1. Who processes data and scope
Voice Feeling LLC provides Voice Feeling. Its identification and privacy contact channel appear at the top of this document. This policy covers the website, accounts, forms, voice trial, workspace and features actually enabled.
When we decide why and how to process account, security, administrative or communication data, we are the controller for that processing. For recordings and results supplied by an organizational customer, we normally follow its instructions as processor or service provider. The organization determines purposes, legal basis and user permissions and must give recorded people its own information.
If your voice appears in another organization’s recording, contact that organization or contact us for help directing your request. You do not need an account to raise a question about your data.
2. Data that may be processed
| Category | Examples | Usual source |
|---|---|---|
| Account and contact | Name, email, company or activity where relevant, role, phone, country, organization type, team size and intended use | You or the person inviting you |
| Authentication and permissions | Password hash, verification status, protected second-factor credentials, sessions, roles and protected API keys | Registration and account use |
| Recordings and metadata | Voice, spoken content, file, name, size, format, duration, channels and timestamps | You or the organization providing audio or its URL |
| Results | Requested transcripts, acoustic indicators, segments, reports, assessment answers and aggregates | Content processing |
| Technical and security data | IP address processed by infrastructure, session identifiers, verification signals, browser, errors and resource usage | Connection and service operation |
| Communications | Inquiries, support requests, contact and marketing preferences, and evidence of consent or acceptance | Forms and exchanges with us |
| Commercial data | Plan, usage, customer or subscription identifiers and invoice information when paid services are contracted | Account and payment provider |
We do not need identity documents, other people’s passwords, full card numbers, medical records or other information unrelated to the purpose. Speech may disclose personal or sensitive information even when the filename does not. Avoid submitting it when unnecessary or insufficiently authorized.
3. Voice, inferences and sensitive data
A recording can directly or indirectly identify someone. Whether it is sensitive or biometric data depends on law, purpose, technique and context. Not every recording automatically constitutes an identification voiceprint, and an alias does not necessarily anonymize audio.
The service is not offered for voiceprint identification or inference of protected categories. Its indicators are not psychological facts, diagnoses or proof of truthfulness. The AUP’s use restrictions are part of the service’s safeguards.
4. Purposes and grounds
- Creating, verifying and administering accounts, managing authorized users and providing requested functions: performance of the contractual relationship or preliminary steps and other grounds required by applicable law.
- Processing customer content and returning results: documented customer instructions and the legal basis the customer must establish; sensitive-data and recording requirements are assessed separately.
- Providing the voluntary voice trial: affirmative action and prior information about capture and transmission, together with applicable legal requirements. You can stop capture.
- Protecting accounts, limiting abuse, metering use, investigating incidents and maintaining the service: legal duties and assessed legitimate interests where that basis is permitted.
- Answering inquiries and managing a commercial relationship: the requested purpose, precontractual or contractual relationship, and authorization where appropriate.
- Sending marketing: separate consent or another permitted basis with legally required objection options. Marketing is not a condition of trial or registration.
- Meeting accounting, tax, judicial and rights-protection obligations: the relevant legal duty or permitted basis.
Where law requires prior, specific or explicit authorization, it must be obtained with the necessary scope. Acceptance of terms is not a substitute. General authorization is not used to justify every future purpose.
5. Voice trial without an account
When you voluntarily start the trial, your browser captures audio and transmits it through our infrastructure to the analysis provider. Segments and the report for that experience remain in the browser session’s memory; Voice Feeling does not save the demo recording as a file in your audio library.
“Without an account” and “ephemeral session” do not mean absolute anonymity or no third-party processing. Infrastructure processes technical information to connect and protect the session. Provider retention depends on the applicable service and agreement; we do not promise zero retention across all provider systems. Closing or stopping the session stops future capture but does not undo processing already performed.
6. Workspace recordings and results
Uploaded audio, provider results, requested transcripts and reports can persist for access by authorized users. The customer organization must determine what it supplies, why, who may see it and how long it needs it.
Results can contain personal data even when presented as metrics. A chart, score or aggregate involving few people is not anonymous merely because names are omitted. Do not publish reports without assessing identification risks and the rights involved.
7. Providers and recipients
| Recipient | Function | Scope |
|---|---|---|
| Cloudflare | Website, connectivity, execution, storage, databases, queues, security, email and operational statistics | Data needed for those functions under the configuration |
| Cloudflare Turnstile | Abuse prevention verification | Technical browser and connection signals |
| Technical provider specializing in voice analysis | Technical processing needed for analysis requested by Voice Feeling | Audio and data needed for results; its subprocessors depend on the contracted service |
| Stripe, when payments are enabled or contracted | Payment processing and commercial administration | Transaction and billing information |
| Authorized people in your organization | Workspace administration and use | Content accessible under permissions and configuration |
| Authorized personnel and support providers | Operations, requests and security | Necessary access under applicable duties |
The public policies of Cloudflare, Turnstile and Stripe describe their own roles. The identity, location and subprocessors of the technical analysis provider must be included in applicable contractual information when required by law or the processing. These policies do not replace agreements required to protect customer content.
We may disclose information where legally required or necessary and lawful to protect rights or safety, with assessment and appropriate limitation. Corporate transactions must preserve applicable safeguards and notices. We do not sell personal data or share it for cross-context behavioral advertising.
8. International processing
The service uses distributed infrastructure and providers that may process data outside your country. Cloudflare operates internationally. The location and subprocessors used for technical analysis depend on the contracted service and must be verified before submitting data subject to territorial restrictions. We do not assume a location or transfer safeguard that has not been contractually confirmed.
