Privacy Policy & Biometric Data Governance

1. Executive Commitment to Voice Privacy

At VOICHE Inc. ("VOICHE", "we", "us", or "our"), your voice is treated as sensitive biometric property. We build speech coaching software engineered for vocal presence, not data monetization. We operate under four non-negotiable principles:

• Zero Selling: We never sell, lease, monetize, or broker your voice audio or biometric embeddings.
• Zero Public Model Training: Your voice calibrations and practice takes are strictly private and never used to train public foundational AI models.
• 100% Customer IP Ownership: You retain complete, perpetual intellectual property ownership of your voice and all practice audio takes.
• 1-Click Cryptographic Purge: You maintain the unconditional right to instantly erase your voice model, audio recordings, and account history.

2. Biometric Information Privacy Act (BIPA) & GDPR Article 9 Governance

Under the Illinois Biometric Information Privacy Act (740 ILCS 14/1 et seq.), the EU General Data Protection Regulation (GDPR Article 9), and the California Consumer Privacy Act (CCPA/CPRA), voiceprints constitute biometric identifiers.

Retention & Automatic Destruction Policy: Biometric embeddings are retained only for as long as your account remains active. If your account is deleted or inactive for 365 continuous days, all biometric identifiers are permanently and irreversibly purged from our database and encrypted storage volumes.

3. Categories of Information Collected

• Account Identifiers: Name, business email address, hashed authentication credentials, and subscription status.
• Speech & Script Content: Presentation scripts, speech notes, YouTube talk URLs submitted for transcription, and stress-word metadata.
• Audio Recordings & Syntheses: Voice calibration audio, practice takes, and generated guide tracks.
• Technical Telemetry: Anonymized browser version, device acoustic capabilities, latency diagnostics, and error reporting.

4. Security Infrastructure & Encryption Standards

VOICHE implements robust security controls to ensure customer audio and account data remain private and secure:

• In-Transit Security: All client-to-server and inter-service communications enforce HTTPS and TLS 1.3 encryption.
• At-Rest Encryption: All audio storage buckets and database records are encrypted using standard AES-256 cloud encryption.
• Isolated Multi-Tenancy: Strict tenant sandboxing ensures your audio models and takes can never be accessed by other users.
• Access Governance: VOICHE employees cannot access raw private audio takes without explicit, time-bounded user authorization for support troubleshooting.

5. Authorized Infrastructure Subprocessors

We work with a limited number of infrastructure and processing providers, each bound by a Data Protection Agreement (DPA) and used only for the specific purpose below:

A full list naming each provider is available on request — email contact@voiche.com.

6. Your Global Privacy Rights

Regardless of your jurisdiction, VOICHE provides equal rights to all users globally:

• Right to Access & Portability: Export all your saved recordings and scripts as standard audio and text files.
• Right to Erasure (Article 17 GDPR): Delete your voice models and recordings instantly via the studio settings, which also deactivates your account. Email contact@voiche.com to have your remaining account records fully erased. See Voice Data Deletion for details.
• Right to Restrict Processing: Withdraw consent for voice synthesis at any time without penalty.

7. Contact Legal & Data Protection Officer

For compliance inquiries, investor due diligence packets, or biometric erasure requests, contact:

VOICHE Inc. — Legal & Privacy Operations
Email: contact@voiche.com / hello@voiche.com