Privacy Policy

Vocal Labs LLC ("we," "our," "us," or "Company") operates the VocalPresets.ai service ("Service"). We are committed to protecting your privacy and ensuring transparency about how we collect, use, disclose, and safeguard your information.

This Privacy Policy explains our practices regarding the collection, use, and disclosure of information when you use our Service. By accessing or using the Service, you agree to the collection and use of information in accordance with this Privacy Policy.

If you do not agree with our policies and practices, please do not use the Service. We may update this Privacy Policy from time to time, and we will notify you of any material changes as described in Section 14 below.

We use the information we collect for the following purposes:

• Provide and Maintain the Service: To create and manage your account, process your audio file uploads, apply voice transformations, and deliver processed audio files to you
• Process Payments and Manage Subscriptions: To process subscription payments, manage billing, send payment confirmations, and handle subscription renewals and cancellations
• Manage Credits and Rewards: To track your credit usage, process bonus credits from achievements and referrals, and manage credit expiration
• Gamification Features: To track achievements, maintain streaks, process referrals, and deliver rewards
• Communicate with You: To send you service-related notifications, technical notices, updates, security alerts, support messages, and respond to your inquiries
• Improve the Service: To analyze usage patterns, identify popular features, understand user preferences, and develop new features and functionality
• Ensure Security and Prevent Fraud: To detect, prevent, and address technical issues, security threats, fraud, abuse, or other harmful activity
• Comply with Legal Obligations: To comply with applicable laws, regulations, legal processes, or governmental requests
• Enforce Our Terms: To enforce our Terms of Service and other policies, and to protect our rights, property, or safety, or that of our users or others
• Business Operations: To conduct business analysis, monitor service performance, and manage our business operations

We may combine information we collect from different sources for these purposes. We do not use your information for purposes other than those described in this Privacy Policy without your consent.

If you are located in the European Economic Area (EEA) or United Kingdom, we process your personal information based on the following legal bases:

• Contract Performance: To perform our contract with you (e.g., providing the Service, processing payments, managing subscriptions)
• Legitimate Interests: To operate and improve our Service, ensure security, prevent fraud, and analyze usage patterns
• Consent: When you have provided explicit consent (e.g., for marketing communications or optional features)
• Legal Obligation: To comply with applicable laws and regulations

We do not sell, rent, or trade your personal information to third parties. We may share your information in the following circumstances:

We implement industry-standard technical and organizational security measures to protect your information:

• Encryption: Data is encrypted in transit using SSL/TLS protocols. Sensitive data is encrypted at rest where technically feasible.
• Secure Storage: Audio files and user data are stored securely on Supabase's infrastructure, which employs enterprise-grade security measures.
• Access Controls: Access to personal data is restricted to authorized personnel who need it to perform their job functions. We use role-based access controls and regularly review access permissions.
• Authentication: We use secure authentication methods, including password hashing and secure session management.
• Regular Security Reviews: We regularly review and update our security practices, conduct security assessments, and monitor for potential vulnerabilities.
• Payment Security: We do not store full payment card information. All payment processing is handled by Stripe, which is PCI DSS compliant.

Security Limitations: While we implement reasonable security measures, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security of your information. You are responsible for maintaining the confidentiality of your account credentials and for all activities that occur under your account.

If we become aware of a security breach that may affect your personal information, we will notify you and relevant authorities as required by applicable law.

We retain your personal information for as long as necessary to provide the Service and fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

• Account Information: We retain your account information for as long as your account is active or as needed to provide the Service.
• Audio Files: We retain your uploaded and processed audio files for as long as your account is active, unless you delete them. You can delete audio files at any time through the Service.
• Transaction Records: We retain payment and transaction records as required by law (typically 7 years for tax and accounting purposes).
• Usage Data: We retain usage data and analytics information for as long as necessary to improve the Service and analyze trends.
• Legal Requirements: We may retain certain information for longer periods if required by law, legal process, or governmental request, or to protect our legal rights.

When you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal or legitimate business purposes (such as transaction records or to resolve disputes).

