CYBORA
Last updated: 2026-01-30
1. Introduction
CYBORA (“we”, “us”, or “our”) is committed to protecting the privacy and personal data of its users, clients, and business partners.
This Privacy Policy explains how personal data is collected, used, disclosed, and protected in connection with the provision of call center, contact center, and AI-assisted communication services, as further described in the Terms and Conditions.
Personal data is processed in accordance with applicable data protection laws, including the EU General Data Protection Regulation (GDPR), UK GDPR, and other relevant regulations.
By using our services, you acknowledge that personal data may be processed as described in this Privacy Policy and in accordance with the Terms and Conditions.
2. Data Controller Information
Company name: CYBORA
Address: Akademijos g. 4, 4th floor, North Wing, Vilnius, Lithuania, LT-08412
Phone: +370 640 12261
Email: support@cybora.tech
Data Protection Officer (DPO):
📧 dpo@cybora.tech
3. Scope of This Privacy Policy
This Privacy Policy applies to personal data processed in connection with services defined in the Terms and Conditions, including:
- inbound and outbound calls,
- customer support and sales communications,
- AI-driven or automated interactions,
- business-to-business (B2B) and business-to-consumer (B2C) services.
It applies to individuals located in the European Union, United Kingdom, and United States, where applicable.
4. Categories of Personal Data We Process
We may process the following categories of personal data, depending on the nature of the services provided:
- identification data (e.g., name, business contact details),
- contact data (e.g., phone number, email address),
- call metadata and call recordings,
- communication content,
- technical and usage data related to our systems.
We do not intentionally collect special categories of personal data unless required by law and processed in accordance with applicable legal safeguards.
5. Purposes and Legal Bases for Processing
Personal data is processed for purposes consistent with the services described in the Terms and Conditions, including:
- providing and managing call center and contact center services,
- quality assurance, training, and regulatory compliance,
- customer support and operational communications,
- sales and outbound marketing activities where lawful,
- security, fraud prevention, and dispute resolution.
Legal bases include performance of a contract, legitimate interests, compliance with legal obligations, and consent where required by applicable law.
6. Call Recording and Monitoring
Calls may be recorded or monitored for quality assurance, training, security, dispute resolution, and legal compliance purposes, as outlined in the Terms and Conditions.
Where required by law, individuals are informed that calls may be recorded prior to or at the beginning of the call.
Access to call recordings is limited to authorized personnel only.
Recordings are retained only for as long as necessary for the purposes for which they were collected.
7. Use of Artificial Intelligence and Automated Systems
CYBORA uses Artificial Intelligence technologies, including voice bots, speech recognition, and automated call routing, as described in the Terms and Conditions.
Individuals are informed when interacting with AI-based or automated systems, in accordance with transparency obligations.
AI systems are designed to support human agents and are subject to appropriate human oversight.
CYBORA does not deploy AI systems for prohibited practices under the EU Artificial Intelligence Act.
8. Outbound Marketing and Consent
Outbound communications are conducted in compliance with applicable laws, including GDPR, UK PECR, and US TCPA, as further described in the Terms and Conditions.
Where required, CYBORA relies on valid consent or another lawful basis before initiating outbound marketing communications.
Individuals may opt out of marketing communications at any time using the mechanisms provided.
Opt-out requests are respected and implemented without undue delay.
9. Data Sharing and Disclosure
Personal data may be shared with:
- CYBORA group companies,
- trusted service providers and data processors,
- clients on whose behalf services are provided,
- public authorities where legally required.
All data recipients are subject to appropriate confidentiality, security, and data protection obligations consistent with this Privacy Policy and the Terms and Conditions.
10. International Data Transfers
Personal data may be transferred within the European Union, United Kingdom, and to the United States, in line with service delivery requirements.
International transfers are safeguarded using Standard Contractual Clauses (SCCs), UK IDTA, or recognized adequacy mechanisms such as the EU–US Data Privacy Framework.
CYBORA ensures that appropriate technical and organizational measures are applied to protect personal data.
Consistent data protection standards are maintained across all group entities.
11. Data Retention
Personal data is retained only for as long as necessary to fulfill the purposes described in this Privacy Policy and the Terms and Conditions.
Retention periods may be influenced by contractual, legal, or regulatory obligations.
When personal data is no longer required, it is securely deleted or anonymized.
Retention practices are reviewed on a regular basis.
12. Data Subject Rights
Subject to applicable law, individuals may exercise the right to:
- access their personal data,
- request rectification or erasure,
- restrict or object to processing,
- request data portability,
- withdraw consent at any time.
Requests may be submitted to:
📧 dpo@cybora.tech
13. Security Measures
CYBORA implements appropriate technical and organizational security measures to protect personal data.
These measures include access controls, encryption, monitoring, and incident response procedures.
Security practices are reviewed and updated regularly.
Despite reasonable safeguards, no system can be guaranteed to be fully secure.
14. Children’s Privacy
CYBORA services are not directed at children.
CYBORA does not knowingly collect personal data from children.
If such data is identified, it will be deleted without undue delay.
Parents or guardians may contact CYBORA if they believe personal data has been collected inadvertently.
15. Changes to This Privacy Policy
CYBORA may update this Privacy Policy from time to time.
Material changes will be communicated where required by applicable law.
The updated version becomes effective upon publication.
Continued use of the services constitutes acknowledgment of the updated Privacy Policy.
16. Contact Information
For questions regarding this Privacy Policy or personal data processing, please contact:
📧 dpo@cybora.tech
📧 support@cybora.tech
📞 +370 640 12261