Where law requires, the processing must first have a valid mechanism: an adequacy decision, properly completed contractual clauses or another applicable safeguard or exception, with necessary assessment and supplementary measures. We do not claim that acceptance of this policy alone is sufficient consent for any transfer or that Voice Feeling LLC is certified under an international framework.
Before submitting data subject to localization or transfer restrictions, contact us to agree and verify applicable conditions. You may request information about relevant safeguards and access mechanisms, subject to lawful security and confidentiality limitations.
9. Training, advertising and statistics
Voice Feeling does not use customer recordings or reports to train general-purpose models or create individualized advertising from their indicators. Permission to use the service does not grant a license for those purposes.
Our operational statistics endpoint receives limited events and properties such as language, country, page or plan; it does not receive audio or its emotional indicators as analytics data. Technical and usage records remain protected information when linkable to an account. Providers’ no-training conditions must be verified in applicable agreements; a commercial statement is not a substitute.
10. Cookies and browser storage
| Technology | Purpose | Duration or criterion |
|---|---|---|
| vf_session | Maintain an authenticated session | Up to 7 days, unless ended or invalidated earlier |
| vf_magic_pending | Securely complete confirmation of an access or activation link | Up to 5 minutes |
| vf_auth_challenge | Complete a second authentication factor | Up to 5 minutes |
| vf_locale | Remember the selected language | Up to one year |
| vf_theme in local storage | Remember light, dark or system appearance | Until changed or browser storage is cleared |
| Cloudflare and Turnstile mechanisms | Security, connectivity and abuse prevention | According to the function and provider conditions |
We do not currently integrate advertising cookies or retargeting pixels on the site. If we introduce optional technologies requiring consent, we will provide information and a prior, revocable choice. Deleting or blocking necessary elements can prevent authentication or security verification. Browser privacy signals will be addressed as required by law and the processing actually performed.
11. Retention and deletion
Duration depends on data category, purpose, valid customer instructions, contract and law. There is no single automatic expiry for every audio file.
- Accounts and administration: during the relationship and afterwards only as necessary for legal duties, security, reconciliation or legitimate claims.
- Audio and results: while the customer maintains them for the authorized purpose and during requested return or deletion; specific periods must be agreed where necessary.
- Live trial: browser session memory for the experience’s results, subject to the third-party scope described above.
- Commercial contact: as necessary to answer an inquiry or maintain the authorized relationship; marketing can be withdrawn and minimum suppression records may be kept to respect that choice.
- Security, acceptance and usage: for the period needed for the purpose and applicable legal periods, with data minimization.
An audio deletion request restricts access and schedules asynchronous cleanup of the file and related results. Deleting an assessment answer may invalidate the entire aggregate report. Deleting a file does not remove its monthly usage counter.
Legal duties, disputes or restricted backups can require limited additional retention. Such copies must remain protected and not be reused for incompatible purposes; restoration must respect outstanding deletion requests. Customers must also consider copies they downloaded or shared outside the platform.
12. Security
We apply technical and organizational measures proportionate to risk, including protected communications, access controls, logical organization isolation, credential protection, verification and logging mechanisms. Providers participate in protecting their infrastructure.
No system offers absolute security. We do not claim certifications, exclusive residency, end-to-end encryption or retention guarantees that have not been expressly agreed and verified. If a notifiable incident occurs, we will act and communicate under our obligations and applicable agreements.
13. Your rights and requests
Depending on law and processing, you may request access, information, copies, correction, deletion, restriction, portability, objection or withdrawal of consent. Rights relating to inferences, automated decisions and sensitive information may also apply. Withdrawal does not invalidate earlier lawful processing.
Use the privacy contact channel identified here, describing your relationship to the service and your request. Identity checks will be proportionate and limited to necessary information. Do not initially send identity documents or sensitive recordings; we will agree on a suitable method if needed. Ordinary rights requests are free, subject only to legally permitted exceptions.
We will respond within the applicable legal period and explain extensions, limitations or refusals where required. When acting for an organization, we will coordinate with it and help identify the controller where possible. You may complain to the competent authority and use legally available appeals. Using the service does not require waiving rights.
14. Regional information
In Colombia, applicable rights include knowing, updating and correcting data, requesting evidence of authorization, learning about uses, withdrawing authorization where appropriate and requesting deletion, together with relevant procedures and powers of the Superintendencia de Industria y Comercio.
In Brazil, where the LGPD applies, we address Article 18 rights and rights concerning automated decisions, access to the data protection channel and the ANPD. Sensitive processing requires the applicable specific legal ground.
In the European Economic Area and other jurisdictions with equivalent rights, the rights, grounds, transfer safeguards and complaint routes required by the law’s scope apply. A European provider’s participation alone does not establish that the entire service falls within or outside that regime.
For California residents and residents of other US states, applicable state rights are respected when their legal requirements are met. Data categories, purposes and recipients are described above. We do not sell or share information for cross-context behavioral advertising or discriminate for exercising rights. Processing covered by a biometric law must additionally meet its notice, authorization, retention and destruction requirements; the AUP does not permit creating identification voiceprints.
15. Minors and decisions about people
The service is not directed to minors, and deliberately supplying their voices or data for analysis is not authorized. Contact us if you identify such content so we can assess removal. We do not seek to infer age from voice.
Voice Feeling does not make legal or comparably significant decisions about recorded people on your behalf. Indicators must not become the sole reason, or a decisive reason without independent verification, for employment, credit, insurance, health or other high-impact decisions. This safeguard does not authorize a use prohibited even with human involvement.
16. Updates
We will publish the updated version and date and communicate material changes appropriately where required. Consent or additional safeguards required for new purposes will be obtained before that processing begins. This policy does not treat unannounced future practices as accepted.