Privacy Policy

As part of its activities, Our Voice collects and processes personal data in order to allow its users to access its services and benefit from its various communication features.

Our Voice offers digital communication solutions that may include, depending on the services available:

• sending SMS;
• sending voice messages;
• voice calls;
• IVR (Interactive Voice Response) systems;
• voice and SMS surveys;
• reminders and notifications;
• OTP and API services;
• communication management and tracking services;
• and related services and features.

This Privacy Policy and Personal Data Protection Policy aims to explain clearly and transparently:

• what personal data Our Voice collects;
• from whom this data is collected;
• why it is collected;
• how it is used;
• with whom it may be shared;
• for how long it is retained;
• how it is protected;
• what rights the data subjects have;
• how those rights may be exercised;
• and under what conditions data may be transferred outside of Benin.

Our Voice undertakes to process personal data in accordance with the applicable provisions of the Digital Code of the Republic of Benin, particularly those relating to the protection of personal data, as well as the requirements and recommendations of the Personal Data Protection Authority (APDP).

This policy applies to Our Voice's digital services, including its website, the user platform, the application programming interfaces (API), and other digital interfaces offered by Our Voice.

In this policy:

“Personal data”

Refers to any information relating to an identified or identifiable person, directly or indirectly.

“Processing”

Refers to any operation or set of operations performed on personal data, including collection, recording, organization, storage, consultation, use, disclosure, alteration, erasure, or destruction.

“Data subject”

Refers to any natural person to whom the processed personal data relates.

“User”

Refers to any legally capable adult, whether an individual or a professional, or any legal entity using the Our Voice services.

“Data controller”

Refers to the entity that determines the purposes and means of the processing of personal data.

“Data processor”

Refers to any person or organization that processes personal data on behalf of and under the instructions of the data controller.

“Cookie”

Refers to a file or similar technology that may be stored on the user's device during browsing in order to ensure certain functionalities, security, personalization, or analysis of service usage.

The data controller for the personal data processed in connection with the Our Voice services is:

Our Voice

Limited Liability Company (SARL), created on August 8, 2023.

Address: Parcel No. C/SB, Maison Fatouma Adamou Boni, Yimporima, Natitingou 3, Natitingou, Atacora, Benin

Phone: +229 01 66 36 90 53

E-mail: support@getourvoice.com

For any question concerning the protection of personal data, you may contact:

support@getourvoice.com

The processing activities carried out by Our Voice may concern, in particular:

• website visitors;
• platform users;
• individual customers;
• business customers;
• representatives of client companies;
• administrators and authorized users of a business account;
• persons who contact support;
• persons who submit a request or complaint;
• persons whose contact details are used within a communication service of an Our Voice client;
• partners and service providers;
• prospects when their data is collected as part of a business relationship.

When a client uses Our Voice to send SMS, make calls, use an IVR service, or run a communication campaign to its own recipients, the client remains responsible for the lawfulness of the collection and use of its own recipients' data, insofar as it determines the purposes of that use.

Our Voice then acts, depending on the service concerned, within the scope of the technical operations necessary to provide the service.

Our Voice collects only the data necessary for the purposes for which it is processed.

Depending on the context and the services used, the following categories may be concerned.

5.1. Identification data

In particular:

• last name;
• first name;
• company or organization name;
• job title;
• user identifier;
• information necessary to identify the account.

5.2. Contact details

In particular:

• e-mail address;
• phone number;
• postal address when necessary;
• professional contact details.

5.3. Account data

In particular:

• account identifier;
• login e-mail address;
• phone number;
• profile information;
• account settings;
• roles and access rights;
• information relating to service usage.

5.4. Data relating to communication services

Depending on the service used, Our Voice may process:

• phone numbers;
• contact lists;
• recipients;
• campaign information;
• date and time of sending;
• delivery status;
• call status;
• technical information relating to calls;
• data relating to IVR interactions;
• data necessary for the operation of OTP/API services;
• content or information necessary to carry out communications where applicable.

5.5. Billing and payment data

Depending on the services used:

• billing information;
• transaction history;
• payment information;
• information relating to subscriptions or credits.

When payment is made through an external provider, payment data may be processed directly by that provider in accordance with its own privacy policy.

5.6. Support and communication data

When you contact Our Voice, we may process:

• the content of your request;
• your contact details;
• the information you provide;
• exchanges with support;
• complaints;
• technical requests.

