Freya procurement policy evidence
Only topics backed by verified findings appear below. Each row preserves the platform's exact policy words and capture provenance.
| Topic | Plan or tier | Risk | Their words | Source |
|---|---|---|---|---|
| DPA, audit rights & data residency | All applicable tiers | unknown | “ Restriction/Objection . Request that we stop or limit processing of your Personal Data.” | Captured 2026-07-20Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “ If you are located in the European Economic Area, Switzerland, or the United Kingdom, you have the following rights under the GDPR/UK GDPR: Access. Request confirmation whether we process your Personal Data and obtain a copy.” | Captured 2026-07-20Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “ Deletion . Request deletion of your Personal Data, or anonymization where deletion is not possible.” | Captured 2026-07-20Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “ Correction . Request correction of inaccurate or incomplete Personal Data.” | Captured 2026-07-20Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ If you are located in the European Economic Area, the United Kingdom, or Switzerland, we ensure that any transfers outside those regions are protected by appropriate safeguards. These may include the EU Standard Contractual Clauses, the UK Addendum, or transfers to recipients certified under the EU–U.S. Data Privacy Framework, as applicable. No matter where your data is processed, we apply technical, organizational, and contractual protections to ensure it remains secure and handled in line with this Privacy Policy. Data Retention. ” | Captured 2026-07-20Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ legal and regulatory obligations that apply to our customers (such as mandatory record-keeping requirements in financial services or healthcare); and” | Captured 2026-07-20Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ the sensitivity of the data, including whether it contains Sensitive Data such as biometric identifiers (e.g., voiceprints) or financial identifiers (e.g., loan numbers);” | Captured 2026-07-20Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ Where we process Personal Data on behalf of our business customers, we retain that data in accordance with their instructions and applicable law. This means retention schedules may differ depending on the requirements of the specific customer and the regulatory environment in which they operate. Freya does not retain voice recordings, transcripts, or related identifiers longer than necessary to deliver the Services or as required by law. Cookies and Similar Technologies. ” | Captured 2026-07-20Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ the need to maintain records for audit, security, or fraud-prevention purposes.” | Captured 2026-07-20Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ We only keep Personal Data for as long as it is necessary to provide our Services, comply with our legal obligations, resolve disputes, or enforce our agreements. When Personal Data is no longer needed, we take steps to delete it or to keep it in a de-identified form that no longer allows you to be identified. The specific retention period depends on several factors, including: the type of Service provided (for example, voice agent interactions for financial or healthcare institutions may be subject to longer retention periods under applicable laws);” | Captured 2026-07-20Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ We do not sell or rent your Personal Data. Where do we transfer your data to? ” | Captured 2026-07-20Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ We only share your Personal Data when it is necessary to provide our Services, comply with the law, or protect our users. In particular, we may share your data with: Our team and affiliates . Freya employees, contractors, and affiliated companies who need access to provide or support the Services.” | Captured 2026-07-20Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ In case of a business transaction . If Freya is involved in a merger, acquisition, financing, or sale of assets, your data may be shared as part of that process.” | Captured 2026-07-20Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Freya is a U.S.-based company, but we provide Services globally. This means that your Personal Data may be transferred to and processed in countries other than where you live. For example, our Services are hosted in the United States and European Union, and we may share data with trusted service providers in those regions to help us operate securely and efficiently. Typical transfers include: Cloud hosting and storage . Used to run and secure our platform” | Captured 2026-07-20Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ These categories may be shared with advertising vendors (such as analytics providers, affiliate marketing companies, or tracking technology providers) in order to deliver or measure advertising. We do not knowingly sell or share Personal Information of individuals under the age of 18.” | Captured 2026-07-20Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ Legal and regulatory authorities . Where we believe it is necessary to comply with the law, respond to valid legal requests, prevent fraud or misuse, or protect the rights, safety, and security of Freya, our customers, or the public.” | Captured 2026-07-20Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ Information from Service Providers . We may receive information that you have shared with certain third-party service providers, for example, in relation to our verification/background checks, such as ‘Know Your Customer’ (KYC) and ‘Anti-Money Laundering’ (AML) checks.” | Captured 2026-07-20Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ Online identifiers such as IP addresses, device identifiers, or cookie IDs.” | Captured 2026-07-20Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ AI voice agent technology . We use third-party providers of AI voice technology, to process voice data and deliver our Services.” | Captured 2026-07-20Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ With your consent . If you ask us to share data or permit us to do so.” | Captured 2026-07-20Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ Payment processing . Used to handle billing and payments” | Captured 2026-07-20Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ Analytics and support tools . Used to improve services and respond to inquiries (e.g., analytics platforms, support channels).” | Captured 2026-07-20Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ Service providers (sub-processors) . Trusted vendors who help us deliver the Services (such as cloud hosting, payment processing, security, or customer support). These providers process data only under our instructions and with appropriate safeguards.” | Captured 2026-07-20Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ Business customers . If you are an end user of one of our customers (for example, a bank or other regulated organization), your voiceprints, transcripts, or identifiers are shared with that customer, who controls how the data is used.” | Captured 2026-07-20Open source →Finding permalink → |
Informational only, not legal advice. Terms can change; verify every cited source and capture date during procurement review.
📢 POLICY UPDATES ALERT
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.