Google is the same - see your recordings here:

https://myactivity.google.com/myactivity?restrict=vaa

I'm not sure if it's codified in law, but big tech companies are moving towards 'if we store non-anonymized user data, it must be possible for the user to log in and see it themselves'. I think they do that so they can argue that storing and playing back the audio is a feature of the product, rather than something ancillary they happen to do which might not be in the users interest.

This used to be called "search history", and then "web history", and now "my activity". These controls for user data have been a best practice Google has been following for many years.

https://policies.google.com/technologies/retention

I was surprised they store a real recording. I thought they submitted some pre-processed form which saves bandwith, partly anonymizes the speech and then hands it off for recognition.