1. Controller

Alexander Michler
Langacker 41A
25560 Schenefeld
Germany
Email: contact@arcvoice.ai

2. The desktop app

arcvoice runs speech recognition locally on your computer. Microphone audio is processed in memory on your device and is not transmitted to us or to any third party. No transcripts are uploaded. There is no user account, no in-app analytics, no crash uploads and no fingerprinting.

The only network calls the installed app makes are: an occasional license validation against our license provider (see section 5), and, if you opt in, a check for new application versions. Both calls transmit only the license key, the application version and a generic user-agent string.

3. Visiting this website

This website is a static site hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you load the page, Vercel automatically processes technical data needed to deliver the response: your IP address, the URL requested, the timestamp, the HTTP status, the user-agent and referrer. This data may be retained by Vercel in short-lived edge and access logs for security and troubleshooting. We do not run a separate analytics or tracking layer on top.

Legal basis: Art. 6 (1) (f) GDPR — legitimate interest in operating a reliable, secure website. Vercel processes this data on our behalf under a data processing agreement and provides standard contractual clauses for transfers outside the EU. See vercel.com/legal/privacy-policy.

4. Cookies and similar technologies

This website does not set tracking cookies, advertising cookies or third-party analytics cookies. Strictly necessary technical cookies may be set by the hosting platform to keep the connection working; these do not require consent under § 25 (2) TDDDG / Art. 5 (3) ePrivacy Directive.

5. Checkout, payment and license delivery

Purchases are handled by Lemon Squeezy (Lemon Squeezy LLC, 5160 Wiley Post Way, Salt Lake City, UT 84116, USA), acting as Merchant of Record. When you buy arcvoice, you enter your contract for the payment with Lemon Squeezy, who in turn pays out to us. Lemon Squeezy collects the data needed to process the payment, comply with tax law and prevent fraud — typically your name, email address, billing country, the relevant VAT information and payment-method details. Card numbers are processed by Lemon Squeezy's payment partners; we never see them.

We receive from Lemon Squeezy the order metadata needed to deliver the license: order ID, your email address, the product purchased and the country needed for invoicing. We use that data to generate and email your license key and to honour refund and support requests.

Legal basis: Art. 6 (1) (b) GDPR — performance of a contract. Tax and accounting records are retained for up to ten years as required by §§ 147 AO, 257 HGB. Lemon Squeezy's privacy policy is available at lemonsqueezy.com/privacy.

6. License validation

Each installation of arcvoice can be activated against your license key. When the app validates a license, it sends the license key, the application version and a randomly-generated device identifier to Lemon Squeezy's license API. This is used to count active devices (up to three by default) and to make sure the key has not been revoked. The device identifier is not derived from hardware serial numbers and cannot be used to track you across other software.

Legal basis: Art. 6 (1) (b) GDPR — performance of the license agreement.

7. Email and support

If you email us, we keep the message and any attachments for as long as needed to answer you and to handle any follow-up. Standard email is not end-to-end encrypted. Legal basis: Art. 6 (1) (b) and (f) GDPR.

8. Recipients of personal data

We share personal data only with the processors needed to operate arcvoice:

Vercel Inc. (website hosting and edge logs, USA)
Lemon Squeezy LLC (payments, invoicing, license management, USA)
Our email provider, used to send the license delivery email and reply to support requests

Each processor is bound by a data processing agreement. Transfers outside the EU rely on the EU Commission's standard contractual clauses and, where applicable, the EU-US Data Privacy Framework.

9. Retention

Server access logs are retained for the period determined by Vercel, typically up to 30 days. Order, invoice and tax records are retained for the statutory retention period (up to ten years under German tax and commercial law). License records are kept for the duration of the license. Support emails are kept as long as needed to resolve the conversation and then archived for at most three years.

10. Your rights

Under the GDPR you have the right to access (Art. 15), to rectify (Art. 16), to erase (Art. 17), to restrict processing (Art. 18), to data portability (Art. 20) and to object to processing based on legitimate interest (Art. 21). You may also withdraw any consent at any time. To exercise these rights, email contact@arcvoice.ai. You also have the right to lodge a complaint with a supervisory authority. The competent authority for Schleswig-Holstein is the Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein (ULD).

11. Children

arcvoice is not directed at children under 16 and we do not knowingly collect data from them.

12. Changes to this policy

We may update this policy as the product evolves. The "last updated" date at the top reflects the most recent version. Material changes will be announced on this page before they take effect.