Privacy policy.

We collect as little as possible. We delete audio within 24 hours. We never sell anything.

01. Overview

This policy explains what data aivoicedetector.com collects, how we use it, and your rights to access or delete it. We are based in London and operate under UK GDPR, EU GDPR (where applicable), and CCPA (for California residents).

The short version: we collect the minimum needed to run the detector and bill you. Audio is deleted within 24 hours. We never sell your data.

02. What we collect

We collect three categories of information:

• Account information. If you sign up, we collect your email address and a hashed password. Optional fields like display name are exactly that, optional.
• Audio you upload. Audio files you submit to the detector for analysis. Deleted within 24 hours by default.
• Usage logs. Standard server logs: IP address, browser, timestamp, and the API endpoint called. Retained for 30 days for security purposes, then deleted.

03. How audio is handled

This is the part most people care about, so we are explicit:

• Audio you upload is transmitted over HTTPS to our servers in Frankfurt, Germany (AWS eu-central-1).
• The detection model runs on the audio and returns a verdict.
• The audio file is deleted within 24 hours.
• If you save a verdict to your dossier, we keep a one-way audio fingerprint (a 256-bit hash), never the audio itself.
• We never use uploaded audio to train the model unless you explicitly opt in.

04. How we use information

We use the information we collect to:

• Run the detector and return verdicts.
• Bill you if you have a paid plan.
• Send service emails (billing receipts, security alerts).
• Detect and prevent fraud, abuse, and security incidents.
• Improve the detector, only with audio you opt in to share.

We do not use your data for advertising. We do not profile you. We do not run analytics that track individuals across the web.

05. Cookies

We use a small number of strictly necessary cookies to keep you signed in and to remember basic preferences. We do not use third-party advertising or tracking cookies. We use a privacy-respecting analytics tool (Plausible) that aggregates traffic at the page level only, no individual tracking.

06. Sharing

We do not sell your data. We share data only with the small set of subprocessors required to run the service:

• AWS (Amazon Web Services) for hosting and audio processing.
• Stripe for payment processing.
• Plausible Analytics for aggregate traffic metrics.
• Postmark for transactional email.

We share data with law enforcement only when we receive a valid legal order. We publish a transparency report annually.

07. Security

All data in transit is encrypted with TLS 1.3. All data at rest is encrypted with AES-256. Account passwords are hashed with bcrypt. We run security audits annually and patch promptly. We have never had a public data breach.

08. Your rights

Depending on where you live, you have some or all of the following rights:

• Access. Request a copy of your data.
• Correction. Ask us to correct inaccurate data.
• Deletion. Ask us to delete your account and associated data.
• Portability. Receive your data in a machine-readable format.
• Objection. Object to certain types of processing.
• Withdraw consent. Withdraw consent for any opt-in processing.

To exercise any of these rights, email support@aivoicedetector.com. We respond within 30 days, usually within one day.

09. Children

The service is not directed to children under 13. We do not knowingly collect data from anyone under 13. If you believe we have inadvertently collected data from a child, email us and we will delete it.

10. Changes to this policy

We may update this policy to reflect changes to the service or to legal requirements. If we make a material change, we will notify account holders by email at least 14 days before the change takes effect. Prior versions are archived.

11. Contact

For any privacy question or to exercise your rights, email support@aivoicedetector.com. Postal mail to 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom. Our data protection registration number with the UK ICO is available on request.