Privacy Policy — VoiceFlow

Operated by Agence Vautier

Last updated: May 2026

VoiceFlow is a Swiss-developed AI-powered voice transcription application operated by Agence Vautier. We are committed to protecting your privacy in accordance with the Swiss Federal Data Protection Act (nFADP) and the EU General Data Protection Regulation (GDPR).


1. Data Controller

Agence Vautier
Avenue Cardinal Mermillod 36
1227 Carouge, Switzerland
Email: contact@agencevautier.ch
Phone: +41 22 300 08 29


2. Scope of This Policy

This Privacy Policy applies to the VoiceFlow mobile and web application and all related services provided by Agence Vautier.


3. Data We Collect

3.1 Account Data

  • Email address (via secure authentication provider)
  • Unique user identifier

3.2 Voice Data

  • Microphone audio streamed in real time to our secure backend
  • Audio is processed temporarily for speech-to-text conversion
  • Voice data may contain personal information depending on user input and is treated as potentially sensitive data
  • Raw audio is not permanently stored

3.3 Transcription Data

  • Text generated from voice input
  • Stored in your account to provide history and synchronization features

3.4 Technical Data

  • Device and browser information
  • Application usage data
  • Error and performance logs

4. Purpose of Processing

We process personal data strictly for the following purposes:

  • Providing real-time speech-to-text services
  • Storing and synchronizing user transcripts
  • Authenticating users and securing accounts
  • Improving system stability, performance, and user experience

5. Legal Basis for Processing (GDPR)

We process your data under the following legal bases:

  • Contractual necessity (providing core functionality)
  • User consent (e.g., microphone access)
  • Legitimate interests (security, fraud prevention, and service improvement)

6. Audio Processing and AI Services

Audio is processed in real time through secure transmission to our backend and trusted third-party speech recognition providers (e.g. Deepgram or equivalent).

  • Audio is not stored after processing
  • Third-party providers act as data processors under strict Data Processing Agreements (DPA)
  • We do not use voice or transcription data to train machine learning models unless explicitly stated and consented by users

7. Data Storage and Security

All data is stored securely using cloud infrastructure (e.g. Supabase or equivalent) with:

  • Encryption in transit (HTTPS/TLS)
  • Encryption at rest
  • Role-based access control
  • Strict internal access limitations

8. Data Retention

  • Data is retained as long as your account remains active
  • You may request deletion at any time
  • Deleted data is permanently removed within 30 days unless legal obligations require retention

9. Data Sharing

We do not sell or trade personal data.

We only share data with trusted service providers acting as processors:

  • Authentication and database services (e.g. Supabase)
  • Speech-to-text providers
  • Secure cloud hosting providers

All providers are bound by GDPR-compliant agreements.


10. International Data Transfers

Some data may be processed outside Switzerland or the European Economic Area (EEA).
In such cases, we ensure appropriate safeguards, including:

  • Standard Contractual Clauses (SCCs)
  • GDPR-compliant service providers
  • Adequacy decisions where applicable

11. Cookies and Tracking Technologies

We may use cookies and similar technologies to:

  • Maintain authentication sessions
  • Analyze usage and performance (if enabled)
  • Improve user experience

Where required by law, we request your consent before placing non-essential cookies.

You may disable cookies in your browser settings.


12. Your Rights (GDPR & nFADP)

You have the right to:

  • Access your personal data
  • Rectify inaccurate data
  • Request deletion of your data
  • Export your data (data portability)
  • Restrict or object to processing
  • Withdraw consent at any time

Withdrawal of consent does not affect the legality of processing performed before withdrawal.

To exercise your rights: contact@agencevautier.ch


13. Complaints

You have the right to lodge a complaint with:

  • The Swiss Federal Data Protection and Information Commissioner (FDPIC)
  • Or your local EU data protection authority

14. Children’s Privacy

VoiceFlow is not intended for users under the age of 13. We do not knowingly collect personal data from children.


15. Third-Party Services

We use trusted third-party services, including:

  • Authentication and database providers
  • Speech-to-text API providers
  • Cloud infrastructure providers

All third parties are contractually bound to process data securely and in compliance with GDPR.


16. Security Measures

We implement appropriate technical and organizational measures, including:

  • Encryption of data in transit and at rest
  • Secure authentication mechanisms
  • Access control and monitoring
  • Regular security reviews

17. Changes to This Policy

We may update this Privacy Policy from time to time.
Updates will be published on this page with an updated revision date.


18. Contact

Agence Vautier
Email: contact@agencevautier.ch
Website: https://agencevautier.ch


© 2026 Agence Vautier. All rights reserved.