VOXTALE Privacy Policy (Full Draft - Trimmed)
This document is a working legal draft for Product/Legal/DPO review before publication.
Effective date: May 1, 2026
Version: v1.0
Quick Summary
- We process personal data needed to provide VOXTALE services and maintain platform security.
- We may process certain technical data for guest users who have not created an account.
- We do not sell personal data in the ordinary commercial sense.
- You may exercise applicable privacy rights by contacting
support@getvoxtale.com.
1) About This Policy
This Privacy Policy explains how VOXTALE collects, uses, discloses, transfers, and retains personal data in connection with Listener Web, Creator Studio, and related websites/features.
This document should be read together with our Terms and Conditions and Cookie Policy.
Additional controls and resources
Depending on your account and jurisdiction, you may manage certain privacy preferences through account settings, consent settings, and support channels.
2) Your Data Rights
Subject to applicable law (including the Thai PDPA where relevant), you may have rights to:
- access personal data;
- correct inaccurate data;
- request deletion;
- restrict processing;
- object to certain processing;
- withdraw consent; and
- file a complaint with a competent authority.
How to submit requests
Please submit requests to support@getvoxtale.com. We may need to verify your identity before processing requests.
Rights summary
| Right | Typical use case | How to exercise |
|---|---|---|
| Access | Understand what data we process | Contact support |
| Rectification | Correct outdated/inaccurate data | Account settings or support |
| Deletion | Request account/data removal | Support workflow |
| Restriction | Pause processing during dispute | Submit request |
| Objection | Object to certain processing | Submit request with reason |
| Withdraw consent | Revoke prior consent | Settings/support |
| Complaint | Raise regulatory concern | Competent authority |
3) Personal Data We Collect
3.1 Account and profile data
- Email, display name, authentication credentials/SSO identifiers
- Optional phone and profile details
- Country/language settings
3.2 Service usage data
- Listening/reading history, search activity, engagement behavior
- Product and preference settings
3.3 Technical data
- IP address, device/browser identifiers, OS/app version
- Operational logs, crash/performance telemetry
- Cookies and local storage identifiers
3.4 Third-party data
- Identity provider or social login data (if enabled)
- Transaction status data from payment processors
3.5 Support and communication data
- Support tickets, feedback submissions, survey responses
3.6 Guest-user data
For non-registered users, we may process limited technical/usage data needed for core functionality, analytics, and security.
4) Purpose and Legal Basis
We process personal data for:
- Contract performance (account access, feature delivery);
- Legitimate interests (service quality, fraud prevention, product improvement);
- Legal obligations (regulatory, tax, accounting, lawful requests);
- Consent-based processing (where required, e.g., non-essential cookies/marketing).
If processing is based on consent, you may withdraw consent at any time.
| Data category | Primary purpose | Typical legal basis |
|---|---|---|
| Account data | Account operation and authentication | Contract |
| Usage/log data | Service delivery and optimization | Contract / Legitimate interests |
| Security data | Fraud and abuse prevention | Legitimate interests / Legal obligation |
| Payment metadata | Billing and compliance | Contract / Legal obligation |
| Marketing/cookie data | Analytics and marketing activities | Consent |
5) Data Sharing and Disclosure
We may share data, as necessary, with hosting/infrastructure vendors, identity/payment providers, analytics/security providers, professional advisors, and competent authorities.
VOXTALE does not sell personal data in the ordinary commercial sense.
We may disclose data in connection with legal claims, safety incidents, fraud prevention, or corporate transactions (e.g., merger, acquisition, restructuring).
6) Retention
We retain personal data only for as long as necessary to fulfill the purposes described above and satisfy legal obligations. We then delete, anonymize, or retain data in a legally required format.
| Data type | Typical retention approach |
|---|---|
| Account data | During account lifecycle + required post-closure period |
| Usage/system logs | Per operational retention schedules |
| Support records | As needed for support/legal compliance |
| Transaction records | Per tax/accounting requirements |
| Consent records | Until withdrawal/expiry as applicable |
7) Cross-Border Transfers
VOXTALE may process or store data outside your country. Where required, we implement appropriate safeguards (contractual, technical, and organizational).
8) Security
We maintain technical and organizational safeguards, including role-based access controls, encryption in transit, security logging, and incident response procedures.
No system is completely risk-free; we address incidents in accordance with applicable law.
9) Children
VOXTALE is not intended for children below the legal age threshold without required parental/guardian consent.
10) Policy Updates
We may update this policy to reflect legal, technical, or operational changes. The effective date indicates the latest version.
11) Contact
- Privacy/support email:
support@getvoxtale.com - Public URL target:
https://getvoxtale.com/legal/privacy-policy