Privacy Policy

Introduction

At Aqua Voice, we are deeply committed to safeguarding your personal data. This Privacy Policy outlines our practices regarding the collection, use, disclosure, and protection of your personal information when you access or use Aqua Voice's website, desktop applications, mobile applications, and related services (collectively, the "Services"). By using our Services, you acknowledge that you have read and understood this Privacy Policy.

Information We Collect

We collect personal data to provide Services. This information includes:

• Account Information: When registering for Aqua Voice, you provide personal details such as your name, email address, billing address, and payment information. We use this information to manage your account, process payments, and provide customer support.

• Transcript Data: Aqua Voice provides transcription services that process audio inputs. For users with Privacy Mode disabled, we may securely store transcript data on our servers to the extent necessary to improve the product. Otherwise, transcript data is not collected; however, session metadata including timestamps, device type, and performance metrics may still be collected.

• Technical Information: We collect technical data such as IP addresses, browser type and version, operating systems, and performance metrics. This information assists us in improving functionality, security, and overall user experience.

• Advertising and Attribution Information: We collect information about how you found Aqua Voice so that we can measure our advertising. On the web, this includes a first-party identifier stored in the aqua_aid cookie and advertising click identifiers passed to our site by advertising platforms (such as gclid, fbclid, and similar parameters). In our mobile apps, this includes app-install attribution provided by Apple, by our attribution provider, and by Google Play, described in "Advertising and Measurement" below.

How We Use Your Information

We utilize the personal data we collect for purposes including but not limited to:

• Delivering and maintaining our Services;

• Communicating with you regarding your account, service updates, security alerts, or customer service inquiries;

• Measuring and improving our advertising and marketing;

• Preventing, detecting, and addressing security incidents, fraud, or other unauthorized or illegal activities;

• Complying with applicable laws, regulatory obligations, and enforcing our terms and policies.

Advertising and Measurement

We advertise Aqua Voice, and we measure whether that advertising works.

• Web attribution. When you arrive from an advertisement, we record the advertising click identifier in the URL and set a first-party identifier (the aqua_aid cookie) so we can connect that visit to a later signup. For visitors in the European Economic Area and the United Kingdom, we do not do this automatically when the page loads. It happens in your browser only after you accept advertising cookies.

• iPhone app install attribution. Our iPhone app uses Apple's AdServices framework to learn which Apple Search Ads campaign, ad group, or keyword led to an install. It also uses Branch to measure installs from our other campaigns. We configure Branch's reduced attribution mode without Apple's Advertising Identifier (IDFA), and AdServices does not use IDFA. These features do not display an App Tracking Transparency prompt.

• Android app install attribution. Our Android app reads the Google Play install referrer, which carries the campaign details and any ad click identifier from the link that led to the install. The app records the first open with those details in our product analytics. When you sign in, it sends available install evidence to our servers so we can connect the install to your account.

• Branch on Android. The Android app also uses Branch for install and advertising measurement. Unlike our iPhone configuration, Android uses Branch's full attribution mode. When available, this can send the Android Advertising ID to Branch along with install, app-open, install-referrer, device and network information. Branch can use this information to match an install to an advertising interaction and share measurement with connected advertising partners.

• Mobile region settings. Before starting Branch on either mobile platform or requesting AdServices attribution on iPhone, the app checks the device's region setting. It skips that step if the setting is in the European Economic Area, the United Kingdom or the covered European territories, or if the setting is unavailable. The device setting can differ from your current location, and this check is not a record of your consent. Google Play install-referrer collection is separate from this check.

• Conversion measurement. Subject to recorded advertising permissions, we share measurement data with advertising partners so they can report campaign results. This can include campaign and click identifiers, cryptographically hashed contact details, IP address and browser information, and an event such as a signup or purchase and its value. Our advertising partners can include Google, Meta, Reddit, X, LinkedIn, OpenAI and Apple. Server conversion data can pass through Stape, our server-side tag management provider. Referral measurement also uses Dub, which can receive a referral click identifier, an account identifier, and purchase identifiers, amount and currency.

• What we do not do. We do not sell your personal information, and we never share your transcripts or your audio with an advertising platform.

How We Share Your Information

We share your personal data only under clearly defined conditions:

• Service Providers: We engage third-party service providers to support essential business operations, including hosting services, payment processing, customer support, data analytics, and advertising measurement. These providers process your information solely in accordance with our instructions and maintain strict confidentiality.

• Advertising Partners: As described in "Advertising and Measurement," we share limited measurement data with the advertising platforms we buy from.

• Legal Compliance and Protection: We may disclose your personal data if legally required or if we believe that such disclosure is necessary to protect the rights, property, or safety of Aqua Voice, our users, or others; respond to lawful requests from public authorities; or comply with judicial proceedings or legal processes.

• Consent-Based Sharing: Beyond the scenarios described, we will only share your information with third parties if we obtain your explicit consent.

How Long We Keep Information

We keep personal data for as long as your account is active, and afterwards only as long as we need it.

• Advertising and attribution data: the aqua_aid cookie lasts up to 395 days, about 13 months. Our server retention process removes Apple Search Ads lookup records after 395 days from when we record them, and removes the device identifier and Apple's raw response from those records after 30 days. These periods apply to the lookup records. Campaign summaries linked to your account or retained conversion records can remain for the purposes described in this policy. Other install attribution, including Google Play and Branch evidence, is kept with account attribution records.

• Account and billing records: retained for as long as your account exists and afterwards where we are required to keep them, for example for tax and accounting purposes.

• Transcript data: governed by your Privacy Mode setting.

When we complete an account deletion request, we remove account-linked attribution records and clear contact details and advertising identifiers from retained conversion records. We can retain conversion and billing records, including payment-provider transaction identifiers, to preserve financial history and prevent duplicate processing. Data already received by measurement partners is subject to their retention policies and applicable deletion requirements.

SOC 2 Audit Report

Aqua Voice has received a SOC 2 Type II audit report from the independent auditor Advantage Partners. You can read our announcement here. And you can go to our Trust Center on Vanta here.

Data Security

Aqua Voice implements robust administrative, technical, and physical safeguards designed to protect your personal information from unauthorized access, disclosure, alteration, and destruction.

Your Rights and Choices

You maintain certain rights concerning your personal data, including the ability to:

• Access, update, correct, or request deletion of your personal information;

• Opt-out of receiving promotional communications;

• Ask us not to use your information for advertising measurement, by contacting us at the address below.

To exercise these rights, please contact us using the details provided below.

Children's Privacy

Our Services are not intended for use by individuals under the age of 13. We do not knowingly collect personal information from children under 13 years old. If we become aware of collecting such data, we will promptly delete it from our systems.

Changes to This Privacy Policy

We reserve the right to periodically update this Privacy Policy. Any revisions will be posted prominently, with the updated effective date clearly indicated. We encourage you to regularly review this policy to stay informed about our privacy practices.

Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact us via email at support@aquavoice.com.