Privacy Policy

1. Data Controller

VoiceDot ("we", "our") operates the voice pin service at voicedot.app. We are the data controller for personal data collected through this service.

2. Data We Collect

When you use VoiceDot, we may collect:

• Display name — shown on your voice pins and profile; defaults to Member until you set a name in your profile
• Location — city, country, coordinates
• Voice recording — audio files you upload
• Transcript — an automatic English transcription of your recording (see "Transcription" below); shown publicly alongside your voice
• Email address (optional, guests) — if you choose to leave it after publishing, so we can notify you when someone replies to your story; never shown publicly
• Comments — text on voice pins
• Device fingerprint — browser-based pseudonymous identifier (e.g. FingerprintJS) for content attribution, rate limiting, and moderation. Created with your consent; stored locally where applicable; can be reset by clearing browser storage.
• IP address — collected when you submit a voice pin or comment, for moderation and abuse prevention. We also derive an approximate, country-level location from it (or from our hosting platform's request headers).
• Browser/device information (User-Agent) — collected on pin and comment submission, for moderation and support.
• Usage data — page views, performance metrics (Vercel Analytics), and traffic analytics via Google Analytics (e.g. country/city, device, referral source)
• Product analytics & session replays (PostHog) — how the site is used: clicks, page interactions, and technical performance, processed by PostHog on servers in the EU. This may include session replays — visual recordings of how you interact with the page. Anything you type into input fields is masked and never recorded. Until you accept the cookie notice, analytics runs in a cookieless mode (nothing is stored on your device and visits are not linked together); session replays are recorded only after you accept.

3. How We Use Your Data

• Display voice pins on the globe at specified locations
• Geocode via OpenStreetMap Nominatim
• Store and stream audio via AWS S3 and CloudFront
• Transcribe and translate recordings — audio you publish is automatically transcribed and translated to English (via OpenAI) so listeners who don't speak your language can read it, and so we can moderate content. The transcript (or a short preview of it) is displayed publicly next to your voice.
• Send reply notifications by email (via Resend) when you have opted in
• Moderate content (Telegram-based tools)
• Show where a reply came from — when someone comments on or replies to a voice pin, notifications to its author may mention the approximate country of the person who replied, derived from their IP address. Only the country is shown; we never disclose the IP address itself or a city to other users.
• Prevent abuse (rate limiting, reports)
• Improve service reliability

4. Third-Party Processors

We share data with:

• Vercel — hosting, analytics
• Google (Google Analytics) — traffic and usage analytics
• PostHog — product analytics and session replays; data is hosted in the EU (Frankfurt)
• Google (Sign-In) — authentication when you choose "Continue with Google"
• AWS — S3 (audio storage), CloudFront (CDN)
• OpenAI — automatic transcription and translation of published voice recordings
• Resend — sending email notifications (e.g. replies to your story), when you opt in
• OpenStreetMap / Nominatim — geocoding
• ipwho.is — IP-based approximate (country-level) geolocation for moderation and reply notifications
• Telegram — moderation alerts

Each processor has its own privacy policy and may process data in various jurisdictions.

5. International Data Transfers

Personal data may be processed outside the EEA. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses.

6. Legal Basis (GDPR)

For users in the EEA/UK: we process data based on consent (submitted content), contract (providing the service), and legitimate interests (moderation, abuse prevention).

7. Children

The service is not intended for children under 13.

8. Your Rights

You may: access your data, rectify inaccuracies, request erasure, data portability, object to processing, withdraw consent. Contact us to exercise these rights. You may also lodge a complaint with your data protection authority.

9. Retention

We retain pins, comments, and associated data until deletion or removal for moderation. Fingerprints, IP addresses, and logs may be kept for abuse prevention and legal compliance. Analytics data in PostHog (including session replays) is retained for up to 1 year.

10. Security Measures

We use HTTPS encryption, access controls, and limited administrative access to protect personal data.

11. Google Sign-In

You may optionally sign in to VoiceDot using your Google account via OAuth 2.0. When you do, we receive the following information from Google:

• Name — we may receive it from Google for account records; it is not shown as your public name on VoiceDot
• Email address — used for account identification and optional email notifications
• Profile picture — used as your avatar within VoiceDot

Your public display name on the site defaults to Member. You can change it to any name you choose in your profile settings.

This data is used solely for account identification and display within VoiceDot. We do not share it with third parties, and we do not use it for advertising or tracking purposes.

You can revoke VoiceDot's access to your Google account at any time via your Google account permissions.

12. Contact

Copyright ownership and permitted use of user-submitted audio/content are governed by our Terms of Service, including restrictions on AI/ML training use.

For privacy requests: info@voicedot.appPartnerships, press, and incubator outreach: voicedotapp@gmail.com