Privacy Policy
Privacy Policy for MenyVoice
Version: 2.0 Status: Final approved Last updated: 7 August 2026
1. Who are we?
MenyVoice is provided by:
EzyAcnt ApS
CVR no.: 38362925
Olsbækeng 12
2670 Greve
Denmark
Email: hello@menyvoice.com
In this privacy policy, EzyAcnt ApS is referred to as "MenyVoice", "we", "us" or "our".
If you have questions about this privacy policy or our processing of personal data, you can contact us via the contact details above.
2. Scope of the privacy policy
This privacy policy describes how EzyAcnt ApS processes personal data when we ourselves are the data controller.
This includes, among other things, processing of personal data in connection with:
- visits to the MenyVoice website;
- contact forms;
- email inquiries;
- sales dialogues;
- demonstrations;
- customer onboarding;
- administration of customer relationships;
- subscriptions;
- invoicing;
- payment;
- support;
- security;
- troubleshooting;
- prevention of misuse;
- marketing, where this is lawful.
The privacy policy also describes the overall allocation of roles when MenyVoice processes personal data on behalf of business customers in connection with AI-based telephony.
When MenyVoice processes personal data on behalf of a customer, the relevant data processing agreement between MenyVoice and the customer applies.
3. Allocation of roles
The allocation of roles depends on the specific processing activity.
3.1 When EzyAcnt ApS is the data controller
EzyAcnt ApS is the data controller for processing of personal data that takes place for our own purposes, including among other things:
- operation of the website;
- administration of customers;
- offers;
- contracts;
- subscriptions;
- support;
- payment;
- bookkeeping;
- security;
- prevention of misuse;
- fulfilment of legal obligations.
In these situations, EzyAcnt ApS itself determines the purposes and means of the processing.
3.2 When MenyVoice is a data processor
When a business uses MenyVoice to receive and handle phone calls, the customer is, as a starting point, the data controller for information about the business's own callers, guests, customers or other data subjects.
In these cases, EzyAcnt ApS processes personal data solely on the customer's documented instructions and acts as a data processor.
The specific processing is governed by the data processing agreement entered into between the customer and MenyVoice.
3.3 Alayic Ltd
The technical AI platform is provided by:
Alayic Ltd
9 West Street
Congleton
England
CW12 1JN
United Kingdom
Company No. 16581244
Alayic acts as a sub-processor for MenyVoice in the relevant processing chain.
Alayic only processes personal data as part of the delivery of the platform and in accordance with the applicable processor chain.
4. What personal data do we process?
Depending on your relationship with MenyVoice, we may process various categories of personal data.
4.1 Contact information
For example:
- name;
- email address;
- phone number;
- position;
- company name;
- address;
- country;
- CVR number;
- VAT number;
- other information you provide to us yourself.
4.2 Customer information
For example:
- subscription;
- licences;
- user accounts;
- administrators;
- support history;
- onboarding;
- communication;
- agreements;
- order confirmations;
- consumption;
- billing information.
4.3 Payment information
We process, among other things:
- invoice information;
- payment status;
- transaction references;
- bookkeeping information.
As a starting point, we do not receive full payment card details.
Card payments are processed by our payment provider.
4.4 Technical information
We may process:
- IP address;
- browser type;
- device information;
- log data;
- date and time;
- security information;
- cookie and consent information.
5. Contact forms and email
When you contact MenyVoice via:
- contact form;
- email;
- phone;
- demo form;
- other inquiries,
we process the information you choose to send us.
We use the information for, among other things:
- responding to your inquiry;
- scheduling demonstrations;
- preparing offers;
- administering the dialogue;
- preventing spam and misuse.
Contact forms send inquiries to:
6. Customer onboarding and support
When a business becomes a customer of MenyVoice, we process information about relevant contact persons.
The purposes include, among other things:
- setting up the customer;
- administering the subscription;
- onboarding;
- support;
- communication;
- invoicing;
- security;
- changes to the service;
- documentation of the contractual relationship.
7. Calls, recordings and AI processing
When a business uses MenyVoice, the platform may, among other things, process:
- phone number;
- call recordings;
- transcriptions;
- AI-generated summaries;
- time;
- duration;
- order information;
- reservation information;
- information the caller chooses to provide themselves.
Phone calls are recorded as part of the current platform functionality.
Recordings cannot currently be generally disabled.
Since phone conversations are free-form conversations, callers may choose to disclose more information than necessary.
The data controller customer should therefore configure the solution and inform callers in a way that limits unnecessary processing of personal data.
The customer is responsible for:
- the legal basis for processing;
- the duty to inform;
- the lawfulness of recordings;
- instructions to MenyVoice;
- handling of data subjects' rights.
MenyVoice assists the customer in accordance with the applicable data processing agreement.
