The data controller for personal data processed through Vaivox is the operator of vaivox.com, based in Italy. For any privacy-related requests, contact support@vaivox.com.
This policy complies with the EU General Data Protection Regulation (GDPR) and Italian privacy law.
We collect the following categories of personal data:
Your data is used for the following purposes:
We process your data based on: contract performance (to provide the service), legitimate interest (security, fraud prevention), and legal obligation (compliance with Italian and EU law).
Where consent is required (e.g. marketing emails), we will ask for it explicitly.
We retain your account data for as long as your account is active. Translation history and generated audio files are retained for up to 90 days after processing.
Upon account deletion, your personal data will be removed within 30 days, except where retention is required by law.
As an EU resident, you have the following rights:
To exercise these rights, email support@vaivox.com.
We use the following third-party processors: Supabase (database and authentication), OpenAI (transcription and translation), Cloudflare R2 (audio file storage), Railway (hosting infrastructure).
These providers are bound by their own privacy policies and data processing agreements.
Some of our third-party providers may process data outside the EU. Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs).