Who we are
VocalRemove is operated by [LEGAL REVIEW TODO: operator legal name], [LEGAL REVIEW TODO: business form], from Northern Ireland, United Kingdom. Our geographic contact address is [LEGAL REVIEW TODO: geographic business address]. We act as controller for the personal data described here.
Privacy enquiries: [LEGAL REVIEW TODO: support email] or our contact page.
Information we use
- Account and authentication: email, display name, identifiers, authentication state and provider. Google sign-in is available where configured; we do not receive your Google password.
- Audio and outputs: source audio, filenames, generated stems, previews and technical metadata.
- Processing and usage: job state, timestamps, format, duration, error category and extraction allowance records.
- Billing: Stripe customer, Checkout, subscription and Price identifiers; subscription state; currency, amount, interval and quantity. Stripe processes card data; VocalRemove does not receive or store full card numbers.
- Support and communications: messages and account verification, reset, billing and service communications.
- Technical and security: request, device, diagnostic and security information, including IP-derived country signals where configured. Country and pricing preferences affect marketing prices only.
Purposes and lawful bases
Where UK GDPR applies, we use account, audio, processing and billing data to perform our contract: creating accounts, processing audio, supplying results and administering plans. We keep records needed for tax, accounting, fraud prevention and lawful requests to comply with legal obligations.
We may rely on legitimate interests to secure, diagnose and improve the service, prevent abuse, keep proportionate operational records and answer support requests, after considering your rights. Where consent is required, we will ask first and you may withdraw it. The current application contains no analytics or advertising tracking.
International transfers
Some providers may process data outside the UK or your country. Before launch, VocalRemove must confirm each production location and contract. Where restricted-transfer rules apply, we will use an adequacy regulation or an appropriate safeguard, such as the UK IDTA or UK Addendum, with any required risk assessment. EU safeguards and the need for an EU representative also require confirmation if EU GDPR applies.
Retention and deletion
We keep data only as long as needed for these purposes, legal obligations and disputes. The repository does not establish one reliable production period for every category, so we do not promise a fixed period.
Source audio is normally deleted when a job becomes terminal, but deletion failures can require later cleanup. Successful stems and previews remain until you delete the extraction or account unless an external storage lifecycle removes them. Unconfirmed uploads need a production R2 lifecycle or cleanup job. Billing records may remain where tax, accounting, fraud or Stripe obligations require it. Backup, log and support schedules must be confirmed.
Library deletion removes an extraction and its stored objects. Account deletion attempts to remove application data/audio and cancel subscriptions; anonymised billing records and Stripe records may remain where lawfully required. Google-only account deletion needs a verified reauthentication or support path before launch.
Your privacy rights
Depending on applicable law, you may request access, correction, erasure, restriction, objection or portability, and withdraw consent without affecting earlier lawful processing. Exemptions and overriding obligations can apply. We may verify your identity.
In the UK you may complain to the Information Commissioner's Office; you may also have a local supervisory authority.
Automation and children
Audio separation is automated, but the repository contains no solely automated decision about a person producing legal or similarly significant effects, and no behavioural profiling. Review outputs before use.
The service is not designed for children. The minimum contracting age and parental-consent rule is an owner and solicitor decision required before launch.
Changes to this notice
We may update this notice as the service or law changes. We will change the date above and give appropriate additional notice where a change materially affects how we use personal data.