byVoice is a voice recognition and transcription tool that helps businesses convert spoken language into text, facilitating meetings, interviews, and note-taking efficiently.
byVoice is a no-code conversational AI platform that enables businesses to build and deploy AI-powered voicebots and chatbots for automating customer interactions across voice and text channels[1][2]. Rather than focusing solely on transcription, the platform provides comprehensive automation capabilities including AI-driven interactive voice response (IVR), cloud PBX integration, and intelligent call routing, allowing organizations to resolve up to 80% of customer issues during first interactions[3]. Key features include a visual workflow editor for designing complex conversation scenarios, integration with leading AI models such as OpenAI's GPT and Google's Gemini, support for over 100 languages, and seamless connections to business systems like CRM, ERP, and HRM platforms[2][3]. The platform serves diverse use cases including customer support automation, recruitment outreach, sales cold calling, inbound call management, and white-label solutions for digital service providers[1][2]. byVoice differentiates itself through its microservice architecture enabling rapid feature deployment, advanced speech technology from providers like Deepgram and Google, and the ability to process thousands of calls daily while maintaining data security and minimal setup requirements[3]. The no-code builder makes enterprise-grade voice and chat automation accessible to businesses without extensive development resources, delivering measurable benefits such as reduced call center costs, increased agent productivity, and improved customer satisfaction[1][3].
ByVoice states it will not sell personal data and processing is limited to service provision, but the DPA and Privacy Po
No training opt-out mechanism was identified in the legal documents.
Moderate risk. Suitable for internal data but avoid confidential information.
ByVoice states it will not sell personal data and processing is limited to service provision, but the DPA and Privacy Policy do not explicitly prohibit AI training on user content. The Privacy Policy mentions 'analyzing customer interactions and feedback' and 'conducting testing, analytics, and research' with legitimate interest or consent, which could include model training. Sub-processors include multiple LLM providers (ChatGPT, Google Gemini, Anthropic, Groq, Deepseek) whose terms may permit training.
“[DPA] 'BYVOICE will not sell Personal Data of the Customer.' [Privacy] 'Analyzing customer interactions and feedback...to improve and support service quality' with legitimate interest basis. Sub-processors include ChatGPT, Google Gemini, Anthropic for 'LLM-based data processing services.'”
ByVoice grants a non-exclusive, royalty-free, transferable, sublicensable license to use, modify, and reproduce Client Content 'for the limited purposes of operating and providing the Service.' The license is broad (sublicensable, transferable) but nominally limited to service provision. However, the scope of 'operating and providing' is vague and could extend beyond strict service delivery.
“[ToS] 'you grant ByVoice a non-exclusive, royalty-free, transferable, sub-licensable, worldwide right and license to use, modify, reproduce, display your Client's Content on the Service for the limited purposes of operating and providing the Service to you.'”
ByVoice shares data with multiple third parties including LLM providers (OpenAI, Google, Anthropic), analytics providers (Google Analytics, Hotjar), and hosting services. A sub-processor list is published in DPA Annex 3. However, the Privacy Policy states 'we cannot guarantee absolute compliance with data protection laws in all circumstances' and recommends reviewing third-party policies. Data sharing is broad but with some contractual protections via DPAs.
“[DPA Annex 3] Lists 20+ sub-processors including ChatGPT, Google Gemini, Anthropic, Google Analytics, Stripe. [Privacy] 'we cannot guarantee absolute compliance with data protection laws in all circumstances. We recommend reviewing the privacy policies of these third parties.'”
ByVoice specifies retention periods in the Privacy Policy (e.g., 3 years for marketing, 3 years after service use for account management, 1 year for analytics). The DPA states data is deleted upon termination or request, but 'except to the extent that BYVOICE is required under Applicable Data Protection Laws to keep a copy.' Retention periods are defined but some ambiguity exists around legal holds and backup retention.
“[Privacy] 'Email marketing: 3 years after obtaining consent; Account management: Duration of using our Services and 3 years after.' [DPA] 'BYVOICE shall...delete, destroy or return all Personal Data...except to the extent that BYVOICE is required under Applicable Data Protection Laws to keep a copy.'”
ByVoice explicitly states that the Client retains ownership of Client Content: 'You retain ownership of your Client's Content.' The license granted to ByVoice is limited to operating and providing the Service. The company does not claim ownership of or rights to outputs generated by users.
“[ToS] 'You retain ownership of your Client's Content. However, you are solely responsible for any of your Client's Content that may be lost or become unrecoverable through your use of the Services.'”
ByVoice references GDPR compliance, has a DPA with Standard Contractual Clauses, and describes security measures (HTTPS, SSL, encryption). However, no SOC 2 Type II, ISO 27001, HIPAA, or other formal certifications are mentioned. The security documentation is present but certification status is unclear.
“[DPA] 'Standard Contract Clauses shall be entered into...for transfers of Personal Data...to countries which do not ensure an adequate level of data protection.' [Privacy] 'We implement...HTTPS with SSL certificates and other protection tools' but no formal certifications listed.”
Track and measure your AI tools with Olakai's observability platform.
Explore Olakai