5.7. Technical data and connection logs

When you use our services, certain information may be generated automatically, including:

• IP address;
• date and time of connection;
• date and time of operations;
• browser;
• browser version;
• operating system;
• device type;
• technical device information;
• technical identifiers necessary for operation;
• event logs;
• error logs;
• security-related events;
• session information.

This information may constitute connection logs.

5.8. Cookies and similar technologies

Our Voice may also use cookies or similar technologies to:

• ensure the platform functions properly;
• maintain a session;
• secure accounts;
• remember certain preferences;
• measure service usage;
• improve features and the user experience.

Cookies are covered by specific information in our Cookie Policy.

Our Voice mainly collects data:

• directly from the user;
• when creating an account;
• when using the platform;
• when using the services;
• when the user contacts support;
• when filling out a form;
• when carrying out an operation.

Certain technical data is automatically generated when using the services.

In connection with communication services, certain data may also be provided by the Our Voice client using the platform to communicate with its own recipients.

Our Voice uses personal data only for determined, explicit, and legitimate purposes.

7.1. Account creation and management

Your data may be used to:

• create your account;
• authenticate you;
• manage your profile;
• manage your rights and permissions;
• secure your account;
• allow you to access the services.

7.2. Provision of services

Your data may be used to:

• provide the subscribed services;
• send SMS;
• make voice communications;
• provide IVR services;
• provide OTP/API services;
• manage campaigns;
• track operations;
• provide reminders and notifications.

7.3. Support and customer relations

Your data may be used to:

• respond to your requests;
• resolve incidents;
• handle complaints;
• follow up on support;
• improve service quality.

7.4. Security

Your data may be used to:

• secure the platform;
• detect unauthorized access;
• prevent fraud;
• detect abusive behavior;
• prevent attacks;
• investigate security incidents;
• protect users and infrastructure.

7.5. Compliance with legal obligations

Your data may be processed to:

• comply with legal and regulatory obligations;
• respond to requests from competent authorities;
• retain certain evidence or records where required by law;
• comply with applicable cybersecurity obligations;
• defend Our Voice's legitimate rights and interests.

7.6. Platform improvement

Where applicable, data may be used to:

• analyze performance;
• detect errors;
• improve usability;
• improve features;
• improve service quality.

The processing carried out by Our Voice may rely, depending on its nature, on different legal bases.

8.1. Performance of the contract

Certain data is necessary to allow account creation and the performance of the requested services.

For example:

• account creation;
• authentication;
• use of SMS services;
• use of voice services;
• billing management;
• support.

8.2. Legal obligations

Certain data may be retained or processed when required by law or by a competent authority.

8.3. Security and legitimate interests

Certain technical data may be processed to ensure:

• security;
• fraud prevention;
• detection of abuse;
• protection of infrastructure;
• continuity of services.

8.4. Consent

When processing requires your consent, it is collected in a distinct and appropriate manner.

Consent must be given freely, specifically, and with full knowledge.

Where consent is required, merely continuing to browse or use the platform does not, on its own, constitute consent.

When registering, Our Voice informs the user of the documents applicable to the service.

The user must in particular be able to review:

• the General Terms of Use;
• this Privacy Policy.

When consent constitutes the necessary basis for a specific processing activity, it is requested separately.

Consent checkboxes are not pre-checked.

When consent is collected electronically, Our Voice may retain the information necessary to prove consent, including:

• the user's identifier;
• the nature of the consent;
• the date and time;
• the version of the document concerned;
• the technical information necessary for the traceability of the consent.

As part of its activities, Our Voice may rely on technical service providers or infrastructure located outside of Benin.

These providers may in particular be involved in:

• hosting;
• cloud infrastructure;
• security;
• SMS services;
• voice services;
• technical services;
• payment;
• support services.

Where personal data must be transferred to a country located outside of Benin and the consent of the data subject is required, Our Voice requests specific and freely given consent to the transfer.

This consent is distinct from acceptance of the General Terms of Use.

Where necessary, Our Voice informs data subjects about:

• the existence of the transfer;
• its purpose;
• the categories of data concerned;
• the applicable safeguards.

Our Voice implements the measures necessary to ensure the confidentiality and security of the transferred data.

Our Voice does not sell its users' personal data.

Data may nevertheless be disclosed to recipients strictly necessary for the purposes set out in this policy.

