Privacy policy
This English text is a translation provided for convenience. Only the French version is legally binding. Read the French version
Data controller: Ilian Kara-Mostefa, 173 rue de Courcelles, 75017 Paris, France. For any question, or to exercise your rights: contact@voicetex.app.
What we process
Your email address
To sign you in and attach your usage to your account. Kept until the account is deleted. Lawful basis: performance of the contract between us — without an address there is no sign-in and no account.
A log of your dictations
Only the timestamp and the number of characters in and out, to count your quota against it. What you dictate is never recorded. Kept until you delete your account. Lawful basis: performance of the contract — this count is what decides what your plan entitles you to.
What you write to us
Your address, your name if you give one, and your message — only to answer you. None of it joins a mailing list, and the exchange is deleted once it is over. The email passes through our sending provider and our receiving provider, whose roles are described below. Lawful basis: our legitimate interest in answering whoever writes to us — you may object, and not writing to us is enough.
Your billing
What Stripe sends back to us on each payment: your subscription status, its due date, the billing country and the last four digits of the card. We keep it so we can prove what you were charged if a payment is disputed, for the statutory retention period for accounting records. Lawful basis: performance of the contract to open the access you paid for, and a legal obligation for the retention — that second basis is why an accounting record cannot be deleted on request.
Your paired devices
So the app stays signed in, and so you can unpair it from your account. Of the token we keep only a cryptographic fingerprint: the token itself exists nowhere on our side, and we would be unable to show it to you again. The app also sends the name your operating system gives the machine, so that you recognise your devices in the list, along with a random identifier whose only purpose is to avoid creating a duplicate on every reinstall. None of this is visible to anyone but you, and it goes when you unpair the device. Lawful basis: performance of the contract — it is what keeps the app signed in, and what lets you unplug it.
Where your voice goes
On every plan sold today, speech recognition runs on your own computer. No recording reaches us — only the recognised text is sent to be formatted.
Transcription on our servers is planned for the Premium plan, and does not exist yet. The day it opens, it will be the only plan where your audio leaves your machine; it will be processed there and then deleted, with no retention, and this page will say so before that happens.
Who we entrust this data to
Supabase Inc.
Database and authentication
Email address, account creation date, dictation counters
European Union (Paris region); company established in Singapore, with no transfer of data outside the Union
Scaleway SAS
Sending email: sign-in links, and messages from the contact form
Email address, and the message itself for the contact form
European Union (France)
Stripe Payments Europe, Limited
Taking payment and issuing invoices
Email address, billing details, and the billing events Stripe sends back to us: country, amount, subscription status, card brand and last four digits. The full card number is never transmitted to us
Ireland (European Union), with transfers to the United States · Stripe's data transfer addendum: EU–US Data Privacy Framework, and standard contractual clauses where it does not apply
Vercel Inc.
Hosting of the website and server functions
Technical logs, IP address at the time of each request
Functions executed in the Paris region; company established in the United States · Standard contractual clauses
Anthropic PBC
Formatting the transcribed text into LaTeX
The text produced by transcription — never the audio, never the email address, never the identity of the account
United States · Standard contractual clauses, and no training on API data
Cloudflare, Inc.
Domain name resolution, distribution of the installer, and receipt of emails sent to our contact address
IP address at the time of each request, and — for messages sent through the contact form — your address, your name if you give one, and the content of your message
Worldwide network · Standard contractual clauses
Cookies
This site sets only a session cookie, needed to keep you signed in. There is no analytics tool and no advertising tracker, which is why you are shown no banner: consent is required only for what is not strictly necessary.
Your rights
You may request access to your data, its correction, its erasure, its portability, or object to its processing, by writing to contact@voicetex.app. Deleting your account erases your address, your devices and the log of your dictations. The billing records our payment provider sends us are kept separately, for the statutory retention period for accounting records, and serve only that purpose. You may also lodge a complaint with the CNIL, the French data protection authority.