8. Artificial intelligence
MenyVoice uses artificial intelligence for, among other things:
- speech recognition;
- speech-to-text;
- AI generation of responses;
- AI generation of speech;
- categorisation;
- reservations;
- orders;
- AI summaries.
AI-generated results may contain errors or inaccuracies.
MenyVoice does not make decisions about individuals that are based solely on automated processing with legal effect or similarly significant impact.
The customer is responsible for the specific use of AI-generated information in its business.
9. Purposes and legal basis for processing
We process personal data when there is a lawful basis for processing under the General Data Protection Regulation (GDPR).
9.1 Performance of a contract or steps prior to entering into a contract
We may process personal data when necessary to:
- respond to a specific inquiry;
- schedule a demonstration;
- prepare an offer;
- take steps at the request of a data subject prior to entering into an agreement;
- enter into or perform an agreement;
- provide and administer the MenyVoice service.
The legal basis is GDPR Article 6(1)(b), where the data subject is themselves a party to the agreement.
If the processing concerns contact persons at business customers, the legal basis will as a starting point be legitimate interest under Article 6(1)(f).
9.2 Legitimate interests
We may process personal data on the basis of our legitimate interests in, among other things:
- operating, developing and improving MenyVoice;
- administering business customer relationships;
- communicating with customers and prospective customers;
- providing support;
- protecting our systems;
- preventing fraud and misuse;
- documenting contractual relationships;
- enforcing or defending legal claims.
The legal basis is GDPR Article 6(1)(f).
We have assessed that these legitimate interests do not, as a starting point, override the data subject's interests or fundamental rights and freedoms.
9.3 Legal obligation
We process personal data when necessary to comply with legal obligations, including among other things:
- bookkeeping legislation;
- tax legislation;
- anti-money laundering rules, where relevant;
- other statutory documentation requirements.
The legal basis is GDPR Article 6(1)(c).
9.4 Consent
Where processing requires consent, we obtain this before the processing begins.
This may, among other things, include:
- non-necessary cookies;
- certain forms of electronic marketing;
- other voluntary processing activities.
Consent can be withdrawn at any time with effect for the future.
10. Marketing
We only send electronic marketing when we have a valid legal basis under applicable law.
You can unsubscribe from marketing at any time via:
- the unsubscribe link in emails;
- contacting hello@menyvoice.com.
Operational messages, security updates, billing information and other necessary communication about an existing customer relationship are not necessarily considered marketing.
11. Cookies and similar technologies
MenyVoice may use cookies and similar technologies on the website.
Necessary cookies are only used when necessary for the functioning or security of the website, or for a service the user has expressly requested.
Non-necessary cookies, including statistics and marketing cookies, are only activated after valid consent, where this is required.
The specific use of cookies is set out in MenyVoice's cookie policy and the consent solution in use at any given time.
12. Recipients of personal data
We may disclose personal data to suppliers who assist us with the delivery and administration of our services.
This may, among other things, include:
- hosting providers;
- cloud services;
- payment providers;
- email providers;
- telephony and communication providers;
- AI and speech providers;
- security providers;
- professional advisors;
- public authorities, where required by law.
Suppliers may only process personal data in accordance with the agreement in place between the parties, as well as applicable data protection law.
13. Sub-processors
When MenyVoice acts as a data processor, sub-processors are used as part of the delivery of the service.
The current overview of MenyVoice's sub-processors is set out in MenyVoice's separate document:
Sub-processor Overview
This overview is maintained on an ongoing basis and constitutes the authoritative list of MenyVoice's own sub-processors.
The technical AI platform is provided by:
Alayic Ltd
9 West Street
Congleton
England
CW12 1JN
United Kingdom
Company number: 16581244
Alayic acts as a sub-processor in MenyVoice's processing chain.
Alayic's current data processing agreement can be found at:
https://www.alayic.com/data-processing-agreement
14. Hosting and processing locations
MenyVoice uses, among others, Alayic's platform.
At the time of the most recent update of this privacy policy, Alayic states, among other things, that:
- application, database and logging are hosted on Microsoft Azure in the United Kingdom;
- call recordings are hosted with Amazon Web Services in Ireland;
- certain speech and AI providers may process data outside the EU/EEA, including in the USA.
The specific processing location may vary depending on the customer's configuration and the features enabled.
15. International transfers
When personal data is transferred outside the EU/EEA or the United Kingdom, this only takes place on the basis of a valid transfer mechanism.
This may, among other things, be:
- the European Commission's Standard Contractual Clauses (SCCs);
- the UK International Data Transfer Addendum;
- an applicable adequacy decision;
- other lawful transfer mechanisms under the GDPR.
Where necessary, supplementary technical, organisational and contractual safeguards are also applied.
16. Retention and deletion
We retain personal data for as long as necessary for the purpose for which the data was collected, or for as long as we are legally required to do so.
