Voysey Privacy Policy
Effective date: September 27, 2026
Last updated: September 27, 2026
This policy explains what personal information Voysey Inc. ("Voysey," "we," "us") collects when you use Voysey Studio, Voysey Watch, the "by Voysey" storefronts, the Voysey desktop and mobile apps, Voysey Payments, and the Voysey sign in service (the "Services"), how we use it, who we share it with, and the choices you have.
The short version: we collect what we need to run your account, make your work, bill you, and keep the platform secure. We do not sell your personal information. We do not use advertising cookies or third party ad trackers. You own your content.
1. Information we collect
1.1 Information you give us
Account information. Your email address, name, username, profile picture, and password. Passwords are stored only as a salted one way hash. If you sign in with Google, GitHub, or Microsoft, we receive your account identifier with that provider, your email, whether it is verified, your name, and your profile picture.
Your Content. Everything you put into the Services and everything the Services make for you: prompts and instructions, conversations with Voysey's assistants, uploaded images, documents, manuscripts, screenplays, audio, and voice samples, and generated text, images, video, audio, music, 3D models, manifests, and finished productions. This also includes project notes and facts the assistant is asked to remember within a project, edits you make, favorites, and feedback you give on results.
Payment information. When you buy something, our payment processor, Stripe, collects your card or other payment details directly. We never receive or store full card numbers. We keep your Stripe customer and subscription identifiers, what you bought, amounts, dates, subscription status, and your acknowledgment of our refund terms. Guest purchases may include an email address.
Contact and notification details. A phone number if you turn on text message notifications, and push notification tokens if you turn on push notifications on the web, desktop, or mobile apps.
Publishing connections. If you connect a publishing account (for example YouTube or Amazon KDP), the access tokens for that account and the developer application credentials you supply. These are encrypted at rest and used only to publish on your instructions.
Communications. Messages you send to support, account requests (such as export or deletion requests), access applications, and subscriptions to our status page or changelog.
Marketing choices. Whether you have opted in to marketing email, and where you opted in.
1.2 Information we collect automatically
Sign in and security data. For each signed in session: IP address, a city and region label derived from the IP address, browser or device user agent, a device label, and session timestamps. We keep a log of security events such as sign ins, sign outs, password changes, and resets, including IP address and user agent. We count failed sign in attempts to lock out brute force attacks.
Location from IP address. We derive an approximate country, region, and city, and the network operator, from your IP address. We use this to label your sessions, to alert you to new sign ins, and to detect VPNs, proxies, and hosting networks for fraud prevention. This lookup runs mostly on our own servers using a local MaxMind database. When that database has no answer, the IP address may be sent to ip-api.com for the lookup.
Usage and metering data. How much you use the Services: tokens processed, compute time, the number and type of generations, and credits used. We use this to apply plan limits, show you your usage, and bill correctly.
Interaction style profile. Voysey's assistant adapts to how you like to work. Periodically, a model reads your recent conversations with the assistant and sets three preferences: how detailed replies should be, whether the assistant should act or ask first, and how much it should push back. The profile stores those three settings and a short note on what led to them. It is used only to shape the assistant's replies to you.
App and device information. App version, platform (web, desktop, iOS, Android), and which Voysey apps you have installed, so we can show update notices and avoid prompting you to install apps you already have.
Listening and viewing activity. On Music by Voysey and similar storefronts: what you play, how long you listen, what you skip, like, add to playlists, and buy. We use this for recommendations, charts, and to avoid repeating songs, and we derive a preference score for genres, moods, and tempos from it.
Logs. Our servers keep technical logs of requests and errors, which can include your IP address, user identifier, device and browser details, and the request involved. We use them to run, debug, and secure the Services.
1.3 Cookies and local storage
We use only essential cookies and local storage: to keep you signed in across Voysey apps, to protect against cross site request forgery, and to remember interface preferences. We do not use advertising cookies, third party analytics cookies, social media pixels, or retargeting. See our Cookie Policy for durations.
2. How we use information
We use personal information to:
- Provide the Services: run your account, generate and store your work, run the assistant and its agents, and deliver what you buy, including on demand physical goods.
- Bill you, enforce plan limits and credits, and prevent payment fraud.
- Keep the Services and your account secure, including session management, sign in alerts, breach checks on new passwords, VPN and proxy detection, and abuse prevention.
- Enforce our Terms and Usage Policy and comply with legal obligations, including our obligation to report child sexual abuse material.
- Communicate with you about your account, security, billing, invitations, and service status, and, if you opt in, marketing.
- Personalize the assistant and storefront recommendations as described above.
- Improve the Services as described in section 3.
3. Model improvement and training
Your Content is not used to train our models unless your "Contribute edits to model training" setting is on. When it is on, we use patterns from your edits, such as which shots you swap, which takes you keep, and how you rearrange compositions, to improve generation quality. We do not use your prompts or your personal information for this. A separate setting, "Share style preferences," lets us learn from aesthetic choices you make across genres and styles. Both settings are off unless you turn them on.
You can change both settings at any time in Settings, Privacy. Turning a setting off stops future use.