This may include, in particular:

• authorized Our Voice teams;
• technical service providers;
• hosting providers;
• SMS providers;
• voice service providers;
• payment providers;
• security providers;
• maintenance providers;
• competent authorities where required by law.

Providers processing data on behalf of Our Voice must be bound by appropriate confidentiality, security, and data protection obligations.

Personal data is accessible only to persons who need it for the purposes of their duties.

Access is in particular limited according to:

• job duties;
• roles;
• access rights;
• operational needs;
• security requirements.

Our Voice implements access control mechanisms to limit unauthorized access.

Persons authorized to access the data are subject to confidentiality obligations.

Our Voice retains data only for as long as necessary for the purposes for which it is processed, unless a longer retention period is necessary or required by law.

Retention periods may vary depending on the categories of data.

Upon expiry of the applicable periods, data is deleted, anonymized, or archived where required or permitted by applicable regulations.

Deleting an account therefore does not necessarily mean that all data is immediately destroyed where a legal obligation requires its retention.

Our Voice informs users of the possible collection of cookies and connection logs.

14.1. Cookies

Cookies may be used in particular for:

• the operation of the platform;
• session management;
• authentication;
• security;
• remembering preferences;
• audience measurement;
• improving the user experience.

Cookies that are not strictly necessary for the platform to function are subject to the user's consent when required.

The user may:

• accept cookies;
• refuse non-necessary cookies;
• customize their choices;
• change their preferences later.

Continuing to browse does not, on its own, constitute consent where consent is required.

Duration

In accordance with the observations communicated by the APDP, the validity period of the cookies concerned is limited to:

sixty (60) days.

Detailed information about cookies is presented in the Our Voice Cookie Policy.

14.2. Connection logs

For reasons of security, maintenance, fraud prevention, and the proper functioning of the platform, Our Voice may record certain connection logs.

These may include, in particular:

• IP address;
• date and time of connection;
• session information;
• browser;
• operating system;
• security events;
• technical errors;
• technical operations.

This data is used only for the purposes set out in this policy and is retained for a limited and proportionate period, not exceeding twelve (12) months, in accordance with the usual recommendations of the APDP regarding connection logs.

Our Voice recognizes the rights granted to data subjects under the applicable regulations on the protection of personal data.

Subject to the conditions provided by law, you have, in particular, the following rights.

15.1. Right of access

You may ask whether Our Voice processes personal data concerning you and, where the conditions are met, obtain a copy of that data.

15.2. Right to rectification

You may request the correction of inaccurate, incomplete, or outdated personal data.

15.3. Right to erasure

You may request the deletion of your personal data where the legal conditions are met.

15.4. Right to erasure and to be forgotten

You may request the erasure of your data under the conditions provided by the applicable regulations.

15.5. Right to object

You may object to certain processing of your personal data under the conditions provided by the applicable regulations.

15.6. Right to data portability

Where the legal conditions are met, you may request to receive certain personal data in a structured, usable format.

15.7. Right to withdraw your consent

Where processing is based on your consent, you may withdraw it.

Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

Our Voice wants to make it easier for data subjects to exercise their rights.

You may exercise your rights:

From your Our Voice account

Where the feature is available:

Settings → Privacy and personal data

In particular, you can find there:

• your personal data;
• your consents;
• your preferences;
• features allowing you to request a correction or deletion;
• download or portability options when available.

By e-mail

You may also send your request to:

support@getourvoice.com

Your request should, as far as possible, indicate:

• your last name;
• your first name;
• the e-mail address associated with your account;
• the right you wish to exercise;
• the subject of your request;
• information allowing us to understand your request.

To protect personal data against fraudulent requests or identity theft, Our Voice may request additional information to verify the identity of the requester where necessary.

Our Voice handles requests within the time limits provided by the applicable regulations.

If you believe that your rights are not being respected, or that a request sent to Our Voice has not received a satisfactory response, you may refer the matter to the Personal Data Protection Authority (APDP).

Personal Data Protection Authority

Address: Rue 6.076, Aidjedo, Cotonou, Benin

E-mail: contact@apdp.bj

Our Voice nevertheless encourages users to first contact its competent department so that the request can be reviewed and possibly resolved.

Our Voice takes personal data protection into account from the design stage and throughout the evolution of its services.

