Privacy notice

Draft prepared 4 October 2026 · Not reviewed · Not in force

This privacy notice is a working draft for Edward. It is not legal advice, it has not been reviewed, and it does not apply to a live purchase until Edward replaces the placeholders, checks the text, and removes the draft banner.

Who this notice is about

VoiceBot is a Mac app. This website sells the paid edition as a one-time purchase after a 7-day trial. The free app stays under the GPL-3. The paid edition uses its own closed licence.

Seller: Edward — [LEGAL NAME PLACEHOLDER]
Trading name: [TRADING NAME PLACEHOLDER]
Postal address: [POSTAL ADDRESS PLACEHOLDER]
Company number: [COMPANY NUMBER PLACEHOLDER]
VAT number: [VAT NUMBER PLACEHOLDER]
Contact email: [CONTACT EMAIL PLACEHOLDER]

These are placeholders. Edward must replace them with the real legal name, address, company number, and VAT number before the site goes live. This draft does not invent those details.

Until the placeholders above are filled in, the controller for UK GDPR and EU GDPR purposes is not fully identified. Edward is the person who must complete that identification. [CONTROLLER IDENTITY PLACEHOLDER]

What this notice covers

It covers personal data handled when you use this website and when you pay through Stripe Checkout. It also covers optional Cloud tidy inside the VoiceBot app, below. It does not describe the rest of what the app does on your Mac.

Optional Cloud tidy

Tidy is optional. If you leave it off, or you tidy on your Mac with Ollama or llama.cpp, the transcript stays on your Mac. Edward does not receive it.

If you choose Cloud tidy, the transcript text is sent to the provider you pick: OpenAI, Anthropic, or another OpenAI-compatible service you name. You use your own API key. VoiceBot stores that key in the macOS Keychain on your Mac. The key is not sent to Edward, and this website does not receive it.

With Cloud tidy, audio does not leave your Mac. Only the transcript text goes to the provider you chose. That provider is not Edward. The setup steps are on the documentation page.

Personal details collected at checkout

Checkout asks for:

Email address — collected by Stripe Checkout so the payment and the paid edition can be tied to you.
Name — not required by this site. Stripe may still ask for a name when a payment method needs one.

You type the email and card details into Stripe’s embedded payment form on the buy page. Those fields are not posted to this server. This server then receives a Checkout session id. When it asks Stripe whether the payment succeeded, Stripe can return the payment status, the amount, the currency, and the email already given to Stripe.

The amount this server is prepared to charge is US$19.99. Fixed one-time prices: US$19.99 (USD), £14.99 (GBP), €19.99 (EUR), A$29.99 (AUD), ZAR 300.00 (ZAR). Anywhere else pays the US dollar price. These amounts are set per currency, not converted from one price. Country US selects USD. The charge is US$19.99, once.

Card data stays with Stripe

Card number, expiry date, and CVC are entered in Stripe’s embedded payment form and processed by Stripe. They are not sent to this site’s server, and this site does not store them. Stripe is the payment processor.

Stripe may also collect a billing address when a payment method requires one. This site does not ask you for a postal address itself. Stripe’s own privacy notice describes what Stripe does with payment data.

Other data

Cookie notice preference. If you dismiss the notice, the choice is stored in your browser’s local storage under the key voicebot-cookie-notice. It is not sent to this server. See the cookie policy.
Technical logs. The host that runs this site may log the IP address, user agent, date, and URL of a request, for security and debugging. [HOSTING PROVIDER PLACEHOLDER] [LOG RETENTION PLACEHOLDER]

This site has no account, no newsletter, and no analytics tracker.

Why the data is used

To take the one-time payment and deliver the paid edition — name, email, and payment status. Legal basis: steps toward and performance of a contract (UK GDPR Article 6(1)(b) and GDPR Article 6(1)(b)).
To handle a question, a failed payment, or a refund — name, email, and payment records. Legal basis: contract, and where the law requires records to be kept, legal obligation (Article 6(1)(c)).
To keep the site secure — technical logs. Legal basis: legitimate interests in running a safe site (Article 6(1)(f)). Edward must confirm this balance before going live.

There is no sale of personal data, no advertising profile, and no decision that is made about you solely by automated means and that produces a legal effect.

How long it is kept

Edward has not set retention periods. Payment records will need to be kept for as long as tax and accounting rules require, and name and email for as long as needed to deliver the paid edition and deal with complaints. [RETENTION PERIOD PLACEHOLDER]

The local-storage preference stays on your device until you clear site data for this origin.

Who receives it

Stripe Payments, to process the one-time Checkout payment. Edward must accept Stripe’s data processing terms before live payments. [STRIPE DPA PLACEHOLDER]
The hosting provider named above, to serve the site and hold logs.
A professional adviser or authority, if the law requires it.

Stripe may process payment data in the United States and other countries. International transfers need a lawful transfer tool. Edward must confirm which tool Stripe offers (such as the UK extension to the EU-US Data Privacy Framework, or the UK International Data Transfer Addendum) before going live. [TRANSFER SAFEGUARD PLACEHOLDER]

Your rights

Where UK GDPR or the EU GDPR applies, you can ask to access, correct, erase, or restrict personal data, and you can ask for a portable copy of data you provided. You can object to processing based on legitimate interests. You can withdraw a consent, though this checkout does not rely on consent for the payment itself. These rights have limits, for example where a record must be kept for tax.

To use a right, email [CONTACT EMAIL PLACEHOLDER]. Edward must answer within the statutory time once the site is live.

You can complain to a supervisory authority. Which authority depends on where Edward is established. [SUPERVISORY AUTHORITY PLACEHOLDER] People in the UK can contact the Information Commissioner’s Office at ico.org.uk. People in the EEA can contact their local authority.

Children

The buy site is aimed at adults buying a Mac app. It does not knowingly collect children’s data.

Changes

When Edward reviews this notice he should date the replacement and remove the draft banner. Until that happens, treat this page as unpublished.