Privacy Policy
Last updated: September 19, 2026
This Privacy Policy explains how we process personal data (a) as data controller, through the voxia.gr website and its embedded chat assistant, and (b) as data processor, when business customers use the Voxia platform to handle their own phone calls. If you called, or chatted with, a business that uses the Voxia platform, see Section B below — for your own rights, contact that business directly.
Data Controller
The data controller for personal data collected through this website is NETFUSION L.P., VAT number 802236540, GEMI registration no. 172713503000, registered at EL. VENIZELOU 85 16343 ILIOYPOLIS ("we", "Voxia").
For any question regarding the processing of your personal data, you can contact us at hello@voxia.gr or +30 213-0101930
A. The voxia.gr Website — Data We Collect
A1. Contact form: we collect the data you voluntarily provide — full name, company name, email address, phone number, industry, your message, and preferred language of communication. The form is processed via a third-party contact form service, which acts as a processor on our behalf.
A2. Technical access data: the website is hosted on our own servers; we may log technical data (such as IP address, browser type, request date/time) for network security and operational purposes.
A3. Usage statistics (Google Analytics 4): we use Google Analytics 4 to measure website traffic. The related script loads on every visit, but through Google Consent Mode v2 it starts in an "analytics_storage: denied" state — meaning it does not set tracking cookies or store identifiable data until you click "Accept" on the cookie banner. See our Cookie Policy for details.
A4. Chat assistant (widget): the website embeds an optional chat assistant (chat.voxia.gr) you can use to ask questions about the service. The assistant does not use cookies or local storage — the session identifier lives only in page memory for the duration of your visit. We process the content of your messages, your IP address (stored encrypted), the referring site, and timestamps. If you voluntarily enable the microphone feature, your voice audio is sent to a speech-recognition provider for transcription, and the assistant's replies are synthesized into speech by a text-to-speech provider (see sub-processors below). Conversations close automatically after 15 minutes of inactivity and a summary is generated. We also use an automated third-party check to limit malicious/bot use. Do not submit sensitive personal data or third-party information through the chat assistant.
A. Purpose and Legal Basis
We process contact form data to respond to your inquiry, arrange a product demo, and communicate with you for commercial purposes related to your request. Legal basis: your consent (Article 6(1)(a) GDPR) and, where applicable, pre-contractual steps taken at your request (Article 6(1)(b) GDPR).
Technical access data is processed on the basis of our legitimate interest (Article 6(1)(f) GDPR) in keeping the website secure.
Google Analytics 4 is activated solely on the basis of your explicit consent via the cookie banner (Article 6(1)(a) GDPR, Article 4(5) of Greek Law 3471/2006).
Conversations with the chat assistant (text and/or voice) are processed on the basis of your consent given when starting and using it, for the purpose of answering your questions about the service.
A. Data Retention (Website)
Contact form data is retained for as long as necessary to handle your inquiry and, if a business relationship results, for its duration. If no relationship develops, data is deleted within 24 months of the last contact, unless you request earlier deletion.
Technical access data (server logs) is retained on our own servers for a limited period, typically up to 30 days.
Chat assistant conversations are retained for a period configured per deployment — typically up to 30 days in our current operation — after which they are automatically deleted.
B. The Voxia Platform as Data Processor
When a business uses the Voxia platform to handle its phone calls, we process data belonging to that business's callers/customers solely on behalf of, and under the instructions of, the customer business, which remains the controller of its own customer data. If you called such a business, exercise your rights with that business directly — we assist it as a processor.
Categories of data we may process in this context: the caller's phone number, call content and transcript, call summary, optional recording (if enabled by our customer), any appointment details, tax ID (AFM) when a registry lookup is requested, and information enabling recognition of a returning caller.
Sub-Processors and Third-Party Service Providers
To operate the website, the chat assistant, and the Voxia platform, we use selected third-party service providers (processors) in the following categories: speech recognition and speech synthesis, AI language models, email and SMS notifications/confirmations, calendar and appointment scheduling (where enabled by our customer), tax ID (AFM) lookups via the Independent Authority for Public Revenue (AADE), protection against automated/abusive use, administrator authentication, and website contact form handling. Where our customer has designated its own CRM or other external system, choosing that system, its lawful use, and its security are the responsibility of the customer business.
Some of these providers are based outside the European Economic Area (including the USA). In such cases, data transfers are safeguarded through Standard Contractual Clauses and/or an adequacy decision, as applicable. All providers are contractually bound to process data solely on our/our customer's instructions and in compliance with the GDPR. Our database and call recordings are stored on self-hosted infrastructure (ours or our customer's), not on a third-party cloud storage service.
A full, named list of sub-processors is available upon request at hello@voxia.gr.
International Data Transfers
Our default speech-recognition, speech-synthesis, and language-model stack runs on infrastructure located in the United States. In these cases we ensure the transfer is covered by appropriate safeguards — the European Commission's Standard Contractual Clauses or, where applicable, the EU-U.S. Data Privacy Framework adequacy arrangement.
For customers with data-residency requirements, the Voxia platform is also available as an on-premise/private-cloud deployment within infrastructure of the customer's choosing.
Data Security
We take technical and organizational measures to protect data: encrypted connections (TLS/HTTPS), role-based access control (RBAC) and mandatory two-factor authentication (2FA) on the platform's administration environment, and logging of access actions (audit trail).
The Voxia platform supports, as a configurable feature per service/customer, application-layer encryption of sensitive data fields and automatic redaction of items such as phone numbers, email addresses, tax IDs, card numbers, and IBANs before they are stored or forwarded to third parties. These features are enabled during a customer's implementation — they are not active by default in every deployment.
Call Recording and Processing Notice
Call recording is disabled by default and is only enabled if the customer business chooses to, in which case that business is responsible for the lawful basis and for informing callers.
Independently of recording, before any call routed through the platform, an audio notice is played stating that the conversation is handled by a digital assistant with automated voice processing, before any audio is sent to a speech-recognition provider.
Artificial Intelligence and Automated Processing
Replies from the chat assistant and from the Voxia platform's phone agent are generated by artificial intelligence systems. No decisions producing legal effects or similarly significantly affecting you are made based solely on automated processing, within the meaning of Article 22 GDPR. Where enabled by our customer, a handoff to a human is available.
Cookies
This website uses cookies and similar technologies (local storage). For full details on the cookies we use and how to manage your consent, see our Cookie Policy.
Your Rights
As a data subject, subject to the conditions of the GDPR, you have the following rights: • Access to your data • Rectification of inaccurate data • Erasure ("right to be forgotten") • Restriction of processing • Data portability • Objection to processing • Withdrawal of consent at any time, without affecting the lawfulness of processing carried out before withdrawal
If you visited the website or used the chat assistant, exercise your rights directly with us. If you were called by, or called, a business using the Voxia platform, contact that business directly — we assist it as processor.
How to Exercise Your Rights
To exercise any of the above rights over data we process as controller, email us at hello@voxia.gr. We will respond within one (1) month of receiving your request, as required by the GDPR.
Children's Data
The website and the chat assistant are not directed at minors. We do not knowingly collect data from minors through them.
Right to Lodge a Complaint
If you believe that the processing of your data violates the GDPR, you have the right to lodge a complaint with the Hellenic Data Protection Authority (HDPA): 1-3 Kifisias Ave., 115 23, Athens, Greece, www.dpa.gr.
Changes to This Policy
We may update this Policy from time to time. Changes take effect once published on this page, indicated by the "Last updated" date at the top.