Privacy Policy

This is an English translation for your convenience. The legally binding version is the German original.

Here you can find out which personal data we process when you visit our website, create an account, take out a subscription and use the vodit pro desktop app.

1. Controller

PT Voice and Vision Media
Jl. Graha Nusa Dua 24A
80361 Jimbaran, Bali
Indonesia

Represented by: Andreas Koch, Direktur (managing director)
Email: contact@vodit-pro.com · Phone: +62 823 4217 4745

Representative in the European Union (Art. 27 GDPR)

Michele Koch
Michael-Rackl-Straße 17
85072 Eichstätt
Germany

You can contact us or our representative in the EU with any questions about data protection. We have not appointed a data protection officer because there is no legal obligation to do so.

2. Visiting the website

Hosting: Vercel

Our website is operated by Vercel Inc., USA. When pages are accessed, Vercel processes technically necessary data: IP address, date and time, page accessed, browser and operating system, and the previously visited page. We need this data to deliver the website securely and quickly, and Vercel stores it only briefly in server logs.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure, stable operation). Vercel processes the data as a processor under Art. 28 GDPR.

Visitor statistics: Vercel Web Analytics

To see which pages are read and where visitors come from, we use Vercel Web Analytics. The service does not set cookies and does not store anything on your device. It records the page accessed (without parameters), the previously visited page, country, browser, operating system and device type. A hash value is generated from the IP address and browser and is discarded after 24 hours; the IP address itself is not stored. This does not allow us to identify individual persons. The members’ area and the sign-in, order, cancellation and withdrawal pages are not tracked.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in improving our offering). Vercel processes the data as a processor under Art. 28 GDPR. You can object by using an ad or script blocker or by writing to us.

Fonts

The “Plus Jakarta Sans” font is embedded locally and served from our own server. No connection to Google or other font providers is established when a page is accessed.

Cookies

We only use cookies that are necessary for the website to function: sign-in cookies, so that you stay signed in to the members’ area. The legal basis is § 25(2) no. 2 TDDDG (German Telecommunications Digital Services Data Protection Act; strictly necessary) and Art. 6(1)(b) GDPR. This is why we do not need a cookie banner. We do not use analytics, advertising or tracking cookies.

Contact by email

If you send us an email, we process your address and the content in order to respond to your request. Legal basis: Art. 6(1)(b) GDPR insofar as it concerns a contract or an inquiry about one, otherwise Art. 6(1)(f) GDPR (legitimate interest in responding). Emails to @vodit-pro.com addresses are forwarded by Cloudflare, Inc. (USA, Email Routing service) to our mailbox at Google (Gmail).

3. Account, subscription and payment

User account: Supabase

For registration, sign-in and the members’ area, we use Supabase (Supabase Inc., USA). The database is located in a data center in Frankfurt am Main (EU). The following is stored: first name, email address, password (only as an encrypted hash), sign-in times, subscription status, and your customer and subscription ID at Paddle.

Legal basis: Art. 6(1)(b) GDPR (contract). Supabase is our processor under Art. 28 GDPR.

Account emails: Brevo

We send emails relating to your account, for example to confirm your address, reset your password, change your email address, confirm cancellations and withdrawals, or delete your account, via Brevo (Sendinblue SAS, 106 boulevard Haussmann, 75008 Paris, France). For this, Brevo processes your email address, the content of the email and delivery data such as time and delivery status. The data is processed in the EU. We do not send marketing emails through it.

Legal basis: Art. 6(1)(b) GDPR (contract). Brevo is our processor under Art. 28 GDPR. More information in Brevo’s privacy policy.

Ordering and payment: Paddle

Our order process is conducted by our online reseller Paddle (Paddle.com Market Limited, Judd House, 18-29 Mora Street, London EC1V 8BT, United Kingdom). Paddle is the Merchant of Record (seller) for all our orders. For this purpose, Paddle processes name, email address, country and postal code, company and VAT ID where applicable, payment data (for example card details), IP address for tax calculation and fraud prevention, and transaction data. Paddle is itself the controller for this processing.

From Paddle, we receive the data we need for your subscription: email address, customer and subscription ID, selected plan, subscription status and billing period. We do not see full card details.

Legal basis: Art. 6(1)(b) GDPR (contract) and (c) GDPR (legal obligations). More information in Paddle’s privacy policy.

Downloads: Cloudflare

The app’s installation files are hosted by Cloudflare, Inc., USA (downloads.vodit-pro.com). When you download them, Cloudflare processes technically necessary data such as IP address and time. Legal basis: Art. 6(1)(b) and (f) GDPR.

