Privacy Policy
English version controls · Effective October 15, 2026
This Privacy Policy explains how the operators of voxtakes.com and app.voxtakes.com (“Voxtakes,” “we,” “us”) collect, use, disclose and protect information when you use our website and AI dubbing Service. It is part of our Terms of Service (https://www.voxtakes.com/terms). For privacy questions or to exercise any right, email [email protected].
1. Information We Collect
| Category | What it includes |
|---|---|
| Account data | Your email address, a salted hash of your password (we never store the password itself), and — if you sign in via a third-party provider we later enable — the provider-assigned ID and profile basics (name, email, avatar). |
| Application data | Answers to the open-beta application form (what you plan to dub, languages of interest, products you've used, requested features, optional company name) — used to approve and shape the beta. |
| Your media (Input) | Video/audio files you upload or pull by URL, plus intermediate artifacts we generate for your job (transcripts, translations, per-line audio, cleaned frames, subtitles). |
| Usage & billing data | Job metadata (durations, languages, stages, success/failure, quality scores), credit balances and ledger entries, plan and payment status. Card numbers are handled by our payment processor — we never see or store them. |
| Communications | Support emails and messages you send us. |
| Cookies | Strictly necessary: one session cookie to keep you logged in, plus a language-preference cookie. The marketing site uses no advertising, tracking or analytics cookies. |
| Server logs | IP address, user agent and request metadata for security and reliability, kept as ordinary hosting logs. |
2. How We Use Information
- Deliver the Service: process your Input into Output — speech recognition, translation, voice-clone synthesis, burned-in subtitle removal, subtitle rendering, quality scoring of each line.
- Operate & bill: run accounts, credits, subscriptions, invoices and receipts via our merchant of record.
- Trust & safety: enforce the Terms (including rights and consent rules around voice cloning), detect abuse, respond to abuse complaints and legal notices.
- Support & improvement: answer you, monitor pipeline reliability, and improve features using aggregate, non-content telemetry.
- Legal: comply with applicable law, enforce our agreements and protect rights.
3. Legal Bases (GDPR)
Where the GDPR applies, we process: under contract — account, media and billing data needed to deliver the Service; under legitimate interests — security, abuse prevention, service improvement, business communications; under legal obligation — tax records; with consent — optional marketing emails (withdraw any time) and non-essential cookies if ever introduced.
4. How Long We Keep Things
| Data | Retention |
|---|---|
| Uploaded media & Output | Auto-deleted 7 days after the job (default). Configurable shorter on request; bundle downloads are yours to keep. |
| Intermediate artifacts | Deleted with the job's media (line audio kept until deletion so you can re-render without re-paying). |
| Account data | Until you delete the account; we honor deletion requests within 30 days. |
| Billing records | As required for tax/accounting (typically up to 7–10 years, jurisdiction-dependent), minimised to invoice data. |
| Server/security logs | Ordinary hosting retention (up to ~30 days unless needed for an incident). |
5. Who We Share With
We do not sell or share personal data for advertising. We disclose data only to:
- Service providers bound by confidentiality and limited to performing their function: website/app hosting and CDN plus object storage (Cloudflare Inc., Fly.io), cloud GPU rendering (RunPod Inc., US region), AI model providers for translation/speech pipelines (self-hosted open models, and commercial model APIs under enterprise confidentiality terms), transactional email delivery, and our payment merchant of record for checkout and invoicing.
- Authorities where we have a valid legal obligation, or to defend our rights in disputes.
- Corporate events: parties to a merger, acquisition or asset sale (with obligations following this policy).
- With your consent — for example, if you ask us to share results with a collaborator.
6. International Transfers
The Service is operated from the United States, and your content and account data are processed and stored there. If you are in the EEA/UK/Switzerland, we rely on the EU-U.S. / UK extensions of the Data Privacy Framework and, where needed, Standard Contractual Clauses with our processors, alongside the safeguards described above.
7. Security
TLS in transit; encryption at rest in private object storage; media reachable only through time-limited, authenticated links; passwords hashed with a modern adaptive algorithm; least-privilege access for staff operators; 7-day automatic deletion limits exposure windows. No system is perfectly secure — if a breach ever affects your data, we will notify you as required by law.
8. Your Rights
Subject to local law, you can ask us (email above) to: access or receive a copy of your personal data (portable format on request), correct it, delete it, restrict or object to processing, or withdraw consent for consent-based processing, including marketing emails (one-click unsubscribe). EU/UK users may complain to their supervisory authority; we'd appreciate the chance to fix things first. We may need to verify your identity before acting, and we honor rights regardless of where you live.
9. Children
The Service is not directed to anyone under 18, and we don't knowingly collect their data. Media featuring minors must only be submitted by, or with the clear authorization of, a person able to consent on their behalf.
10. California Residents
We do not sell or share “personal information” as defined by the CCPA/CPRA, and have not done so in the past 12 months. The categories in Sections 1–5 describe everything collected and disclosed, for the purposes stated there.
11. Changes to This Policy
Material changes are announced by email and/or a notice on this page at least 14 days before taking effect (30 days for paid accounts), with the effective date updated above.
12. Contact
Voxtakes — data controller questions, deletion requests, DPA requests: [email protected]. We answer privacy requests within 30 days.