Privacy Policy

Last updated: November 4, 2026

This Privacy Policy explains how DessaVoice (dessavoiceai.org), operated by an independent developer based in Hong Kong ("we", "us"), handles personal data. Contact: support@dessavoiceai.org.

1. Summary

• We collect only what we need to run your account, live calls and payments.
• We do not store audio recordings of your calls on our servers.
• Text transcripts of hosted live calls exist only while the call is active and are deleted when it ends.
• The free 5-second preview and the hardware checker run in your browser and send nothing to us.
• We do not sell your data, and we do not use advertising or analytics cookies.

2. Data we collect

Account data. When you sign in with Google we receive your name, email address and profile picture, and we create an account ID and login session.

Purchase data. Payments are processed by Creem, our merchant of record. We receive order details (product, amount, status, Creem customer and order IDs) but never your card details.

Credit and usage data. Your credit balance, credit transactions (purchases and call usage, with the billed duration), and the time each call started and ended.

Hosted live calls. While a hosted call is active, your microphone audio is streamed to our server and processed in real time by speech-recognition, language-model and speech-synthesis models run on Cloudflare Workers AI (including Deepgram models hosted by Cloudflare). We do not keep the audio. During the call, the text transcript (your words as recognized and the assistant's replies) is held in storage tied to your account so the assistant can keep context between turns; it is deleted when the call ends.

Call recordings you download. The "Download session audio" file is created in your browser and never uploaded to us.

Email you give us. If you sign up for release alerts, we store your email address, its status (pending, confirmed or unsubscribed) and when it changed. We email you once to confirm; until you confirm we send nothing else. Every alert includes a one-click unsubscribe link. If you write to support, we keep your message to answer it.

Technical data. Our hosting provider processes IP addresses, browser type and request logs to deliver and protect the Service.

3. Processing that happens in your browser

• 5-second mic preview: the waveform and latency reading are computed locally. Live captions use your browser's built-in speech recognition (Web Speech API). In Google Chrome, that feature sends the audio to Google's speech service under Google's privacy policy; we never receive it. If you prefer, use a browser without this feature — the preview still works without captions.
• BYOK mode: your OpenAI API key is sent directly from your browser to OpenAI, and saved only in your browser's local storage if you choose "Remember this key". Your audio in BYOK calls goes directly to OpenAI under OpenAI's terms and privacy policy; we do not receive the audio, the transcript or your key.
• Hardware checker: runs entirely in your browser.

4. How we use data

We use personal data to provide and secure your account, run live calls and meter credits, process purchases, refunds and subscription cancellations, answer support requests, send release alerts you asked for, prevent abuse, and meet legal obligations. We do not use your call transcripts to train AI models.

5. Service providers

We share data only with providers that help us run the Service:

These providers may process data in countries other than your own, including the United States. We rely on their contractual safeguards for such transfers.

6. Cookies and local storage

We use only cookies that are necessary for the Service:

We also use your browser's local storage for the site's display settings and, only if you choose it, your BYOK API key. We do not use advertising or third-party analytics cookies. If that changes, we will update this policy first.

7. Retention

• Account and credit data: until you delete your account.
• Release-alert subscriptions: until you unsubscribe (we keep the address marked as unsubscribed so we never email it again) or ask us to erase it.
• Call transcripts: deleted when each call ends.
• Purchase records: our copy until you delete your account; Creem keeps invoices as long as tax and accounting law requires.
• Server request logs: kept briefly by our hosting provider for security and troubleshooting.

8. Your choices and rights

• Delete your account at any time in Settings. This permanently deletes your account, credits and our copy of your purchase records. Creem, as merchant of record, keeps its own invoice records as tax law requires.
• Get a copy of your data: email support@dessavoiceai.org from your account email.
• Depending on where you live, you may have rights to access, correct, delete, restrict or object to processing of your data, and to complain to your local data-protection authority. Contact us to exercise them; we reply within 30 days.

9. Children

DessaVoice is not directed to children under 13, and we do not knowingly collect their personal data. If you believe a child has given us data, contact us and we will delete it.

10. Security

We use HTTPS everywhere, signed short-lived tokens for live calls, and access controls on our database. No system is perfectly secure; tell us at support@dessavoiceai.org if you find a vulnerability.

11. Changes

We may update this policy. We will post changes here with a new "Last updated" date and show a notice on the site for material changes.

12. Contact

support@dessavoiceai.org