Privacy Policy

1. Data Controller

The data controller for your personal data is VOCAP, with contact email: hola@vocap.io

2. Data We Collect

We collect the following information:

• Account data: Email and name (if you give one). Sign-up and sign-in are handled by Clerk, our authentication provider: your credentials (for example, your password if you use one) are stored by Clerk, not by VOCAP.
• Sign-up origin: When you first visit VOCAP, the site keeps in your browser (vocap_ft) where you came from: the first page you landed on, the domain of the referring site, the utm_source, utm_medium and utm_campaign parameters of the link, the date and time of that first visit and the page language. If you sign up, this is saved to your account and Clerk also receives it. We use it to know which channels bring sign-ups.
• Usage data: Transcription history, dates and durations
• Payment data: Processed securely by Stripe (we don't store card details)
• Technical data: IP address, browser type, and server and error logs, for security
• Contact form: If you write to us through the contact form, your name, email, subject, message and the IP address you send it from reach us by email at hola@vocap.io. We use them to reply to you.

3. Audio Files

Audio files you upload are:

• Only used to transcribe them
• Sent to OpenAI for transcription; the resulting text is sent to Anthropic for the analysis
• Deleted from our servers once processing is done
• Not kept in your account (it keeps the transcript and its analysis)

If you pick an audio file and first need to create your account or pay, it is kept only in your browser (not on our servers) so we can carry on with it when you come back. It is deleted when used or when you log out, and it is no longer used after 2 hours. See the Cookie Policy.

4. Purpose of Processing

We use your data to:

• Provide the audio transcription service
• Manage your account and credits
• Process payments and email you a confirmation of each purchase
• Send service-related communications and reply to your messages
• Know which channels bring sign-ups
• Improve our services

Marketing emails

We send registered users a few emails about VOCAP (in Spanish):

• Activation: up to three emails in the first days after you sign up, if you haven't transcribed or bought anything yet
• Purchase reminder: if you start a payment and don't finish it
• VUELVE10 coupon: a 10% discount when you run out of hours

Each of these emails includes a link to unsubscribe (/baja). If you unsubscribe, we keep a record that you did and when, so we don't write to you again.

5. Data Sharing

We only share your data with the providers that run the service for us:

• Clerk: Sign-up and sign-in (receives your email, your name if you give one and the sign-up origin)
• OpenAI: For audio transcription (Whisper; receives the audio)
• Anthropic: For summary generation (Claude; receives the transcript)
• Stripe: For payment processing
• Google (Google Analytics and Google Tag Manager): Website usage statistics
• Railway: Hosting of the application and the database
• Hostinger: Mail server (SMTP) we send emails with

OpenAI, Anthropic, Stripe, Clerk and Google may process data in the United States.

6. Data Retention

• Audio: Deleted from our servers once processing is done
• Audio kept in your browser (before signing up or paying): Deleted when used or when you log out; no longer used after 2 hours
• Transcriptions: Stored while your account is active
• Account data and sign-up origin: Until you request deletion
• Marketing email unsubscribe record: Until you request deletion of your account
• Payment records: As legally required (invoices)

7. Your Rights

Under GDPR, you have the right to:

• Access your personal data
• Rectify incorrect data
• Delete your data ("right to be forgotten")
• Restrict processing
• Data portability
• Object to processing (to stop marketing emails, use the unsubscribe link in any of them)

To exercise these rights, contact us at: hola@vocap.io

8. Security

We implement security measures including:

• Encryption in transit (HTTPS/TLS)
• Sign-in handled by Clerk; our server checks every request with a signed token (JWT) issued by Clerk
• Rate limiting to prevent abuse
• Audio deleted from our servers once processing is done

9. Cookies

We use cookies and browser storage for:

• Authentication (Clerk session)
• Usage analytics (Google Analytics, loaded through Google Tag Manager)
• Sign-up attribution and, when needed, keeping the audio you picked while you sign up or pay

See our Cookie Policy for more details.

10. Changes to This Policy

We may update this policy periodically. Significant changes will be notified via email.

11. Contact

For any privacy-related questions:

• Email: hola@vocap.io