16.1 Contact and sales information
Contact information is retained for as long as necessary for dialogue, offers, documentation or a legitimate follow-up need.
The information is then deleted or anonymised.
16.2 Customer information
Information about active customers is retained for as long as the customer relationship exists.
After termination, information may be retained to the extent necessary for:
- bookkeeping;
- documentation;
- legal claims;
- security;
- other statutory obligations.
16.3 Call data
Under the current platform setup, as a starting point:
- call recordings are retained for up to 365 days;
- transcriptions are retained for up to 365 days;
- AI-generated summaries are retained for up to 365 days;
- backups may be retained for up to 7 days on a rolling basis.
Where the platform technically supports it, the customer can choose a shorter retention period.
The customer can also request manual deletion in accordance with the data processing agreement.
Upon termination of the agreement, personal data is returned or deleted in accordance with the applicable data processing agreement and applicable law.
17. AI providers and model-related processing
EzyAcnt ApS does not use customers' or callers' personal data to train its own AI models.
The underlying AI platform is provided by Alayic Ltd. Alayic has stated that it does not use customers' or callers' data to train Alayic's own models.
As part of the delivery of the service, call content may be processed by external providers of, among other things:
- speech recognition;
- language models;
- speech generation;
- AI-related infrastructure services.
Such providers only process personal data as part of the delivery of the agreed services and in accordance with the applicable processor chain.
MenyVoice does not instruct third-party providers to use customers' personal data for their own incompatible purposes.
The current list of relevant sub-processors is set out in MenyVoice's sub-processor overview and, where relevant, Alayic's applicable data processing agreement.
18. Data security
We use appropriate technical and organisational security measures to protect personal data against, among other things:
- unauthorised access;
- loss;
- alteration;
- disclosure;
- misuse;
- destruction.
The measures may, among other things, include:
- access control;
- role-based user permissions;
- confidentiality obligations;
- encrypted data transmission;
- logging;
- monitoring;
- backups;
- supplier management;
- procedures for handling security incidents.
No internet-based solution can be guaranteed to be completely secure.
19. Personal data breaches
If we become aware of a personal data breach, we handle the incident in accordance with our role and applicable data protection law.
When MenyVoice acts as a data processor, we notify the relevant data controller customer without undue delay and assist the customer to the extent required by the data processing agreement and the law.
When MenyVoice acts as a data controller, we assess, among other things:
- the nature of the incident;
- which information is affected;
- the possible risk to data subjects;
- necessary remedial measures;
- any obligation to notify the Danish Data Protection Agency (Datatilsynet);
- any obligation to notify the affected data subjects.
20. Your rights
When EzyAcnt ApS is the data controller, you may, depending on the circumstances, have the right to:
- access;
- rectification;
- erasure;
- restriction of processing;
- data portability;
- object;
- withdraw a consent;
- lodge a complaint with the Danish Data Protection Agency (Datatilsynet).
The rights depend on the specific processing and the exceptions provided for under applicable law.
You can contact us at:
We may ask for information necessary to confirm your identity before processing a request.
21. If you have called a business that uses MenyVoice
If your personal data is processed because you have called a business that uses MenyVoice, that business is, as a starting point, the data controller.
Requests regarding access, rectification, erasure or other data subject rights should therefore, as a starting point, be directed to the business you contacted.
MenyVoice assists the data controller business in accordance with the data processing agreement.
In order to identify the relevant call, it may be necessary to provide:
- phone number;
- approximate time;
- date;
- which business was contacted;
- other information that can reasonably identify the call.
22. Complaints to the Danish Data Protection Agency (Datatilsynet)
If you believe that our processing of personal data violates data protection law, you have the right to lodge a complaint with:
Datatilsynet (the Danish Data Protection Agency)
Carl Jacobsens Vej 35
2500 Valby
Denmark
Current contact details can be found at:
We do, however, encourage you to contact MenyVoice first, so that we have the opportunity to investigate and try to resolve the matter.
23. Third-party links
MenyVoice may contain links to, or integrations with, third-party websites or third-party services.
MenyVoice is not responsible for third parties' independent processing of personal data.
We therefore recommend that you read the relevant third party's privacy policy.
24. Changes to the privacy policy
We may update this privacy policy when necessary as a result of, among other things:
- changes to our services;
- changes to processing activities;
- changes to suppliers;
- changes to legislation;
- security-related matters;
- organisational changes.
The most recent version is published on MenyVoice's website.
In the event of material changes, we may also inform affected customers via email, customer portal or other relevant communication channels.
25. Contact
If you have questions about this privacy policy or our processing of personal data, you can contact:
EzyAcnt ApS / MenyVoice
CVR no.: 38362925
Olsbækeng 12
2670 Greve
Denmark
Email: hello@menyvoice.com