4. The vodit pro desktop app

What stays on your computer

The app processes recordings, scripts, edit results, REVIEW lists and DAW projects locally on your computer. We have no access to them.

Speech recognition via your Deepgram account

So that vodit pro can compare your recording with the script, the recording is converted into text. For this, the app sends the recording, encrypted, directly to Deepgram, Inc., USA, using your own API key via your own Deepgram account. You conclude the contract for speech recognition directly with Deepgram; Deepgram’s terms and privacy policy apply. We receive neither the recording nor the transcript.

No model training at Deepgram: The app sends every request with the setting mip_opt_out=true. This means it does not participate in Deepgram’s “Model Improvement Program”: Deepgram does not use your recordings and transcripts to train its models.

Recordings may contain personal data, such as your voice or names in the text. For client projects, please clarify yourself whether you are permitted to transmit them to Deepgram. You can find data retention settings in your Deepgram account.

Sign-in and license check

The app requires an internet connection. It checks at sign-in and regularly thereafter whether your subscription is active. For this, it transmits your sign-in credentials or a sign-in token to Supabase and our server and receives the subscription status in return. Legal basis: Art. 6(1)(b) GDPR.

Update check

At startup, the app checks whether a new version is available. In doing so, technically necessary data (IP address, app version, operating system) is transmitted. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure, up-to-date software).

Logs for support

If something does not work, you can use “Logs für Support” (logs for support) to create a ZIP file containing the logs of a chapter. The app saves it only in your chapter folder; nothing is sent automatically. You decide yourself whether to send it to us by email. The ZIP file contains:

• the full text of your script and the full transcript of the recording with timestamps,
• project, chapter and file names as well as the location of the recording on your computer (the path may contain your user name and, for cloud folders, your email address),
• your settings for the chapter and the list of detected cuts.

It contains no audio files and no credentials (neither the Deepgram key nor your password). Only send us the logs if you are permitted to share the texts. We use them exclusively to solve your problem and delete them no later than 90 days after your request has been closed. Legal basis: Art. 6(1)(b) GDPR.

No analytics, no AI training

The app contains no usage statistics and no tracking. We do not use your content to train AI models.

Other recipients

Apart from the service providers named above, we only pass on data where necessary: to advisors such as tax advisors or lawyers who are bound by professional secrecy, and to authorities or courts if we are legally obliged to do so. We do not sell data.

5. Transfers to countries outside the EU

Our company is based in Indonesia. There is no adequacy decision of the European Commission for Indonesia. Account and subscription data, as well as emails that we access to manage your contract, are therefore transferred to a third country. The basis for this is Art. 49(1)(b) GDPR (necessary for the performance of the contract with you).

Our service providers based in the USA (Vercel, Supabase, Cloudflare, Google) transfer data on the basis of the European Commission’s Standard Contractual Clauses and, where the provider is certified, the EU-U.S. Data Privacy Framework. Paddle is based in the United Kingdom, for which there is an adequacy decision of the European Commission.

6. Retention period

• Account data: for as long as your account exists. After your account is deleted, we delete it within 30 days.
• Invoice and payment data: for as long as required by tax and commercial law (up to 10 years).
• Email inquiries: until the inquiry has been dealt with, then for no more than 2 years, unless there is a retention obligation.
• Support logs: no later than 90 days after the request has been closed.
• Cancellation and withdrawal notices: 3 years from the end of the year in which they were received (proof, statutory limitation period).

You can delete your account yourself at any time (members’ area › Settings › “Delete account”) or have it deleted by emailing contact@vodit-pro.com.

7. Your rights

You have the right to

• access to your stored data (Art. 15 GDPR),
• rectification of inaccurate data (Art. 16 GDPR),
• erasure (Art. 17 GDPR),
• restriction of processing (Art. 18 GDPR),
• data portability (Art. 20 GDPR),
• object to processing based on legitimate interests (Art. 21 GDPR),
• withdraw consent with effect for the future (Art. 7(3) GDPR).

To do so, write to contact@vodit-pro.com or to our representative in the EU. We will respond within one month. You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU country in which you live or work (Art. 77 GDPR). You can find the addresses of the German authorities on the website of the Federal Commissioner for Data Protection.

8. No automated decision-making

We do not make decisions based solely on automated processing that produce legal effects concerning you (Art. 22 GDPR). The app’s automatic cuts are suggestions in your own project; you decide on the result.

9. Security

All connections between your browser or the app and our service providers are encrypted via TLS. We store passwords only as a hash. Access to our systems is limited to what is strictly necessary.

10. Changes

If we use new services or the legal situation changes, we will update this policy. The version published here at any given time applies.