Privacy Policy

Effective 25/10/2025 — Last updated: October 25, 2025

ARTICLE 1 – INTRODUCTION

This Privacy Policy informs users of the VoxBoo service (hereinafter the "Service") about how their personal data is collected, used, and protected.

The data controller is Daniel LASKA SCHIRALLI EI, with registered office at 60 Rue François 1er, 75008 Paris, France. Contact: contact@voxboo.com.

By using the Service, the User accepts the practices described in this policy.

ARTICLE 2 – DATA COLLECTED

We collect the following categories of data:

Account data: email address, password (hashed), account creation date.

Subscription data: plan type (monthly/annual), subscription status. Payment is managed by Apple via the App Store.

Usage data: voice recordings are processed in real time by the Voxtral API (Mistral AI) and are NOT stored by VoxBoo. Transcribed and transformed texts remain on the User's device.

Technical data: operating system type, application version, diagnostic information in case of errors.

ARTICLE 3 – PURPOSE OF PROCESSING

The collected data is used to: manage the user account and authentication, manage the subscription (payment is handled by Apple via the App Store), ensure the technical operation of the Service, communicate with the User (support, important updates), improve the Service.

We do not sell or share your personal data for advertising purposes.

ARTICLE 4 – THIRD-PARTY PROCESSORS

To operate the Service, we use the following third-party processors:

Supabase (authentication and database) — hosted in the EU.

Apple (payment via App Store).

Mistral AI / OpenAI (AI transcription and transformation) — voice data is processed in real time and is not retained.

Resend (transactional emails).

IONOS (website hosting).

ARTICLE 5 – DATA RETENTION

Account data: retained as long as the account is active, then deleted within 30 days after account deletion.

Subscription data: retained in accordance with legal accounting obligations (10 years for invoices).

Voice recordings: not stored. Processed in real time only.

Contact form data: retained for a maximum of 3 years.

ARTICLE 6 – SECURITY

We implement appropriate technical and organizational measures to protect your data: password encryption (bcrypt), encrypted communications (HTTPS/TLS), secure storage of API keys in macOS Keychain, restricted access to production data.

ARTICLE 7 – USER RIGHTS

In accordance with the General Data Protection Regulation (GDPR), you have the following rights:

Right of access: obtain a copy of your personal data.

Right to rectification: correct inaccurate data.

Right to erasure: request the deletion of your data.

Right to data portability: receive your data in a structured format.

Right to object: object to the processing of your data.

Right to restriction: request the limitation of processing.

To exercise these rights, contact us at contact@voxboo.com. We will respond within 30 days.

You may also file a complaint with your local data protection authority (in France: CNIL).

ARTICLE 8 – COOKIES

The voxboo.com website only uses strictly necessary technical cookies for the operation of the Service (authentication, language preferences).

No advertising or tracking cookies are used.

ARTICLE 9 – INTERNATIONAL TRANSFERS

Some of our processors (Apple, OpenAI) may process data outside the European Union. In such cases, appropriate safeguards are in place (standard contractual clauses, adequate certification).

ARTICLE 10 – MODIFICATIONS

We reserve the right to modify this Privacy Policy. In case of substantial changes, Users will be notified by email or in-app notification.

The last update date is indicated at the top of this page.

ARTICLE 11 – CONTACT

For any questions regarding the protection of your personal data, you may contact us: by email at contact@voxboo.com, via the contact form on voxboo.com, by mail to Daniel LASKA SCHIRALLI EI, 60 Rue François 1er, 75008 Paris, France.