Privacy Policy
Effective: October 31, 2026
This policy explains how Vocalistic LLC, of New York, USA ("Vocalistic", "we"), handles personal data when you use vocalistic.ai, our dashboard and our API.
Who is responsible for the data
- Accounts, billing and our website: we decide how this data is used.
- Content our customers send through the API: we process it on the customer's instructions. If you speak to an app built on Vocalistic, that company is responsible for your data, so contact them first.
What we collect
| Data | Examples | Why |
|---|---|---|
| Account | Name, email, password (stored only as a hash), organization, role | To run your account and keep it secure |
| Google sign-in | Google account ID, name, email | To sign you in, if you choose Google |
| Billing | Credit purchases, balance, Stripe customer reference | To sell credits and keep financial records. Stripe handles card details, and we don't store them |
| Usage | Request time, endpoint, status, duration, credits, language, API key used | To bill accurately, show you your usage, and run and secure the service |
| API content | Audio, text, transcripts, translations | To provide the feature you requested |
| Website demo | What you type or say to the demo, your IP address | To answer you, and to limit abuse |
| Technical | IP address, browser details, pages visited, error logs | To secure, measure and troubleshoot the service |
How API content is handled
- Not stored by default. Unless an organization chooses to keep it, we process API content to return the result and don't store it in request logs.
- Optional storage. An organization can choose to keep content for 1, 7, 30 or 90 days for debugging. People in that organization with log access can read it. We delete it within a day of the period ending.
- Transcript refinement. To improve accuracy, transcripts are sent to a language model provider. This is on by default, and an organization can turn it off in its settings.
Who we share data with
We don't sell personal data. We share it with service providers as needed to run the service, and when the law requires it. Our main providers are listed below.
| Provider | Purpose | Location |
|---|---|---|
| Google Cloud | Hosting, file storage, Google sign-in | United States |
| Neon | Database | United States |
| RunPod | Speech and translation processing | Multiple countries |
| Stripe | Payments | United States |
| Resend | Account and billing email | United States |
| Cloudflare | Website hosting, security, domain services, analytics | Global |
We may also use other third-party tools to enhance your experience, such as language model providers that improve transcript accuracy and power the website demo.
International transfers
We're based in the United States, and our providers process data in the countries above and in other countries.
How long we keep data
| Data | How long |
|---|---|
| API content | Not stored by default. Organizations choose how long to keep it, up to 90 days |
| Request log details | 90 days |
| Account data | While the account is open, and afterwards as long as we need it for the purposes above or the law requires |
| Billing and usage records | As long as tax and accounting law requires |
| Website demo content | Not stored by default. IP-based limits are short-lived |
Cookies
We use a cookie to keep you signed in, including during Google sign-in, and one that remembers whether your dashboard sidebar is open. We don't use advertising cookies. Stripe sets its own cookies on its payment pages.
Security
Data travels over encrypted connections, passwords are hashed, and access is limited by role. No system is perfectly secure, so we'll notify you and the relevant authorities of a breach where the law requires it.
Your rights
Depending on where you live, including under Nigeria's Data Protection Act and the GDPR, you may have the right to access, correct, delete or move your data, to object to or limit how we use it, and to withdraw consent. Email hello@vocalistic.ai to make a request. You may also complain to your data protection authority, such as the Nigeria Data Protection Commission.
Legal bases
Where the law requires a legal basis, we rely on our contract with you, our legitimate interest in running and securing the service, our legal obligations, and your consent where we ask for it.
Sensitive data
Customers must have the right to send us the content they send, including any sensitive data. Don't send US protected health information unless we've signed a business associate agreement with you.
Changes
We'll post changes here and update the date above. For significant changes, we'll also email account owners.
Contact
Vocalistic LLC, New York, USA. hello@vocalistic.ai