Privacy policy

What we collect

• Your email address, used to sign you in and to send account and billing messages.
• Your onboarding answers (the situation you practise for, what feels difficult, and your practice goal).
• Practice recordings you choose to submit, the transcripts made from them, and the feedback generated.
• Product usage events (for example that a recording was submitted or a page was viewed) tied to a pseudonymous identifier, never to speech content.
• Billing status from our payment provider, Paddle. We do not receive or store card numbers.

How recordings are processed

Recording starts only when you press Record. When you submit, the audio is sent to Google's Gemini API (a paid, business-tier service whose terms exclude using your data to train its models) to produce the transcript and feedback shown to you; live roleplay audio streams to the same service and is not stored by us. Google is a sub-processor and may process data outside your country. Please avoid including confidential employer or customer details in practice answers.

Retention

• Raw audio is deleted automatically within 24 hours after processing finishes or fails. It is also deleted if an upload is abandoned.
• Transcripts and feedback are kept until you delete the session or your account.
• Account deletion removes your recordings, transcripts, feedback and profile. Billing records needed for tax and reconciliation are kept without speech content.
• Backups are rotated on a short schedule; deleted data leaves backups within 30 days.

What we do not do

• We do not include audio, transcripts or feedback in analytics, advertising tools, URLs or session replay.
• We do not sell personal data.
• We do not use nonessential tracking without consent where consent is required.

Your rights

You can view your history, delete individual sessions, and delete your account from Settings. To access, export or correct your data, contact [email protected]. Depending on where you live you may have additional rights under applicable data protection law.

Advertising measurement

Our pages load the Google Ads tag (gtag.js), which sets cookies and sends page-view and conversion signals to Google so we can see whether our advertising brings people to Pointspoken. It never receives your recordings, transcripts or feedback. In the EU, EEA, UK and Switzerland the cookie stays off until you accept it in the banner; everywhere else you can decline it in the banner or later through “Cookie choices” in the footer. Google's use of the data is described in Google's privacy policy.

Contact

Pointspoken is operated and developed by Avenor Development Technologies Limited. Questions about privacy: [email protected].