Privacy Policy

Last updated: March 23, 2026

1. Introduction

AutoFlow CY ("we", "us") respects your privacy and is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR - Regulation (EU) 2016/679) and applicable Cypriot legislation. This policy explains what data we collect, how we use it, and what your rights are.

2. Data Controller

The data controller for your data is AutoFlow CY.
Contact email: info@autoflowcy.com
Website: https://autoflowcy.com

3. Data We Collect

Through the contact form, we collect the following data:

When using our clients' phone-based AI assistant (VoiceBot), we may collect:

We may also automatically collect technical data such as IP address, browser type, and language through analytics (only if you accept cookies).

4. Purpose of Processing

We use your data exclusively for:

5. Legal Basis

Processing of your data is based on your explicit consent (Article 6(1)(a) GDPR), which you provide when submitting the contact form by checking the consent checkbox. You may withdraw your consent at any time.

Call recording is based on legitimate interest (Article 6(1)(f) GDPR) for phone calls, where callers are informed at the beginning of each call. A Legitimate Interest Assessment (LIA) is available upon request. The website no longer places voice calls from the browser.

6. Data Sharing

Your data may be shared with the following third-party providers:

We do not sell, rent, or trade your personal data with third parties for commercial purposes.

6.1 Transfers outside the European Economic Area

Some of the providers listed above are established in the United States or may process data outside the European Economic Area. For these transfers we do not rely on a European Commission adequacy decision; we apply the European Commission's Standard Contractual Clauses (Article 46(2)(c) GDPR) together with each provider's data processing agreement. Speech-to-text is performed in the EU region (Frankfurt) and our call-analysis provider (Langfuse GmbH) is established in Germany. You may request a copy of the safeguards in place at info@autoflowcy.com.

7. Data Retention

We retain your data for as long as necessary for the purposes for which it was collected, and in any case no longer than 24 months after our last communication. You may request deletion at any time.

The following retention periods apply to call data:

These periods apply to our own systems. Some providers that carry out part of the processing retain data under their own terms: our text-to-speech provider (ElevenLabs, USA) retains the text submitted to it and the generated audio in our account history, with no binding deletion period, and zero-retention mode is not available on the plan we use. We have opted our data out of the training of its models, and where a deletion request is made we also request deletion from that provider so far as technically possible. Our speech-to-text provider (Soniox) does not store call audio at all.

8. Cookies

Our website uses the following types of cookies:

You can change your preferences at any time through your browser settings or by clearing cookies.

9. Your Rights

Under GDPR, you have the following rights:

To exercise any of these rights, contact us at info@autoflowcy.com.

10. Right to Lodge a Complaint

If you believe your rights are being violated, you have the right to lodge a complaint with the Cyprus Commissioner for Personal Data Protection:
www.dataprotection.gov.cy

11. Changes to This Policy

We may update this policy from time to time. Any changes will be posted on this page with an updated date.

12. Contact

For any questions about your privacy or your data, contact us:
info@autoflowcy.com