Privacy Policy

Last updated: March 25, 2026

1. Who we are

The controller responsible for personal data under this policy is Gavel GmbH (trading as VoiceBack), Bessemerstr. 51, 12103 Berlin, Germany. For privacy-related requests, contact privacy@getvoiceback.com.

Our general Terms of Service apply to use of the service alongside this Privacy Policy.

2. Scope

This policy describes how we process personal data when you use the VoiceBack website, web or mobile applications, and related services we provide as VoiceBack. It does not apply to third-party websites, review platforms, or other services that we link to but do not operate; those providers have their own notices.

3. Data we collect

Depending on how you use VoiceBack, we may process categories such as:

  • Account and contact data — e.g. name, work email, company or property name;
  • Usage and technical data — e.g. log data, device or browser type, approximate location derived from IP, and similar metadata needed to run and secure the service;
  • Support and communications — content you send us when you contact support or respond to surveys;
  • Marketing preferences — where you have signed up or consented to hear from us;
  • Cookies and similar technologies — as described in section 6.

4. How we use your data

We use personal data to:

  • provide, operate, and improve VoiceBack (including product analytics and troubleshooting);
  • bill and administer subscriptions where applicable;
  • maintain security, prevent abuse, and enforce our terms;
  • send service-related messages and, where permitted, marketing;
  • comply with legal obligations and respond to lawful requests.

5. Legal bases (GDPR)

Where the GDPR applies, we rely on appropriate legal bases such as: performance of a contract (providing the service you signed up for), legitimate interests (e.g. securing and improving the product, unless overridden by your rights), consent (e.g. certain cookies or marketing, where required), and legal obligation (where we must retain or disclose data by law).

6. Cookies and similar technologies

We use cookies and similar technologies that are strictly necessary for the site and service to function, and where applicable technologies for analytics or marketing. You can control many cookies through your browser settings. Where we use non-essential cookies subject to consent, we will reflect that in our cookie banner or tool when available. If we publish a separate cookie policy, we will link it from this section.

7. Sharing and processors

We share personal data with subprocessors who help us run VoiceBack — for example hosting and infrastructure, email delivery, analytics, payment processing, and customer support tools. We choose providers with appropriate safeguards and process data under agreements that require them to protect your information and use it only on our instructions. We do not sell your personal data.

8. International transfers

If we transfer personal data outside the European Economic Area, the United Kingdom, or Switzerland, we do so using mechanisms recognised by applicable law, such as the European Commission's standard contractual clauses or adequacy decisions, together with supplementary measures where appropriate.

9. Retention

We keep personal data only as long as needed for the purposes above — for example for the duration of your account, plus a reasonable period afterwards for backups, disputes, and legal requirements. Specific retention periods depend on the type of data and context; we delete or anonymise data when it is no longer needed.

10. Security

We implement technical and organisational measures appropriate to the risk, such as access controls, encryption in transit where standard for the service, and procedures to respond to incidents. No method of transmission or storage is completely secure; we work to protect your data but cannot guarantee absolute security.

11. Your rights

Depending on your location, you may have rights to access, rectify, or erase your personal data, to restrict or object to certain processing, to data portability, and to withdraw consent where processing is consent-based. You may also lodge a complaint with a supervisory authority. To exercise your rights, contact privacy@getvoiceback.com. We will respond within the timeframes required by applicable law.

12. Children

VoiceBack is intended for businesses and adults. The service is not directed at children under 18, and we do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us so we can delete it.

13. Changes

We may update this Privacy Policy from time to time. We will post the revised version on this page and change the "Last updated" date above. Where changes are material and the law requires it, we will provide additional notice.

14. Contact

For privacy questions or requests: privacy@getvoiceback.com
Postal address: Gavel GmbH (VoiceBack), Bessemerstr. 51, 12103 Berlin, Germany