To the extent appropriate to the risks and processing concerned, Our Voice in particular strives to:

• limit the data collected to what is necessary;
• control access;
• protect communications;
• limit access to authorized persons;
• integrate security requirements into development;
• assess the risks associated with processing;
• implement appropriate security measures.

Personal data protection is taken into consideration when designing new features and evolving services.

Our Voice strives to configure its services so that, by default, only the data necessary for the intended purposes is collected and processed.

Where features or processing activities are optional, they must not be automatically activated when their activation requires the user's consent.

Optional data is collected only when necessary or when the user voluntarily chooses to provide it.

Our Voice implements technical and organizational measures intended to protect personal data against:

• unauthorized access;
• loss;
• destruction;
• alteration;
• disclosure;
• misappropriation;
• unlawful processing.

These measures may include, in particular:

• access control;
• management of permissions;
• authentication;
• securing communications;
• protection of infrastructure;
• backups;
• monitoring of security events;
• incident management;
• limitation of privileges;
• awareness of authorized persons;
• protective measures for technical environments.

Our Voice regularly adapts its security measures to the evolution of risks and technologies.

However, no IT system can guarantee absolute security.

If you notice or suspect an incident likely to affect the security of your data, you must contact immediately:

support@getourvoice.com

Our Voice may contact users by:

• e-mail;
• SMS;
• phone call;
• notifications;
• other means necessary to provide the service.

These communications may relate, in particular, to:

• security;
• account activity;
• operations carried out;
• incidents;
• important updates;
• how the services work;
• support.

Commercial or promotional communications requiring specific consent are subject to an appropriate consent or unsubscribe mechanism.

Our Voice provides services allowing its clients to send SMS, make voice communications, create IVRs, and use other communication solutions.

In this context, a client may transmit to Our Voice personal data concerning its own recipients.

The client using Our Voice to communicate with its recipients remains responsible for ensuring that it has an appropriate legal basis to:

• collect their data;
• use it;
• transmit it to Our Voice;
• send them communications.

The client must also comply with the obligations applicable to data protection, consent, prospecting, and electronic communications.

Our Voice processes this data only to the extent necessary to perform the requested services and in accordance with the applicable instructions.

To provide its services, Our Voice may use specialized service providers.

These providers may in particular be involved in:

• hosting;
• the cloud;
• technical infrastructure;
• SMS;
• voice communications;
• IVR services;
• payments;
• security;
• maintenance;
• support;
• monitoring and availability of services.

When these providers process personal data on behalf of Our Voice, the relationship is governed by appropriate obligations relating to confidentiality, security, and data protection.

The user may request the deletion of their account through the features available on the platform or by contacting:

support@getourvoice.com

Deleting the account does not necessarily result in the immediate deletion of all data.

Certain data may be retained where its retention is:

• required by law;
• necessary as evidence of an operation;
• necessary for security;
• necessary for fraud prevention;
• necessary for the resolution of a dispute;
• necessary for the exercise or defense of rights.

At the end of the applicable retention period, data is deleted or anonymized in accordance with the applicable rules.

The Our Voice services are intended for persons authorized to use them in accordance with the General Terms of Use.

Our Voice does not seek to knowingly collect personal data from minors where such collection is not necessary or authorized.

If you believe that an account has been created, or that personal data has been collected, concerning a minor in violation of the applicable rules, you may contact:

support@getourvoice.com

Our Voice may update this policy to take into account, in particular:

• regulatory changes;
• recommendations from the APDP;
• changes to its services;
• technical changes;
• changes in its processing practices;
• developments in security.

The date of the last update is indicated at the top of this policy.

Where changes are significant, Our Voice may inform users through an appropriate means.

Where a change requires new consent, it is collected in accordance with the applicable rules.

Previous versions of the policy may be retained where necessary to ensure the traceability of changes and consents.

For any question concerning:

• this Privacy Policy;
• the protection of your data;
• security;
• the exercise of your rights;
• a deletion request;
• a rectification request;
• a complaint;
• a security incident;

you may contact:

Our Voice

E-mail: support@getourvoice.com

Address: Parcel No. C/SB, Maison Fatouma Adamou Boni, Yimporima, Natitingou 3, Natitingou, Atacora, Benin

Phone: +229 01 66 36 90 53

This Privacy Policy enters into force on:

August 14, 2026

Version: 2.0

It replaces any previous version of the Privacy Policy published by Our Voice for the services concerned.