Privacy Policy

In short

• VoxKeep transcribes your voice messages using a speech-recognition model that we run ourselves, on our own servers. The audio file, kept in memory (RAM) during transcription, is deleted as soon as the transcript has been delivered to you.
• The transcript is not kept on our servers: we deliver it to you, and you keep it.
• We sell no data, show no ads, and use no advertising trackers or audience analytics.
• VoxKeep is for people aged 18 and over.

Who we are

The controller is PALEION LABS S.A R.L.-S, L-2153 Luxembourg (RCS Luxembourg B313571). For any question about your data: [email protected].

What we process, why, and for how long

1. Transcribing your voice messages (Telegram bot)

• Data: your Telegram chat identifier, the language of your Telegram app, the voice message you send us, and its transcript.
• Purpose: delivering the transcript to you in the chat, as a message or an attached file.
• Legal basis: performance of the service you request (contract).
• Where: transcription runs on our own servers, in Luxembourg, using a speech-recognition model that we run ourselves. Your voice and your text are not sent to any outside transcription or artificial-intelligence service. During processing, the audio file is kept in memory (RAM); if the server's memory overflows, its content may be written to an encrypted swap space. The copy that the Telegram relay drops on arrival is on an encrypted disk, and we delete it as soon as we have copied it; if something goes wrong, a daily cleanup removes it. Our backups exclude the folders the audio passes through; they contain the technical information of our database.
• Recipients: Telegram, which carries the messages between you and us. Cloudflare only passes us the notification that a message has arrived, not the sound.
• Retention: the audio file is deleted once the transcript is delivered; if something goes wrong, an automatic daily cleanup removes it. The transcript is not stored: once delivered, it only exists on your side, in Telegram. Telegram keeps its own copy of your voice message and of the transcript in your chat, as it does for any message; you can delete them yourself in Telegram. We keep technical data about each message (size, duration, status, date, seconds transcribed, detected language), without the sound or the text, for as long as your account exists, along with a digital fingerprint (sha256) of the deleted file, which does not allow it to be reconstructed.

2. Your account

• Data: your email address and password (stored hashed, never in plain text) if you create an account; your Telegram identifier if you use the bot; your plan and usage (seconds transcribed); your preferences.
• Purpose: identifying you, applying your plan, linking your account to Telegram.
• Legal basis: contract.
• Recipients: Brevo (European Union), which sends our emails, including the link to verify your address.
• Retention: as long as your account exists.

3. Payment

• Data: your plan, the email address entered at checkout, the customer and subscription identifiers assigned by Stripe. We never see your card number.
• Purpose: charging and managing your subscription.
• Legal basis: contract; accounting obligations.
• Recipient: Stripe, our payment provider.
• Retention: during the subscription, then the legal retention period for accounting records (10 years in Luxembourg).

4. Security and technical logs

• Data: IP address, date, endpoint called and result of requests made to our server.
• Purpose: protecting the service against abuse and diagnosing errors.
• Legal basis: our legitimate interest in securing the service.
• Retention: 6 months at most.

5. This website

• Waitlist: your email address and language, to tell you about the launch, until launch or until you ask us to delete them.
• Emails to contact@: your email address and your message, to reply to you; deleted one year after the exchange ends.
• Hosting: Cloudflare Pages.

What we do not collect

• No audience analytics, no advertising pixels, no browser fingerprinting.
• No selling or sharing of data for commercial purposes.
• No training of artificial-intelligence models on your messages.
• No address book, no location.

Cookies

We only use strictly necessary cookies: a session cookie when you are signed in and a cookie that protects forms. No analytics or advertising cookies.

Transfers outside the European Union

Telegram, Cloudflare and Stripe may process data outside the European Union. These transfers rely on the EU–US Data Privacy Framework where the provider is certified, or on the European Commission's standard contractual clauses.

Your rights

You can access your data, have it corrected or erased, get a copy of it, object to processing based on our legitimate interest, or ask for it to be restricted. Write to [email protected]; we reply within one month.

You can also lodge a complaint with the Luxembourg data protection authority (CNPD) — cnpd.public.lu.

Minimum age

VoxKeep is for people aged 18 and over.

Changes

If this policy changes in a significant way, we will tell you in the bot or by email before the change takes effect.