1. Executive Commitment to Voice Privacy
At VOICHE ("VOICHE", "we", "us", or "our"), your voice is treated as sensitive biometric property. We build speech coaching software engineered for vocal presence, not data monetization. We operate under four non-negotiable principles:
- Zero Selling: We never sell, lease, monetize, or broker your voice audio or biometric embeddings.
- Zero Public Model Training: Your voice calibrations and practice takes are strictly private and never used to train public foundational AI models.
- 100% Customer IP Ownership: You retain complete, perpetual intellectual property ownership of your voice and all practice audio takes.
- Delete Any Time: You can delete your voice model, recordings and account from the app at any time; see Voice Data Deletion for exactly what is removed and when.
2. Biometric Information Privacy Act (BIPA) & GDPR Article 9 Governance
Under the Illinois Biometric Information Privacy Act (740 ILCS 14/1 et seq.), the EU General Data Protection Regulation (GDPR Article 9), and the California Consumer Privacy Act (CCPA/CPRA), voiceprints constitute biometric identifiers.
What Biometric Data We Extract:
When you record a calibration sample, it is sent to our voice synthesis provider (see Section 5) to compute a voice embedding used to generate your calibrated voice. This embedding is used exclusively to synthesize your guide tracks.
Retention & Automatic Destruction Policy: Voice models and calibration audio are retained only while your account exists. When you delete your account, your voice model is deleted at our synthesis provider and your audio files are removed from storage; see Voice Data Deletion.
3. Categories of Information Collected
- Account Identifiers: Name, business email address, hashed authentication credentials, and subscription status.
- Speech & Script Content: Presentation scripts, speech notes, YouTube talk URLs submitted for transcription, and stress-word metadata.
- Audio Recordings & Syntheses: Voice calibration audio, practice takes, and generated guide tracks.
- Technical Telemetry: Anonymized browser version, device acoustic capabilities, latency diagnostics, and error reporting.
- Content Refusals: When a script is refused by our automated content screen, we record that a refusal happened, which category it fell under, and when. We do not store the refused text. Keeping it would mean warehousing exactly the material we declined to process. This record exists so repeated refusals can be reviewed by a person before any account is suspended.
Scripts are screened automatically at the moment they are submitted for synthesis. Nothing about that screening is retained for scripts that pass, and ordinary strong language is not screened for at all — see the acceptable-content section of the Terms.
4. Cookies & Analytics
voiche.com and the app at app.voiche.com use three third-party measurement tools: Google Analytics 4 (property G-N0W1WSSCGV) to count visits and see which pages people read, and the Meta Pixel (Facebook/Instagram) and Spotify Ad Analytics pixel to see which ads bring people to the site and, further on, which ones lead to a sign-up.
- What it sets: Analytics sets first-party
_ga cookies; the Meta and Spotify pixels set their own cookies when loaded. All of them distinguish one visitor's return from a stranger's first visit. Analytics' cookies expire after two years, or sooner if you clear them.
- What it collects: pages viewed, approximate location derived from your IP address, device and browser type, how you arrived, which button or link you clicked, and — only in the app, and only as a yes/no step, never content — whether a guest finished a practice take, created an account, started checkout, or completed a purchase (with the amount charged, so ad spend can be measured against real revenue).
- What it never sees: your voice recordings, your scripts, anything you said or typed, your email address or name. These tools receive a step (a click, a page view, a sign-up) and a category, never the content behind it.
- European visitors are asked first. If your browser's timezone is in the EU/EEA, the UK, Switzerland or Turkey — or we cannot tell where you are — the ad pixels do not load until you press "Allow" on the banner shown on your first visit. Everywhere else the pixels load by default; see "how to opt out" below either way.
- Strictly necessary storage: we also keep a
voiche_theme value in your browser to remember whether you chose light or dark, and a vc_ad_consent value to remember your answer to the ad-cookie question. Neither leaves your device and neither is a cookie.
- How to withdraw or opt out: Change ad-cookie choice clears your saved answer and asks again. You can also use your browser's cookie controls, any tracker-blocking extension, or Google's official opt-out add-on at tools.google.com/dlpage/gaoptout. Nothing on this site stops working if you do.
5. Legal Bases, International Transfers & Age
- Consent (GDPR Art. 6(1)(a) and Art. 9(2)(a)): processing your voice calibration audio and generating your voice profile. Voice data is a special category under Art. 9, so consent is explicit and can be withdrawn at any time by deleting your voice model.
- Contract (Art. 6(1)(b)): running your account, storing your scripts and takes, and taking payment.
- Legitimate interests (Art. 6(1)(f)): security, abuse prevention, the content-refusal record described above, and aggregate site analytics.
- International transfers: our infrastructure and synthesis providers may process data outside your country, including in the United States. Each is bound by a Data Protection Agreement incorporating the European Commission’s Standard Contractual Clauses.
- Age: Voiche is not intended for anyone under 16. We do not knowingly collect voice data from children. If you believe a child has created an account, email [email protected] and we will delete it.
6. Security Infrastructure & Encryption Standards
VOICHE implements robust security controls to ensure customer audio and account data remain private and secure:
- In-Transit Security: All client-to-server and inter-service communications enforce HTTPS and TLS 1.3 encryption.
- At-Rest Encryption: All audio storage buckets and database records are encrypted using standard AES-256 cloud encryption.
- Isolated Multi-Tenancy: Strict tenant sandboxing ensures your audio models and takes can never be accessed by other users.
- Access Governance: VOICHE employees cannot access raw private audio takes without explicit, time-bounded user authorization for support troubleshooting.
7. Authorized Infrastructure Subprocessors
We work with a limited number of infrastructure and processing providers, each bound by a Data Protection Agreement (DPA) and used only for the specific purpose below:
Payment Processing
A PCI-DSS Level 1 compliant payment processor. We never store your credit card numbers.
Voice Synthesis Provider
Processes your calibration audio to generate your calibrated voice profile and synthesize guide tracks. Receives only the audio needed for that request.
Cloud Infrastructure
Global edge routing, DDoS shielding, and AES-256 encrypted object storage for audio files.
Database & Authentication
Account storage, authentication, and application database.
A full list naming each provider is available on request — email [email protected].
8. Your Global Privacy Rights
Regardless of your jurisdiction, VOICHE provides equal rights to all users globally:
- Right to Access & Portability: Export all your saved recordings and scripts as standard audio and text files.
- Right to Erasure (Article 17 GDPR): Delete your voice models and recordings instantly via the app settings, which also deactivates your account. Email [email protected] to have your remaining account records fully erased. See Voice Data Deletion for details.
- Right to Restrict Processing: Withdraw consent for voice synthesis at any time without penalty.