Privacy Policy

Your privacy and data security are fundamental to our mission at AiVoiceBay.iO

Last updated: January 2026 | Effective Date: January 1, 2026

Our Commitment: We implement industry-leading security measures and never sell your personal data. Your voice recordings and personal information are protected with enterprise-grade encryption and multi-tenant isolation. This policy explains how we collect, use, and protect your information.

Scope & Definitions

This Privacy Policy applies to the AiVoiceBay platform, website (aivoicebay.io), and all related services. AiVoiceBay is a product of Meal Market Technologies, Corp (Livermore, CA), the company responsible for this site and its SMS program. We act in different capacities depending on whose data we process:

"Business Customer" (You)

Organizations and individuals who create accounts and subscribe to our services. We are the Data Controller for your account information.

"End Callers"

Individuals who call phone numbers managed through our platform. We act as a Data Processor on behalf of our Business Customers for end caller data.

"Personal Information"

Information that identifies or could identify an individual, including voice recordings, phone numbers, and communication content.

AI & Automated Processing Disclosure

Important: AiVoiceBay provides AI-powered voice agents. Callers interacting with our platform may be speaking with an artificial intelligence system, not a human.

How AI Processes Your Data

  • Speech Recognition: Voice audio is converted to text in real-time for AI understanding
  • AI Response Generation: Text is processed by language models to generate appropriate responses
  • Voice Synthesis: AI-generated text responses are converted back to natural-sounding speech
  • Call Analysis: Conversations may be analyzed for quality assurance and service improvement

Your Rights Regarding AI Processing

  • You have the right to know when you are interacting with AI
  • You may request human assistance where available
  • You may object to automated decision-making that significantly affects you
  • Our Business Customers are required to disclose AI use to their callers

Information We Collect

Account Information (Business Customers)

  • Name, email address, and phone number
  • Organization name and business details
  • Billing information and subscription details
  • Authentication credentials (securely hashed, never stored in plain text)

Voice and Communication Data

  • Voice Recordings: Audio of phone conversations (with consent)
  • Transcriptions: Text versions of voice conversations
  • Call Metadata: Duration, timestamps, phone numbers, routing information
  • AI Interaction Logs: Conversation history and AI response records

Knowledge Base Content

  • Documents and information you upload to train your AI agents
  • Custom prompts, scripts, and configuration settings
  • Integration data from connected third-party services

Technical & Usage Data

  • Platform usage patterns and feature interactions
  • Device information, browser type, and IP addresses
  • Performance metrics and error logs
  • Cookies and similar tracking technologies (see Cookie Policy below)

How We Use Your Information

Service Delivery (Contractual Necessity)

  • Process voice calls and generate AI responses
  • Route calls according to your configured rules
  • Provide transcription, recording, and analysis services
  • Enable integrations with your CRM and business tools

Platform Improvement (Legitimate Interest)

  • Improve AI accuracy and response quality using aggregated, anonymized data
  • Enhance security features and fraud detection
  • Optimize system performance and reliability
  • Develop new features based on usage patterns

Note: We do NOT use your specific customer data or call recordings to train our AI models without your explicit opt-in consent.

Legal Compliance

  • Comply with telecommunications regulations and lawful requests
  • Maintain audit trails for enterprise compliance requirements
  • Respond to valid legal process (subpoenas, court orders)
  • Protect against fraud, abuse, and security threats

Call Recording & Consent

Voice recordings are a core feature of our service. We take consent seriously and comply with all applicable laws regarding call recording.

How Consent Works

  • Inbound Calls: Callers hear a disclosure before connecting (configurable by Business Customer)
  • Outbound Calls: AI agents provide disclosure at the start of each call
  • Two-Party Consent States: We apply the strictest consent requirements when applicable
  • Opt-Out: Callers may request to not be recorded; Business Customers must honor such requests

Business Customer Responsibility: You are responsible for ensuring your use of call recording complies with applicable laws in your jurisdiction. We provide tools and disclosures to help you meet these requirements.

SMS / Text Messaging

AiVoiceBay sends text messages only to people who have opted in: (a) team members verifying a mobile number to receive forwarded calls (one-time verification codes), and (b) team members who turn on voicemail and callback text alerts in their notification settings.

  • Mobile information is never shared: We do not sell or share mobile phone numbers or SMS opt-in/consent information with any third parties or affiliates for their marketing or promotional purposes.
  • Message frequency: Frequency varies. Verification is typically one message per number added, plus rare re-verification. Alert messages are sent only when a new voicemail or callback request arrives for a team member who has opted in.
  • Message and data rates may apply.
  • Opt-out / help: Reply STOP to any message to unsubscribe, START to opt back in, and HELP for help. Alert preferences can also be managed in account settings.

These messages are transactional and account-related; we do not send marketing or promotional text messages.

