Privacy Policy

1. Introduction

Vocarim ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

2. Information We Collect

2.1 Personal Information

We collect the following personal information:

• Email address (for authentication and communication)
• Name (if provided)
• Payment information (processed securely by Stripe)

2.2 Usage Data

We automatically collect certain information when you use the Service:

• Call duration and timestamps
• Call transcripts and recordings
• IP address and browser type
• Device information
• Usage patterns and preferences

2.3 User-Generated Content

• Custom contact information you create
• Product descriptions and configurations
• Practice call content and transcripts

3. How We Use Your Information

We use your information to:

• Provide, maintain, and improve the Service
• Process payments and manage subscriptions
• Send you authentication links and service-related emails
• Generate AI-powered practice conversations tailored to your needs
• Store and display your call history and transcripts
• Analyze usage patterns to improve our features
• Respond to your requests and support inquiries
• Detect and prevent fraud or abuse

4. Data Storage and Security

We implement appropriate technical and organizational measures to protect your personal information:

• Data is encrypted in transit using TLS/SSL
• Database access is restricted using row-level security
• Payment information is processed by Stripe and never stored on our servers
• Regular security audits and updates
• Access to personal data is limited to authorized personnel only

Your data is stored on secure servers provided by Supabase, which complies with industry standards for data protection.

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your data only in these circumstances:

• Service Providers: OpenAI (for AI conversations), Stripe (for payments), Supabase (for database), and Resend (for emails)
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• With Your Consent: When you explicitly agree to share data

6. Your Rights (GDPR Compliance)

If you are a resident of the European Economic Area (EEA), you have the following rights:

6.1 Right to Access

You have the right to request a copy of all personal data we hold about you.

6.2 Right to Rectification

You can update incorrect or incomplete information through your profile settings.

6.3 Right to Erasure

You have the right to request deletion of your personal data. You can delete your account and all associated data through your profile settings.

6.4 Right to Data Portability

You can export your data (call transcripts, contacts, and account information) in a machine-readable format from your profile settings.

6.5 Right to Object

You may object to processing of your personal data for direct marketing purposes.

6.6 Right to Restrict Processing

You can request that we limit how we use your data.

To exercise any of these rights, please visit your profile settings or contact us at privacy@vocarim.com

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or regulatory purposes.

8. Cookies and Tracking

We use essential cookies to maintain your session and preferences. We do not use tracking cookies or third-party analytics that collect personal information without your consent.

9. Children's Privacy

Our Service is not intended for users under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe we have collected information about a child, please contact us immediately.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure that such transfers comply with applicable data protection laws and that your data receives adequate protection.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at:

• Email: privacy@vocarim.com
• Support: support@vocarim.com

13. Your California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, use, and share, and the right to delete your personal information. To exercise these rights, please contact us at privacy@vocarim.com