Privacy Policy

Product: Voice to Post (“Service”)
Website: https://voicetopost.app
Controller/Owner: Lada Kazantseva (Individual entrepreneur)
Contact: support@voicetopost.app

This Privacy Policy explains how we collect, use, and share information when you use Voice to Post.

1) What we collect

• Audio you upload (voice input): the audio file is processed for transcription and then deleted from the server (see “Data retention” below).
• Text you submit: transcripts and pasted text are processed to generate outputs. We do not currently provide a “saved history” feature in the product, so we do not store your transcripts/inputs as a permanent library on our servers.
• Generated outputs: outputs are returned to you in the app. We do not currently store your generated posts as a permanent library on our servers.
• Usage data such as approximate timestamps, feature usage, basic device/browser information, and diagnostic logs.
• Identifiers:
  • An anonymous identifier cookie (tt_anon) used to manage “credits / content sessions” state for users who are not signed in.
  • If you sign in (if/when enabled), account identifiers from the authentication provider (for example, Supabase Auth).
• Payment data (if you purchase): we do not store full card details. Payments are handled by a third-party payment processor. We may receive limited payment-related information such as purchase status, product/plan, country, VAT/tax status, and transaction IDs.

2) How we use information

• Provide the Service (transcribe audio, generate posts, manage credits).
• Operate and secure the Service (prevent abuse, debug, maintain reliability).
• Process purchases and manage entitlements/credits.
• Analyze usage to improve the Service (for example, via Vercel Analytics in production).

3) How transcription/generation works (third-party processors)

When you use certain features, your content may be sent to third-party providers to perform the requested processing:

• Transcription: audio may be sent to OpenAI (Whisper) for transcription.
• Generation: text inputs and selected evidence snippets may be sent to Anthropic for generation.
• Database/auth: Supabase may store credit accounts and related identifiers (anonymous or authenticated).
• Analytics: Vercel Analytics may collect aggregate usage metrics in production.

These providers process data on our behalf to deliver functionality.

4) Cookies and similar technologies

• Essential cookies:
  • tt_anon (httpOnly) to keep an anonymous ID and manage credits / content sessions. It may persist up to ~1 year.
• Auth/session storage (if enabled): Supabase Auth may use cookies/local storage to keep you signed in.
• Analytics: Vercel Analytics may use client-side mechanisms to measure traffic and performance.

You can usually manage cookies through your browser settings; some features may not work without essential cookies.

5) Data retention

• Audio uploads: based on the current implementation, audio is typically stored only temporarily for processing and then deleted from the server after transcription completes.
• Transcripts/text/generation: we do not currently store your transcripts, pasted inputs, or generated posts as a permanent library on our servers. They are processed to provide the Service and returned to you. (If we add “saved history” in the future, we will update this policy.)
• Credits/account records: retained as needed for accounting, fraud prevention, and providing purchased entitlements.

We may retain certain logs longer for security and legal compliance.

6) Sharing

We share information only:

• With vendors that help run the Service (OpenAI, Anthropic, Supabase, Vercel, and payment processors), as described above.
• For legal reasons if required by law, subpoena, or to protect rights/safety.
• In a business transfer (for example, acquisition), where permitted by law.

We do not sell your personal information.

7) International data transfers

Your information may be processed in countries other than where you live, depending on where our providers operate. We take reasonable steps to protect data in transit and at rest.

8) Your choices and rights

Depending on your location, you may have rights to access, delete, or correct personal data, or object to certain processing. To request this, contact support@voicetopost.app. We may need to verify your request.

9) Children

The Service is not intended for children under 13 (or the minimum age required in your jurisdiction). Do not use the Service if you are under that age.

10) Security

We use reasonable administrative, technical, and organizational safeguards, but no method of transmission or storage is 100% secure.

11) Changes

We may update this policy from time to time. We will update the “Effective date” and, if changes are material, provide additional notice.