Data Protection & Security

Encryption & Storage

  • In Transit: TLS 1.2+ encryption for all data transfers
  • At Rest: AES-256 encryption for stored data
  • Voice Data: Encrypted storage with access controls
  • Backups: Encrypted, geographically distributed backups

Access Controls

  • Multi-tenant isolation with row-level security (RLS)
  • Role-based access control (RBAC) for team members
  • Multi-factor authentication available for all accounts
  • Audit logging of all data access

Data Retention

Data TypeDefault RetentionConfigurable
Voice Recordings90 daysYes (Enterprise)
Transcriptions90 daysYes (Enterprise)
Call Metadata2 yearsYes
Account DataDuration of subscription + 30 daysNo
AnalyticsAnonymized after 1 yearNo

Third-Party Service Providers

We partner with trusted, industry-leading service providers to deliver our platform. Each provider is contractually obligated to protect your data, maintain appropriate security certifications, and process data only as we instruct.

Telephony Infrastructure

Enterprise-grade voice and SMS services for phone number provisioning, call routing, and voice transmission. SOC 2 Type II certified providers.

Speech Recognition

Real-time speech-to-text transcription services. Audio is processed in real-time with strict data retention policies.

Voice Synthesis

Natural-sounding text-to-speech generation. Processed with enterprise-grade privacy controls and minimal data retention.

AI Processing

Advanced language models for conversation understanding and response generation. Data is not used to train AI models.

Cloud Infrastructure

Secure database hosting, authentication services, and cloud infrastructure. All data encrypted at rest and in transit.

Payment Processing

PCI-compliant payment processing for subscription billing. We never store your full payment card details.

All our service providers maintain appropriate security certifications (SOC 2, ISO 27001, or equivalent) and are bound by data processing agreements. For enterprise customers requiring a detailed list of subprocessors, please contact us.

Your Privacy Rights

Rights for All Users

  • Access: Request a copy of the personal data we hold about you
  • Correction: Update or correct inaccurate information
  • Deletion: Request deletion of your personal data (subject to legal retention requirements)
  • Export: Receive your data in a portable, machine-readable format
  • Objection: Object to certain processing activities

California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights:

  • Right to Know: What personal information we collect, use, and share
  • Right to Delete: Request deletion of your personal information
  • Right to Opt-Out: We do NOT sell personal information
  • Right to Non-Discrimination: We will not discriminate against you for exercising your rights
  • Right to Correct: Request correction of inaccurate personal information
  • Right to Limit: Limit use of sensitive personal information

Categories of personal information collected: Identifiers, Commercial Information, Audio/Electronic Information, Professional Information, Internet Activity.

European Union & UK Residents (GDPR)

If you are in the EU or UK, you have rights under GDPR:

  • Legal Basis: We process data based on contract performance, legitimate interest, or consent
  • Right to Erasure: "Right to be forgotten" in certain circumstances
  • Right to Restriction: Restrict processing while disputes are resolved
  • Data Portability: Receive your data in a structured, machine-readable format
  • Withdraw Consent: Withdraw consent at any time (where consent is the legal basis)
  • Lodge Complaint: File a complaint with your local data protection authority

How to Exercise Your Rights

Submit requests to hello@aivoicebay.io. We will respond within 30 days (or 45 days for complex requests with notice). We may need to verify your identity before processing your request.

International Data Transfers

AiVoiceBay is based in the United States. If you are located outside the US, your data may be transferred to and processed in the United States.

Safeguards for International Transfers

  • Standard Contractual Clauses (SCCs): We use EU-approved SCCs for EU/UK data transfers
  • Data Processing Agreements: All subprocessors are bound by appropriate transfer mechanisms
  • Encryption: Data is encrypted during all cross-border transfers
  • Access Controls: Strict access limitations regardless of data location

Children's Privacy

Our services are designed for business use and are not intended for children under 16 years of age. We do not knowingly collect personal information from children.

If we become aware that we have collected personal information from a child under 16, we will take steps to delete that information promptly. If you believe we have collected information from a child, please contact us at hello@aivoicebay.io.

Data Breach Notification

In the event of a data breach that affects your personal information, we will:

  • Notify affected Business Customers within 72 hours of becoming aware of the breach
  • Provide details about the nature of the breach and data affected
  • Describe measures taken to address and mitigate the breach
  • Notify relevant supervisory authorities as required by law
  • Provide recommendations for protective measures you can take

Privacy Questions & Requests

For any privacy-related questions, concerns, or to exercise your rights:

Privacy Officer

Email: hello@aivoicebay.io

Response time: Within 48 hours (requests processed within 30 days)

We are committed to resolving any privacy concerns promptly and transparently. You also have the right to file a complaint with your local data protection authority.

Policy Updates

We may update this privacy policy from time to time. We will notify you of material changes via email and platform notifications at least 30 days before they take effect. Continued use of our services after the effective date indicates acceptance of the updated policy.

Questions about this policy? Contact us | View our Privacy Policy | Terms of Service