Privacy Policy

Last updated: January 20, 2025

1. Introduction

VoiceZap.ai ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal data in accordance with the General Data Protection Regulation (GDPR) and other applicable privacy laws.

Controller Details:

Company: Bloxz Development (rxj.dev)
Address: Lindekamp 3, Dalfsen, the Netherlands
Contact: hi@rxj.dev

2. Information We Collect

2.1 Personal Data

We collect and process the following personal data:

Account information (email, name)
Voice recordings and transcriptions
Authentication data (if using Google sign-in)
Payment information (processed by Paddle)
Usage data (features used, timestamps)
Technical data (IP address, device info, browser type)

2.2 Legal Basis for Processing

We process your personal data under the following legal bases:

Contract Performance: To provide our voice recording service
Legitimate Interests: To improve and secure our service
Legal Obligation: To comply with applicable laws
Consent: For marketing communications (where applicable)

3. How We Use Your Data

3.1 Primary Purposes

Provide and maintain our service
Process your recordings and generate transcriptions
Handle payments and subscriptions
Send service updates and notifications
Respond to your support requests
Improve our service functionality

3.2 Data Processing Commitments

We explicitly commit that:

Your voice recordings will NOT be used for AI training
Your data will NOT be shared with third parties except as necessary for service provision
Your recordings will NOT be analyzed for marketing purposes
We will only process your data as described in this policy

4. Data Sharing and International Transfers

4.1 Service Providers

We use the following key service providers:

Open AI (speech-to-text transcription & post processing of transcriptions)
Assembly AI (speech-to-text transcription)
Paddle (payment processing)
Google Authentication (optional sign-in)

4.2 International Transfers

When we transfer data outside the EU/EEA, we ensure appropriate safeguards through:

EU Standard Contractual Clauses
Adequacy decisions by the European Commission
Privacy Shield certification (where applicable)

5. Data Security and Retention

5.1 Security Measures

All data is encrypted in transit and at rest
Regular security audits and updates
Access controls and authentication
Secure cloud infrastructure
Staff confidentiality agreements

5.2 Retention Period

Account data: While your account is active
Voice recordings: Until you delete them or close your account
Usage data: 12 months
Payment data: As required by tax laws

6. Your GDPR Rights

Under GDPR, you have the following rights:

Access: Request a copy of your personal data
Rectification: Correct inaccurate data
Erasure: Request data deletion ("right to be forgotten")
Portability: Receive and transfer your data
Restriction: Limit how we use your data
Objection: Object to data processing
Withdraw Consent: For consent-based processing

To exercise these rights, contact hi@rxj.dev. We'll respond within 30 days.

7. Cookie Policy

We use:

Essential cookies: For service functionality
Analytics cookies: With your consent You can manage cookie preferences in your browser settings.

8. Children's Privacy

Our service is not intended for users under 16. We do not knowingly collect data from children. If we discover we have collected children's data, we will delete it immediately.

9. Changes to This Policy

We may update this policy to reflect:

Service changes
Legal requirements
Best practices

We'll notify you of material changes via:

Email
Service notification
Website notice

10. Data Protection Authority

You have the right to complain to your local data protection authority. For the Netherlands, this is: Autoriteit Persoonsgegevens https://autoriteitpersoonsgegevens.nl

11. Contact Us

For privacy-related matters:

Email: hi@rxj.dev
Address: Lindekamp 3, Netherlands