Privacy Policy

This policy explains what Voice Cleanup (“we”) collects, how we use it, and the choices you have. Plain language; no surprises.

What we collect

• Uploaded and cleaned audio files. Stored encrypted in Cloudflare R2. Auto-deleted 24 hours after processing.
• Account info. Your email address (for sign-in via magic link) and Stripe customer ID (for billing).
• Usage metrics. File count, processed duration, timestamps. Used to enforce plan limits and improve the service.
• Anti-abuse signals. Anonymized device and network signals (a cryptographic hash derived from your browser characteristics and network metadata). Used only to enforce free-preview limits and detect automated abuse. Not used for advertising or sold to anyone.
• Product analytics events. Page views and product events (like completing a cleanup), collected in cookieless mode — no analytics cookies, no session recordings, and no cross-session identity for anonymous visitors.
• Server/request logs. IP address and user agent, kept by our hosting providers for security, abuse prevention, and debugging.

Who we share with

• Stripe— payment processing. Card details go directly to Stripe; we never see them.
• Supabase— hosts our database and authentication (magic-link sign-in), including account records, usage data, and anti-abuse hashes.
• PostHog— product analytics, running in cookieless mode. Receives usage events; no ad tracking, no session recordings.
• Replicate— runs the noise-removal model on the audio you upload. Replicate receives a short-lived URL to fetch the file, processes it, and returns the cleaned output. Replicate’s own retention policy applies to that intermediate copy (typically deleted within hours).
• Vercel— hosts the application. Sees request logs (IP address, user agent).
• Cloudflare Workers— the edge front-door for uploads, job status, and audio serving. Sees request logs and audio bytes in transit.
• Cloudflare R2— object storage for your uploaded and cleaned audio (encrypted, deleted within 24 hours).
• Resend— delivers our sign-in emails (sent from [email protected]). Sees your email address and the sign-in message.

We do not sell your data, share it with advertisers, or use it to train any AI model.

Retention

• Uploaded + cleaned audio: 24 hours, then permanently deleted by an automated cleanup job.
• Account + billing records: retained while your account is active and up to 7 years after closure for tax and accounting purposes.
• Usage metrics + anti-abuse signals: retained while your account is active / while used for free-tier enforcement.
• Analytics events: retained per our PostHog project settings.
• Server logs:up to 30 days, per our hosting providers’ retention.

Your rights

You can request a copy of your data, ask us to delete your account, or correct any information by emailing [email protected]. If you’re in the EU/UK or California, the GDPR / CCPA give you specific rights to access, port, and erase your data; the same email reaches us. We respond within 30 days.

Cookies

We set the minimum cookies needed to run the Service: an HTTP-only session cookie to keep you signed in, and an anonymous session cookie for the free-preview gate. Our analytics run in cookieless mode — no analytics cookies, no advertising or tracking cookies, no third-party tracking pixels, and no session recordings.

Children

Voice Cleanup is not directed at children under 13 and we do not knowingly collect their data.

Changes

If we materially change this policy, we’ll update the effective date above and email subscribers in advance.

Contact

Questions: [email protected].