Privacy Policy

1. Introduction

Kumar Odevall AB ("we", "us", "our"), operating as House of Voice, is committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

This Privacy Policy explains how we collect, use, process, and protect your personal data, including voice data and sensitive customer information.

2. Data Controller

Kumar Odevall AB is the data controller responsible for your personal data.

Contact details:
Email: hello@houseofvoice.ai
Address: Nautilisvägen 2, 181 66 Lidingö, Sweden

3. What Data We Collect

We collect and process the following categories of personal data:

3.1 Voice Data

• Voice recordings of conversations with our AI voice assistants
• Voice biometric data (tone, pitch, cadence) used for AI processing
• Transcriptions of voice conversations
• Call metadata (duration, timestamp, caller ID)

3.2 Customer & Contact Information

• Name, email address, phone number
• Company name and job title
• Billing and payment information
• Communication preferences

3.3 Technical Data

• IP address, browser type, device information
• Cookies and usage data (see Cookie Policy below)
• Login credentials and authentication data

3.4 Sensitive Personal Data

In some cases, voice conversations may inadvertently contain sensitive information such as:

• Health information
• Financial details
• Personal identification numbers

We implement strict security measures to protect all sensitive data and only process it when absolutely necessary for service delivery.

4. Legal Basis for Processing

We process your data based on the following legal grounds under GDPR:

5. How We Use Your Data

We use your personal data for the following purposes:

• Service Delivery: Operating voice AI assistants, processing calls, providing customer support
• AI Improvement: Training and improving our AI models (with anonymization where possible)
• Analytics: Understanding usage patterns and service performance
• Communication: Sending service updates, marketing materials (with consent)
• Billing: Processing payments and maintaining financial records
• Compliance: Meeting legal and regulatory requirements
• Security: Detecting fraud, abuse, and ensuring platform security

6. Data Retention

We retain your personal data only as long as necessary:

• Voice recordings: Retained for up to 90 days unless legally required or you request deletion sooner
• Account data: Retained for the duration of your account plus 12 months after termination
• Billing records: Retained for 7 years (Swedish accounting law requirement)
• Marketing consent: Until you withdraw consent
• Anonymized analytics: Retained indefinitely as it cannot identify you

7. Data Sharing & Transfers

7.1 Third-Party Service Providers

We may share your data with trusted service providers who assist us:

• Cloud hosting providers (AWS, Google Cloud, Microsoft Azure) - EU-based servers only
• AI service providers (OpenAI, Anthropic) for voice processing
• Payment processors for billing
• Email service providers for communications

All third parties are contractually obligated to protect your data and comply with GDPR.

7.2 International Transfers

Your data is primarily stored and processed within the EU. When transfers outside the EU are necessary, we ensure adequate protection through:

• EU Standard Contractual Clauses (SCCs)
• EU-US Data Privacy Framework (where applicable)
• Adequacy decisions by the European Commission

7.3 Legal Disclosure

We may disclose your data when required by law, court order, or to protect our legal rights.

8. Your Rights Under GDPR

You have the following rights regarding your personal data:

• Right to Access (Art. 15): Request a copy of your personal data
• Right to Rectification (Art. 16): Correct inaccurate data
• Right to Erasure (Art. 17): Request deletion of your data ("right to be forgotten")
• Right to Restriction (Art. 18): Limit how we process your data
• Right to Data Portability (Art. 20): Receive your data in a structured format
• Right to Object (Art. 21): Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time (doesn't affect prior processing)
• Right to Lodge a Complaint: File a complaint with the Swedish Authority for Privacy Protection (IMY)

To exercise your rights, contact us at: hello@houseofvoice.ai

We will respond within 30 days of your request.

9. Data Security

We implement industry-standard security measures to protect your data:

• Encryption: Data encrypted in transit (TLS 1.3) and at rest (AES-256)
• Access controls: Role-based access, multi-factor authentication
• Monitoring: 24/7 security monitoring and incident response
• Anonymization: Voice data anonymized where technically feasible
• Regular audits: Security assessments and penetration testing
• Staff training: Regular data protection training for all employees
• Data minimization: We only collect data necessary for our services

10. Cookies & Tracking

We use cookies and similar technologies for:

• Essential cookies: Required for website functionality
• Analytics cookies: Understanding website usage (Google Analytics)
• Marketing cookies: Personalized advertising (with consent)

You can manage cookie preferences in your browser settings. Disabling certain cookies may limit website functionality.

11. Children's Privacy

Our services are not intended for individuals under 16 years of age. We do not knowingly collect data from children. If we discover such data, we will delete it immediately.

12. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated via email or prominent website notice. Continued use of our services after changes constitutes acceptance.

13. Supervisory Authority

If you believe we have violated your privacy rights, you may lodge a complaint with:

14. Contact Us