ADDAVOX

1. Information We Collect

We may collect the following types of information:

• Account Information: Name, email address, and authentication identifiers (including credentials managed through our identity provider).
• Uploaded Content: Videos, audio tracks, transcripts, subtitles, and associated metadata you submit for localization, review, or export.
• Recorded Voice Takes: Audio you record within the Service to replace or regenerate localized speech, when you choose that feature.
• Billing Information: Subscription plan, usage minutes, credit balance, and payment-related records. Payment card details are collected and processed by Stripe; we do not store full card numbers on our servers.
• API and Integration Data: API keys (stored in hashed form), webhook callback URLs you provide, and job status data associated with programmatic use of the Service.
• Reviewer Information: Name and email address for individuals you invite to review localized content via magic-link access.
• Chat and Edit History: Messages you send to the in-app AI review assistant and related edit metadata stored with your projects.
• Consent and Audit Records: Localization mode selections, content-rights and speaker-consent attestations, timestamps, and IP addresses recorded when you start localization jobs.
• Usage and Technical Data: IP address, browser type, device information, session identifiers, and a device fingerprint used to help secure authenticated sessions.
• Cookies and Browser Storage: Strictly necessary cookies and limited first-party browser storage used to operate the Service. See Section 6 for details.

2. How We Use Your Information

We use your information to provide, operate, and improve the Service:

• Localization: Transcribing, translating, synthesizing, and voice-matching audio and video content in target languages, including subtitle generation (SRT and VTT) and export deliverables.
• Review and Collaboration: Enabling project owners and invited reviewers to edit translations, adjust timing, preview audio, and complete review workflows.
• AI-Assisted Editing: Powering the in-app review assistant that can suggest or apply edits to segment text, timing, and related project data at your direction.
• API and Webhooks: Processing programmatic localization requests and delivering job status updates to callback URLs you configure.
• Billing and Account Management: Managing subscriptions, included usage, overage charges, credit purchases, invoices, and account standing (including payment failure notices).
• Communications: Sending transactional emails (for example, account confirmation, subscription and billing notices, usage alerts, and reviewer invitations).
• Security and Compliance: Authenticating users, preventing abuse, maintaining consent audit trails, and responding to rights inquiries.
• Service Improvement: Diagnosing errors, monitoring performance, and improving reliability and quality of the platform.

Note: We do not use your content to train general-purpose AI models. Your uploaded content and voice data are processed solely to deliver the localization and review features you request.

3. AI-Specific Data Practices

• Transcriptions and translations are generated using machine-learning and large-language-model services operated by Addavox and its subprocessors.
• Voice-Matched Localization processes speaker voice characteristics ephemerally in memory to adjust synthesized output. We do not create, store, or retain persistent voice models, voiceprints, or biometric templates. See our EULA for full details.
• Standard Localization uses pre-built synthesized voices and does not process identifiable speaker voice characteristics from your source content.
• Transcripts, translations, and segment metadata may be sent to third-party language and speech providers solely to perform the processing steps you request.

4. Third-Party Service Providers

We do not sell your personal information. We share data with trusted service providers that help us operate the Service, subject to contractual confidentiality and data-protection obligations. These include:

• Amazon Web Services (AWS): Cloud hosting, object storage (S3), authentication (Cognito), and transactional email (SES).
• Stripe: Payment processing, subscriptions, and billing portal services.
• Deepgram: Speech-to-text transcription and word-level alignment on audio you submit.
• Google Cloud: Machine translation and text-to-speech synthesis.
• Anthropic: Large-language-model processing for translation refinement, quality evaluation, and the in-app review assistant.

When you invite reviewers, you direct us to share project access with those individuals. When you configure API webhooks, job status data is sent to URLs you specify. You are responsible for the privacy practices of your chosen webhook endpoints.

5. Data Retention

We retain uploaded project content (videos, audio, transcripts, and exports) so you can return to edit, review, and republish work without starting over. Retention periods vary by data type:

• Project content: Retained until you delete the project or request deletion.
• Account information: Retained for the life of your account and as needed to comply with legal obligations.
• Consent and audit logs: Retained to support accountability, abuse investigation, and cooperation with rights holders, as described in our EULA.
• Billing records: Retained as required for accounting, tax, and dispute resolution.

To request deletion of your account or project content, contact . Some records may be retained where required by law or for legitimate business purposes (for example, billing and consent audit trails).

6. Cookies and Browser Storage

Addavox uses strictly necessary cookies and first-party browser storage only. We do not use analytics, advertising, retargeting, or cross-site tracking cookies on the Service. Because we do not place non-essential cookies, we do not show a cookie consent banner. If we introduce non-essential cookies in the future, we will update this policy and request your consent before those technologies are enabled.

6.1 Cookies We Set

• session (HttpOnly cookie) — keeps you signed in to your account. Duration: up to 30 days, or until you log out. Purpose: authentication (strictly necessary).
• oauth_state (HttpOnly cookie) — used only during Google sign-in to prevent cross-site request forgery. Duration: deleted when sign-in completes. Purpose: security (strictly necessary).

6.2 Browser Storage We Use

We also use first-party sessionStorage and localStorage on your device for the same essential purposes:

• Authentication flows — temporary values during Google sign-in (for example, PKCE verifier and state token), removed when sign-in completes.
• Session security — a device-specific salt used with browser cryptography to help protect authenticated requests.
• Service continuity — resuming interrupted uploads, preserving in-progress project drafts (for example, after a billing redirect), and saving review progress within a project.
• Your preferences — language picker shortcuts, optional microphone device selection for recorded voice takes, and reviewer notification state within your browser.

6.3 Third-Party Payment Pages

When you purchase a subscription or credits, you are redirected to Stripe’s hosted checkout page. Stripe may set its own cookies on stripe.com under Stripe’s privacy policy. Addavox does not control those cookies.

6.4 Managing Cookies and Storage

You can clear cookies and site data through your browser settings at any time. Doing so will sign you out and may remove saved drafts, upload-resume pointers, and in-browser preferences. Because our cookies are strictly necessary to provide the Service, disabling them will prevent you from staying signed in or using authenticated features.

7. Data Protection and Security

We implement industry-standard safeguards, including:

• Encryption of data in transit (TLS) and at rest in cloud storage.
• Access controls limiting employee access to personal data on a need-to-know basis.
• Hashed storage of API keys and secure session management.
• We do not sell personal data for marketing purposes.

8. Your Rights

Depending on your location, you may have the right to request access to, correction of, deletion of, or a copy of your personal data, and to opt out of certain processing. California residents may have additional rights under the CCPA/CPRA, including the right to know what personal information we collect and how we use it, and the right to request deletion (subject to exceptions).

You may request:

• Access and Portability — a copy of personal data we hold about you.
• Correction — updates to inaccurate or incomplete account information.
• Deletion — removal of your account or project content, where legally permissible.
• Opt-Out — of marketing communications where applicable. (The Service does not use non-essential cookies; see Section 6.)

To exercise these rights, contact . Invited reviewers may contact us directly regarding their name and email stored for review invitations.

9. International Data Transfers

Addavox is based in the United States. If you access the Service from outside the U.S., your data may be transferred to, stored in, and processed in the United States and other countries where our service providers operate. We take steps designed to ensure appropriate safeguards for such transfers consistent with applicable law.

10. Updates to This Policy

We may update this policy to reflect legal, technical, or service changes. Updates are posted on this page with a revised effective and last-updated date. Material changes may also be communicated via email or through the Service. Your continued use after the effective date constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or how we handle your data, contact us: