Privacy at a glance
This summary is limited to behavior observed in the current code. It is not a claim of legal compliance or complete processor inventory.
Your sign-in and account record use WorkOS and D1. Content you choose to save—conversation messages, memories, and genealogy—lives in your account-named Durable Object. Uploaded files can live in R2, and genealogy search can create Vectorize embeddings. The account-memory page inventories selected Durable Object tables; it is not a complete export.
We use this data to run the service, answer your requests, process billing, secure and debug the product, and measure product use. AI providers receive the conversation or media needed for a request. Analytics and monitoring services can receive identifiers, events, and error context. Our website uses PostHog analytics, which sets a cookie to count visits and sessions.
Subscriber-agent routes compare the requested Durable Object name with the signed-in subscriber and reject other-account targets. Authorized operators and the service providers named in the draft policy may process scoped data needed for support or operation. This page does not prove what a provider has retained.
Delete your account on your account page (voice-catalyst.com/account, or Settings → Manage or delete your account in the iPhone app). It cancels any subscription, deletes your account record and sign-in, and disconnects your devices. Your takes and vocabulary were never on our servers; they stay on your devices and in your own iCloud. Stripe keeps billing records the law requires. Two things stay, and neither names you: our tamper-evident audit log keeps its entries (they refer to an account number, not an email), and a deletion record keeps only when the deletion was asked for and when it finished. Questions: hello@voice-catalyst.com.