Depending on your location, you may have certain rights regarding your personal information:

• Access: Request access to your personal data and receive a copy of the information we hold about you
• Correction: Request correction of inaccurate or incomplete information. You can update much of your information directly through your account settings
• Deletion: Request deletion of your account and personal information. You can delete your account through your account settings or by contacting us
• Portability: Request a copy of your data in a structured, machine-readable format
• Restriction: Request restriction of processing of your personal information in certain circumstances
• Objection: Object to processing of your personal information based on legitimate interests
• Withdraw Consent: Withdraw your consent where we rely on consent as the legal basis for processing
• Opt-Out: Opt-out of marketing communications by using the unsubscribe link in our emails or adjusting your preferences in your account settings
• Do Not Sell: We do not sell your personal information. If you are a California resident, you have the right to opt-out of the sale of personal information (though we do not engage in such sales)

To exercise these rights, please contact us at support@vocalpresets.ai or use the account management features in your settings. We will respond to your request within a reasonable timeframe and in accordance with applicable law.

Verification: For security purposes, we may need to verify your identity before processing certain requests.

The Service is not intended for children under the age of 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children under 13.

If you are a parent or guardian and believe that your child under 13 has provided us with personal information, please contact us immediately at support@vocalpresets.ai. If we become aware that we have collected personal information from a child under 13 without parental consent, we will take steps to delete such information promptly.

If you are between 13 and 18 years of age, you represent that you have obtained parental or guardian consent to use the Service and that your parent or guardian agrees to our Terms of Service and this Privacy Policy on your behalf.

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country.

Specifically, we use service providers located in various countries, including:

• Supabase (database and storage) - may process data in various regions
• Stripe (payments) - processes data in the United States and other countries
• Kits.ai (AI processing) - processes data in the United States
• Vercel (hosting) - processes data in various regions

If you are located in the EEA, UK, or Switzerland, we ensure that appropriate safeguards are in place for such transfers, including:

• Standard Contractual Clauses approved by the European Commission
• Other legally recognized transfer mechanisms

By using the Service, you consent to the transfer of your information to these countries and service providers.

We use cookies and similar tracking technologies to track activity on the Service and store certain information. Cookies are small data files stored on your device that help us improve your experience.

Types of cookies we use:

• Essential Cookies: Required for the Service to function properly (e.g., authentication, session management)
• Functional Cookies: Remember your preferences and settings to enhance your experience
• Analytics Cookies: Help us understand how users interact with the Service
• Performance Cookies: Collect information about how you use the Service to help us improve performance

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of the Service, particularly those that require authentication.

We do not currently use third-party advertising cookies or tracking cookies for advertising purposes.

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: Request information about the categories and specific pieces of personal information we collect, use, disclose, and sell
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: Opt-out of the sale of personal information (we do not sell personal information)
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights

To exercise your California privacy rights, please contact us at support@vocalpresets.ai. We will verify your identity before processing your request.

Categories of Personal Information We Collect: Identifiers (name, email), commercial information (purchase history), internet activity (usage data), audio/electronic data (uploaded files), and inferences (preferences).

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have certain data protection rights under the General Data Protection Regulation (GDPR):

• Right of Access: Obtain confirmation of whether we process your personal data and access to that data
• Right to Rectification: Request correction of inaccurate personal data
• Right to Erasure: Request deletion of your personal data under certain circumstances
• Right to Restrict Processing: Request restriction of processing of your personal data
• Right to Data Portability: Receive your personal data in a structured, commonly used format
• Right to Object: Object to processing of your personal data based on legitimate interests
• Right to Withdraw Consent: Withdraw consent where processing is based on consent
• Right to Lodge a Complaint: File a complaint with your local data protection authority

To exercise your GDPR rights, please contact us at support@vocalpresets.ai. We will respond to your request within one month (or longer if the request is complex).

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other reasons. We will notify you of any material changes by:

• Posting the updated Privacy Policy on this page with a new "Last updated" date
• Sending an email to the address associated with your account
• Displaying a prominent notice within the Service

Material changes will become effective 30 days after we post the updated Privacy Policy or notify you, unless a different effective date is specified. Your continued use of the Service after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.

We encourage you to review this Privacy Policy periodically to stay informed about how we collect, use, and protect your information.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

We will respond to your inquiry within a reasonable timeframe and in accordance with applicable law. For data protection inquiries from EEA residents, you may also contact your local data protection authority.