We do not use the content of your conversations or your uploaded voice samples, faces, or documents to train models under any setting.
4. How we share information
We do not sell your personal information, and we do not share it for cross context behavioral advertising.
We share personal information only in these cases.
4.1 Service providers
Companies that process information for us under contract, only to provide their service to us:
| Provider | What it does | What it receives |
|---|---|---|
| RunPod | GPU compute for generation | Inputs needed for the job; Outputs |
| fal.ai | Hosted image, video, and audio models | Inputs needed for the job; Outputs |
| OpenRouter, and the model providers it routes to | Language model processing for the assistant, agents, and writing | Prompts, conversation context, and project context needed for the request |
| Cloudflare (R2) | Storage of your files and generated assets | Your Content |
| DigitalOcean | Application servers and databases | All data held by the Services |
| Stripe | Payments and subscriptions | Payment details, billing email, purchase details |
| Resend | Transactional and, if you opt in, marketing email | Email address, name, message content |
| Amazon Web Services (SNS) | Text message notifications | Phone number, message content |
| Apple and Google push services | Mobile push notifications | Push token, notification content |
| MaxMind, ip-api.com | IP address location lookup | IP address (ip-api.com only when the local lookup fails) |
| Have I Been Pwned | Checks new passwords against known breaches | A partial hash of your password; never the password |
| Web search engines, through a search service we operate | Live web search when the assistant searches for you | Search queries, not your identity |
As explained in our Terms, we route generation jobs between our own infrastructure and third party providers based on load and quality. Any job may be processed by any of the generation providers above.
4.2 People you choose to share with
Collaborators you invite to a project, members and admins of your team, and anyone who can view content you publish on a public Voysey surface. If you turn on "Show name in credits," your name appears in the "Made with Voysey" card on films you export. If you turn on "Public profile," others can see your profile and published work.
4.3 Services you connect
When you publish through a connected account, we send your content and the details needed to publish it to that service. That service's privacy policy then applies.
4.4 Legal and safety
When we believe in good faith it is required by law, legal process, or government request, or needed to protect the rights, property, or safety of Voysey, our users, or others. We report apparent child sexual abuse material to the National Center for Missing and Exploited Children as federal law requires.
4.5 Business transfers
In connection with a merger, acquisition, financing, or sale of assets, subject to this policy.
5. How long we keep information
We keep information for as long as your account is open and as needed to provide the Services, then delete or anonymize it, except where we must keep it longer for legal, tax, accounting, fraud prevention, or security reasons.
| Data | Retention |
|---|---|
| Your account and Your Content | While your account is open. After you close it, 12 months, so you can return and pick up where you left off, then deleted. If you ask us to delete it, we delete it within 30 days, and it is cycled out of backups within 90 days. |
| Security event log | 90 days |
| Expired sign in sessions and tokens | Pruned regularly after expiry |
| Payment and purchase records | 7 years, for tax and accounting |
| Server and error logs | 24 months |
| Records related to child sexual abuse material reports | As long as the law requires (at least 1 year under 18 U.S.C. § 2258A) |
When we delete your account, items other users bought from you stay available to those buyers.
6. Your choices and rights
In the product. You can edit your profile, manage sessions and sign out other devices, change privacy and training settings, turn notifications on or off, disconnect publishing accounts, and delete projects and assets.
Marketing. You can unsubscribe from marketing email at any time with the link in any marketing email.
Access, export, correction, and deletion. You can request a copy of your data or deletion of your account and data from Settings, Privacy, or by emailing [email protected]. We verify your identity before acting on a request and respond within the time the law requires (generally 30 to 45 days).
Depending on where you live, you may have additional rights, including to know what we collect and how we use it, to correct it, to delete it, to receive it in a portable format, to object to or restrict certain processing, to opt out of profiling, and to appeal a decision we make about your request. You will not be treated differently for exercising these rights. You can use an authorized agent where the law allows. To appeal a decision, email [email protected] with "Appeal" in the subject line.
California residents. In the past 12 months we collected the categories of personal information described in section 1: identifiers, commercial information, internet and network activity, approximate geolocation, audio and visual information you provide, and inferences (the interaction style profile and listening preferences). We disclosed these for business purposes to the service providers in section 4.1. We do not sell or share personal information as those terms are defined in the CCPA, and we do not use sensitive personal information for purposes that require an opt out.
Outside the United States. The Services are currently offered only in the United States, and your information is stored and processed in the United States. We do not direct the Services to people in other countries.
7. Security
We protect personal information with measures that include encryption in transit, encryption of stored third party credentials, salted password hashing, session revocation with refresh token rotation and reuse detection, breach checks on new passwords, rate limiting, account lockout, and new sign in alerts. No system is perfectly secure. Report security issues to [email protected].
8. Children
The Services are for adults 18 and over. We do not knowingly collect personal information from anyone under 18. If you believe a minor has created an account, contact [email protected] and we will delete it.
9. Changes
We will post changes to this policy here and update the date above. If a change is material, we will notify you by email or in the product before it takes effect.
10. Contact
Privacy questions and requests: [email protected]
Security: [email protected]
Voysey Inc.