Privacy Policy

Effective: December 27, 2025

ByteVox Legal Team

Overview

This Privacy Policy explains how ByteVox (operated by Aurigen Labs Private Limited) collects, uses, protects, and shares your personal data when you use our services, websites, and applications.

We collect only essential information needed to deliver secure, reliable, and improved services-always with transparency and your control. We do not sell personal data.

Quick navigation

Information We Collect Your Rights & Control Security & Encryption Data Sharing Retention International Transfers Contact

1) Information We Collect

Aurigen Labs Private Limited ("we", "us", "ByteVox") collects information necessary to provide, secure, and improve our services.

Core Categories

Identifiers: name, email, organization, role
Service telemetry: feature usage, timestamps, status codes
Device/network: browser, OS, coarse IP/region
Content you provide: prompts, files, configuration

How We Obtain Data

Direct: info you submit via forms, product, or support
Automated: logs, cookies, security signals
Authorized integrations: systems you connect (e.g., CRM)

Legal Bases (where applicable)

Contract: to deliver requested services
Legitimate Interests: security, reliability, improvement
Consent: optional analytics/marketing features
Legal Obligation: compliance with laws/requests

Purposes for Data Collection

Purpose	Examples	Primary Legal Basis
Deliver core features	Authentication, routing, model outputs	Contract
Reliability & quality	Telemetry, performance metrics	Legitimate Interests
Security & abuse prevention	Rate-limiting, anomaly detection	Legitimate Interests / Legal Obligation
Preferences & personalization	Language, theme, saved settings	Consent / Legitimate Interests
Communications (optional)	Newsletters, product updates	Consent

Important: We avoid collecting special-category data unless you explicitly provide it and it's essential for an enabled feature.

2) Your Rights & Control

You have comprehensive rights and controls over your personal data.

Granular Controls

Opt in/out of optional analytics & marketing
Dashboard access to sessions, connected apps, artifacts
One-click export and deletion requests
Revoke integrations and rotate credentials anytime

Your Rights (where applicable)

Access, rectification, and erasure
Restriction or objection to certain processing
Data portability (commonly used format)
Withdraw consent without affecting core features

How to Exercise

Use in-product privacy settings and permissions
Submit access/export/deletion requests via dashboard or email
Identity verification may be required; typical response 30 days

3) Security & Encryption

We implement comprehensive technical and organizational measures to protect your data.

Technical Controls

TLS 1.2+ in transit, AES-256 at rest, key rotation
Segregated environments, least-privilege networking
Continuous logging, anomaly detection, alerting
Backups, integrity checks, disaster recovery tests

Organizational Controls

RBAC, MFA/SSO, periodic access reviews
Security training & confidentiality obligations
Vendor risk reviews & contractual protections
Practices aligned with SOC 2 principles

Incident Response

Runbooks for detection, triage, containment, recovery
Post-incident reviews and corrective actions
Notifications where required by law or contract

We use vetted processors (e.g., hosting, analytics, communications, payments) bound by data-protection terms to process personal data only on our instructions. We do not sell your personal data.

Third-party processors are contractually restricted to use your data solely for providing services to ByteVox and must maintain equivalent security standards.

5) Retention & Deletion

We retain personal data only as long as necessary for the purposes outlined in this policy or as required by law.

Account & billing: Retained while active and a reasonable period thereafter (e.g., 24 months) unless longer required by law
Telemetry & logs: Typically ~12 months for security and diagnostics
Deletion requests: Upon verified deletion requests, we remove or de-identify personal data subject to legal holds

6) International Transfers

Your data may be transferred to and processed in countries other than your country of residence. Cross-border transfers use appropriate safeguards (e.g., Standard Contractual Clauses) and require comparable protections in destination jurisdictions.

7) Children's Data

Our services are not directed to children, and we do not knowingly collect personal data from children. If you believe a child has provided data, contact us to take appropriate action.

8) Updates to This Policy

We may revise this policy periodically. Material changes will be clearly indicated on this page with an updated effective date. Continued use of our services after changes constitutes acceptance of the updated policy.

9) Contact Aurigen Labs

Questions or requests about this policy or your data?

Privacy Team: contact@bytevox.ai
General Inquiries: sales@bytevox.ai
Company: Aurigen Labs Private Limited, Delhi, India

This document is provided for transparency and product usage clarity and does not constitute legal advice. Consult your counsel for jurisdiction-specific requirements.