handled only by Stripe.
• Hosting, database, file storage and cloud computing providers (EU regions): running our servers, the agents and video editing, and storing your data.
• An error reporting provider (Sentry, operated by Functional Software, Inc.), with data stored in the EU (Germany): technical reports when the app, the billing account on our website, our servers or the agents hit an error — what went wrong and where in the code, the app version, the device model and operating system (on the website: the browser and its version), and a random identifier of the app installation. Reports contain no messages, files, call content, phone numbers or IP addresses, and are deleted after 30 days.
• AI providers. We send them your data only after you sign Your data and AI in the app, and only what a given request needs:
  • Anthropic (Claude models): your messages to the agents and the files you send them, your business profile, customers, orders and documents, contacts from your phone book when an agent looks for a person, call transcripts and call notes, social media posts and comments, emails from the mailboxes you connected (sender, recipients, subject, text and attachment names) when Leo reads them or drafts a reply, your name and position, and the messages you exchange with the telephone operator’s verification team when you buy a number — so the agents can understand you, answer and do the work, to check your name at registration, and to translate those messages;
  • OpenAI: the audio of calls an agent handles (the other person's voice, and yours when you take a call over from an agent) and your voice messages, the text of messages you ask to hear read aloud, texts for voice-overs in videos, and speech in your videos — so the agent can talk on the phone in real time, to read messages and videos aloud, and to turn speech into text (including subtitles for your videos);
  • Google (Gemini API): photos and videos you give the agents, the descriptions used to create images, videos and music, and YouTube videos you send a link to — to create and edit images, videos and music, and to analyse media;
  They process this content only to provide the feature to us, and they may not use it to train their models.
• A social media publishing intermediary (Outstand), established in Sweden (EU): connecting your social media accounts, publishing posts, reading comments and posting replies. It keeps a post's media for up to 60 days.
• A mapping provider: only when an agent needs place information for a task.
• An email provider: messages you send to our support address.

The AI providers are named above. A current list of our other processors by name is available on request at support@weyvox.com.

Services that are not our processors. Some services act for you or on their own account rather than for us. What they receive is governed by their own terms and privacy policies:

• Apple and Google as sellers of a subscription or credit pack bought in the app. They process the payment as independent controllers.
• Stripe, for the part of a payment on our website that it handles on its own account (processing the card payment, fraud prevention and its own legal obligations), as an independent controller under its own privacy policy.
• Your Google Calendar. We read it on your instruction and with your consent, and you can disconnect it at any time in the app or at myaccount.google.com/permissions.
• Your mailbox provider (Gmail, iCloud, Yahoo or the provider of any other mail you connect). Weyvox signs in to your mailbox with the password you gave, on your instruction, and the emails Leo sends go out through it from your address. Disconnecting a mailbox in the app erases its password at once; an app password can also be deleted in that account — for Gmail at myaccount.google.com/apppasswords.
• YouTube, through YouTube API Services (see Watching YouTube videos).
• The social networks you connect. A post Alice publishes on your instruction is received by the network in order to publish it. What has been published stays there under the network's own rules. Disconnecting the account or deleting your Weyvox account does not remove it from the network.
• The people your agents call or text on your behalf, who receive what the agent says or writes.

We may also disclose data where the law requires it, or to protect our rights, our users or the public.

Google API data: Limited Use

Weyvox's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

• we do not sell that information;
• we do not transfer it to advertising platforms, data brokers or information resellers;
• we do not use it to serve or personalise advertising;
• we do not use it to determine creditworthiness or for lending.

Nobody at Weyvox reads it, except with your explicit consent, where it is strictly necessary for security, or to comply with the law. We do not use raw or derived data obtained through Google Workspace APIs to develop, improve or train non-personalised artificial intelligence or machine learning models, and we do not store it together with such models. When an agent needs your availability, it receives only the free time windows derived from your calendar, never event titles or details. That request is processed by our AI provider as our processor, only to produce the answer you asked for, and the provider may not use it to train its models.

6. Where your data is stored, and transfers outside the EU

We store your data in the European Union. Some processing does take place outside the European Economic Area, mainly in the United States. This covers some AI providers (language, voice, speech-to-text and media models), the audio provider for voice-overs and sound, and some platform services. For those transfers we rely on the safeguards in Chapter V GDPR: an adequacy decision (such as the EU–US Data Privacy Framework, where the provider is certified) and/or the European Commission's Standard Contractual Clauses, with additional measures where appropriate. Our social media publishing intermediary is established in Sweden. Where data passes from it to a place outside the EEA, the transfer relies on the Standard Contractual Clauses. Our payment provider for weyvox.com, Stripe (for customers in the EEA, Stripe Payments Europe, Limited, Ireland), may process payment data in the United States; for that it relies on the EU–US Data Privacy Framework and/or the Standard Contractual Clauses. Error reports are stored in the EU (Germany). The error reporting provider is established in the United States, so any access to them from there relies on the same safeguards. You can ask us for more information about these safeguards at the contact address above.

7. How long we keep your data

We keep personal data only as long as each purpose needs it. These are the periods built into our systems:

Deleting your account erases your data on our servers and what the app kept on your phone: the local encrypted databases, their encryption key and cached files. It releases your numbers, cancels your scheduled posts, disconnects your social media accounts, your mailbox and your calendar, and deletes the copies our AI providers still hold. A copy that cannot be reached at that moment stays in a deletion queue that is no longer linked to your account, and is retried until it is gone. While a subscription still renews (App Store, Google Play or our website), the app asks you to cancel it first and then lets you delete the account; the month already paid for is not refunded. If a weyvox.com subscription is still active at that moment, we cancel it at Stripe, and we delete our customer record at Stripe together with any card saved there (the auto top-up card included). The invoices for your payments on weyvox.com stay with Stripe as accounting records for 10 years, as French law requires. Details: weyvox.com/delete-account/.

