GDPR Compliance
Your rights and our obligations under data protection law
1. Overview
Meduzzen Voice is committed to compliance with applicable data protection regulations. This page explains how we handle personal data and your rights as a data subject.
2. Data Controller vs. Data Processor
When you use Meduzzen Voice to conduct calls, YOU (the customer) are the Data Controller for all personal data collected during those calls — including the names, phone numbers, and conversation content of the individuals your AI agent contacts.
Meduzzen Voice acts as a Data Processor on your behalf. This means:
- You are responsible for having a lawful basis to contact individuals
- You are responsible for obtaining any required consents before initiating calls
- You are responsible for informing call recipients that they may be speaking with an AI
- You are responsible for complying with all applicable privacy laws in your jurisdiction (including GDPR if you operate in the EU, or local Ukrainian data protection law)
- Meduzzen Voice is not liable for how you collect or use personal data through our platform
3. What Data We Process as Processor
On your behalf, Meduzzen Voice processes:
- Phone numbers and contact details you upload for campaigns
- Call transcripts generated during calls
- Variables and metadata passed to the AI agent (e.g. first name, last name)
4. Legal Basis for Processing (Meduzzen Voice as Controller)
For data we collect directly about you (account data), our legal basis is:
- Contract performance: processing necessary to provide our service to you
- Legitimate interests: security, fraud prevention, platform improvement
- Legal obligation: compliance with applicable law
5. Data Transfers
Meduzzen Voice is based in Ukraine. If you are located in the EU, data transfers are handled in accordance with applicable transfer mechanisms. We implement appropriate safeguards for any international data transfers.
6. Your Rights as a Data Subject
Regarding your own account data, you have the right to:
- Access: request a copy of personal data we hold about you
- Rectification: correct inaccurate personal data
- Erasure: request deletion of your personal data ("right to be forgotten")
- Portability: receive your data in a machine-readable format
- Restriction: request we limit processing of your data
- Objection: object to processing based on legitimate interests
To exercise any of these rights, contact: info@meduzzen.com
We will respond within 30 days.
7. Data Retention
We retain your account data for the duration of your subscription and 12 months following account termination. Call data retention periods can be configured in your account settings.
8. Cookies and Tracking
We use only essential and analytics cookies. No advertising or cross-site tracking cookies are used. See our Privacy Policy for details.
9. Contact and Complaints
Data protection inquiries: info@meduzzen.com
If you believe we have not handled your data correctly, you have the right to lodge a complaint with the relevant data protection authority in your country.