Effective 5 November 2026.
Who operates the service
Tayla Fadil, trading as BuiltByTy, operates this AI-assisted voice enquiry and consultation service and is responsible for the personal information it processes. For privacy questions or requests, email builtbyty@outlook.com.
Information we use
During a call, the service processes your speech and telephone number. It may also use your name, business details, email address, project requirements, requested next steps and information you choose to provide.
The live Sales Voice V2 assistants have audio recording and stored transcripts disabled. Speech is still processed to understand and answer the call. Separate sandbox assistants may retain recordings and transcripts of synthetic tests.
The V2 CRM stores call metadata, summaries, stated requirements, call outcomes, callback requests, contact preferences, booking records and audit events. Automatically generated summaries and outcomes can contain mistakes. A qualification or inferred outcome alone does not authorise further contact. For outbound enquiries, V2 may receive business contact and qualification information from BuiltByTy's Scout research workspace, including information obtained from public business sources.
For consultations, we use attendee details, appointment times, calendar event identifiers, booking status and a private booking-management code. The backend derives the code from the booking reference using a server-held secret. The Calendar invitation contains that code so the attendee can manage the booking. Keep the code confidential.
Why we use information
You choose what information to provide. A consultation booking needs your name, email address, confirmed appointment details and enough information to verify a later change. Without necessary details, the assistant may be unable to complete the request.
We use information to respond to enquiries, arrange requested consultations, manage bookings, record requested human callbacks, maintain accurate records, protect access and honour contact restrictions.
Where you ask us about a service or consultation, we process the necessary information to take steps at your request towards providing that service. We also rely on legitimate interests in administering business enquiries, maintaining a reliable service, preventing misuse and respecting contact preferences. Consent is used where required for a particular activity. Google account authorisation controls Calendar access and does not authorise unrelated marketing.
Google Calendar access
Only the authorised BuiltByTy account connects its Calendar. The app requests permission to view availability and manage events on calendars that account owns. The backend uses the calendar selected in its configuration.
We use this access to check availability, create caller-confirmed consultations, process verified rescheduling or cancellation requests and reconcile booking records. The assistant receives the result needed for the conversation. Unrelated event titles and descriptions are not returned by the backend to callers.
Google credentials are held in server-side secret storage. The account owner can revoke access through Google Account connections. Revocation stops future authorised access but does not itself erase existing events or CRM records.
Google Calendar data is used to provide and maintain scheduling features. We do not sell it or use it for advertising or model training. Use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.
Providers and international processing
Twilio provides the telephone connection. Vapi coordinates calls, Soniox transcribes speech, OpenAI generates responses and Microsoft Azure generates the spoken voice. Vercel hosts the V2 backend. Supabase hosts the V2 database in the configured London project. Google Calendar processes events and invitations.
Relevant information is available to BuiltByTy and the providers needed to operate the requested service. Processing can take place outside the UK, including in the United States and EU. Vapi lists Soniox, OpenAI, Microsoft Azure and Twilio among its subprocessors for selected calling features, with United States and EU processing locations.
For processing covered by their applicable service terms, Vapi, Vercel and Supabase incorporate data-processing terms containing Standard Contractual Clauses with the UK Addendum for relevant UK transfers. Vapi states that it flows its data-protection obligations down to its listed subprocessors. Twilio's data-protection terms set out its transfer mechanisms, including adequacy arrangements, binding corporate rules and contractual clauses where applicable. Google publishes the adequacy arrangements, Data Privacy Framework UK Extension and contractual clauses it uses for its international transfers.
You can read the published safeguards through Vapi's terms and Trust Centre, Vercel's DPA, Supabase's DPA, Twilio's DPA and Google's transfer frameworks. Contact builtbyty@outlook.com for information about the safeguards applicable to your request or how to obtain a copy.
Provider information is available from Twilio, Vapi, Soniox, OpenAI, Microsoft, Vercel, Supabase and Google.
Retention
We keep enquiry and booking information while needed to manage the enquiry, consultation, agreed follow-up or a related dispute or legal obligation. When reviewing a completed enquiry, we assess whether each record still serves one of those purposes and remove or de-identify information that is no longer needed. Minimal contact-restriction records may be retained to prevent unwanted contact. Audit records support accountability and investigation of service operations.
V2 has no automatic deletion task. Retention review and record removal require owner action. Provider processing logs and synthetic sandbox artifacts have separate retention settings. You can contact BuiltByTy to request deletion or ask about retention for a particular record.
Your choices and rights
You can request a human callback or contact BuiltByTy by email. Do not provide passwords, payment-card details or unrelated sensitive information during an enquiry. A saved callback request is subject to owner review and does not promise an immediate response.
You may ask for access, correction, deletion, restriction, objection or portability where the relevant right applies. If processing relies on consent, you may withdraw it. You can object to direct marketing at any time. An enquiry or unanswered call does not by itself authorise marketing.
Contact the email above so we can review your request and verify your authority before disclosing or changing records. You may also raise a concern with the UK Information Commissioner's Office.
The service does not make solely automated decisions with legal or similarly significant effects. Human review is required for business commitments and complex enquiries.