Copies may remain briefly in backups until the normal backup cycle overwrites them.

8. The AI agents: automated processing and transparency

• The agents act on your instructions and within your settings. For each agent you control "Agent at work" (you can switch off any agent except Leo) and Autonomy. With Autonomy on, Leo tidies up his memory himself, Cindy places calls herself, Marc books, updates orders, sends SMS and prepares documents himself (he marks a payment only on your word), and Alice publishes the posts of your approved posting plan herself (a post prepared in the chat always waits for your Publish). With Autonomy off — and always on the Start plan, because Autonomy comes with the Business and Professional plans — each of them asks you first.
• Goals. When you accept a goal, the agents carry out only the actions listed on its card; each paid action is checked against the goal's financial limit and reserved before it starts, and only the agents' own work on a step already under way can take the goal slightly over the limit (Terms, section 12).
• No automated decisions with legal effect. Weyvox takes no decision about you that has legal or similarly significant effects based on automated processing alone (Art. 22 GDPR). Restricting or closing an account for a breach of the Terms of Use is decided by a person after a report reaches us by email. You are told which rule was broken, and you can contest the decision at support@weyvox.com.
• AI transparency (Art. 50 of the EU AI Act, Regulation (EU) 2024/1689):
  • on every call, an agent says at the start that it is an AI agent and that the call is being recorded for a call note (written down as text; no audio is kept); this cannot be switched off;
  • every reply Alice writes to a comment is signed as coming from your business's AI agent;
  • generated and edited media carry built-in marking of AI-generated content.
• No training on your data. We do not train AI models, and our AI providers may not use your data to train theirs.

9. Your rights

Under the GDPR you have the right to:

• access your data;
• correct it;
• erase it, as a whole or in part;
• restrict some processing;
• object to processing based on legitimate interest;
• receive your data in a portable form (portability);
• withdraw consent at any time (for example contacts, location, the calendar or your mailbox), without affecting processing done before. Your signature under Your data and AI is withdrawn in the app, under Settings → Your data and AI → Withdraw consent: from then on nothing is sent to the AI providers and the agents stop until you sign again.

Much of this you can do yourself in the app: delete messages, chats, memory entries, documents, media, customers and orders, or your whole account (Settings → Account → Delete account). For anything else, including erasing only certain data, write to us. If you no longer have the app, you can ask for account deletion as described at weyvox.com/delete-account/.

Under Art. 85 of the French Data Protection Act, you can also give instructions about what happens to your data after your death. Send them to the contact address.

To use any right, write to support@weyvox.com. We answer within one month, as the GDPR requires, and we may ask you to prove that the account's phone number is yours. You can also lodge a complaint with the CNIL (Commission Nationale de l'Informatique et des Libertés), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, www.cnil.fr.

If you are not a Weyvox user

Your number can reach our systems without you ever using Weyvox. A business that uses Weyvox may have saved you as a customer. Its agent may have called you or sent you an SMS on the owner's instruction. Or a user who allowed Weyvox to access their contacts may have you in their address book.

You can stop this yourself at weyvox.com/optout/. You confirm the number by SMS or phone call, and the block takes effect at once. The number can no longer register a Weyvox account. Agents will neither call it, send it SMS nor answer its calls (a call from it to a Weyvox number is rejected instead of being answered by an agent, or rings the person as an ordinary call if they answer their calls themselves), and it is removed from the contacts copies on our servers and kept out of future ones. You can lift the block on the same page, because phone numbers get reassigned. If the number has a Weyvox account, delete the account first, then block the number. For any other request about your data held in a Weyvox user's account, write to us. We will pass it on to that user, who is the controller, and help them answer.

10. Security

We use technical and organisational measures that match the risk (Art. 32 GDPR). In plain terms:

• Encryption. Everything between the app and our servers is encrypted in transit. Everything we store is encrypted at rest.
• The separate Weyvox key. Sensitive data is also encrypted with a separate Weyvox key before it is stored: business documents and their extracts, customer cards and orders, agent memory and the media library, your social media posts and posting plan, the server copy of your chats with the agents, the registration chats shared with your team, and identity documents. A raw copy of our database or storage is unreadable without that key. We hold the key, and the agents read this data in order to work for you. For business documents, the "Do not let the agent read this" switch keeps a document out of the agents' reach.
• Separation. Each account's data, and each business's data for a team, is kept separate, and access is checked on every request. Files in your account are never available at a public address. A post's media becomes public only when the post is published. Identity documents are stored apart from everything else.
• Your account and phone. An account is active on one phone at a time. A PIN adds a second factor when you sign in, and you can lock the app with your phone's biometrics (Settings → Account → Security). The app's local data is encrypted with a key that exists only on that phone and is never copied to other devices.
• Short retention of the most sensitive data (call transcripts, identity documents, provider copies), as set out in section 7.

No system is perfectly secure. If a breach occurs, we will notify the CNIL and, where required, you (Arts. 33–34 GDPR).

11. Children

Weyvox is not for children. You must be at least 18 years old to use it, and so must every team member. Registration requires confirming that you are 18 or older, and the service refuses accounts without it. We do not knowingly collect data from anyone under 18. If you believe a minor has given us data, contact us and we will delete it.

12. Changes to this policy

We may update this policy. We change the "Last updated" date and version above, and we tell you in the app or by other appropriate means before significant changes take effect.

13. Contact

For any privacy question or request: support@weyvox.com.