PhazeVox

privacy

Privacy policy.

Last updated: May 18, 2026

Draft for review. This document is a starter draft based on common patterns for SaaS subscription products. Have it reviewed by a qualified attorney before relying on it for any regulated jurisdiction.

TL;DR Audio is processed locally on your machine — we never receive, store, or transmit a single sample. The information we do store (account email, subscription status, voice catalog selections) is described in full below.

1. What this policy covers

This Privacy Policy describes how PhazeVox (“we,” “us,” “our”) collects, uses, and shares information when you use the PhazeVox desktop application and the website at phazevox.com (collectively, the “Service”).

2. Information we collect

2.1 Account information

When you create an account we collect the email address you provide, a hashed copy of your password (we never see your plaintext password), and a unique account identifier. Account information is stored by our authentication provider, Supabase.

2.2 Subscription and billing information

Subscriptions are processed by PayPal. We do not see or store your credit-card number, bank account, or full billing address. We do receive and store: your PayPal subscription identifier, subscription status (active, cancelled, etc.), plan tier (monthly or annual), and the email address you used at PayPal checkout (so we can link the subscription to your PhazeVox account).

2.3 Voice catalog selections

We log which premium voices your account has downloaded so we can serve the correct files, enforce the licensing terms, and help diagnose download failures. We do not log how often you use a given voice or what you say with it.

2.4 Audio you process with PhazeVox

The PhazeVox desktop application processes audio entirely on your local computer. Your microphone audio, the transformed output, and any intermediate state never leave your device. We do not collect, transmit, store, or analyze your voice, your conversations, or the contents of what you say.

2.5 Basic technical logs

When the desktop app contacts our servers (to verify your subscription, fetch the premium voice catalog, or download a voice file), our servers receive standard request metadata: your IP address, the timestamp, the endpoint called, and an opaque session token. We retain these logs for up to 30 days for security and abuse-prevention purposes, then discard them.

3. How we use the information

  • To authenticate you and provide access to your subscription.
  • To process and renew subscriptions through PayPal.
  • To deliver the premium voices your subscription includes.
  • To respond to support requests you send us.
  • To detect, prevent, and respond to security incidents and abuse.
  • To comply with applicable legal obligations.

4. Sharing with third parties

We share information only with the small number of service providers required to run PhazeVox:

  • Supabase — account storage and authentication.
  • PayPal — subscription billing.
  • Cloudflare — hosting (Workers, R2, Pages) and DNS.

We do not sell, rent, or trade your personal information. We may disclose information when required to do so by law, court order, or other valid legal process.

5. How long we keep information

  • Account information: for as long as your account is active. You can request deletion at any time (see Section 7).
  • Subscription records: kept for the duration of your subscription plus 7 years afterwards, for tax and accounting purposes.
  • Server request logs: 30 days, then deleted.

6. Security

We use industry-standard measures to protect the information we hold, including encryption in transit (TLS) for all network traffic between the desktop app, our servers, and PayPal. Passwords are hashed using bcrypt (managed by Supabase). No system is perfectly secure; if we become aware of a breach affecting your information we will notify you in accordance with applicable law.

7. Your rights

You have the right to:

  • Request a copy of the personal information we hold about you.
  • Request that we correct inaccurate information.
  • Request that we delete your account and associated information.
  • Cancel your subscription at any time.
  • Withdraw consent (where we rely on consent) for processing.

To exercise any of these rights, email support@phazevox.com. We will respond within 30 days.

8. Children

PhazeVox is not directed to children under 13 (or under 16 in the EEA). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can remove it.

9. International users

The Service is operated from the United States. If you use PhazeVox from outside the United States, your information may be transferred to, stored, and processed in the United States and in any country where our service providers operate infrastructure.

10. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we'll update the “Last updated” date at the top of the document. Material changes will be announced in-app or by email.

11. Contact us

Questions about this policy or your information? Email support@phazevox.com.