Privacy Policy

1. Who We Are

BrandFocus operates Voice Coach, an AI-powered voice and communication coaching platform for professionals. Our privacy contact is [email protected].

2. Scope

This policy applies to:

• Website visitors — anyone who visits brandfocus.ai.
• Registered users — anyone who creates an account to use Voice Coach.
• Lead magnet subscribers — anyone who downloads a free resource.

3. Data We Collect

3.1 Account Data

• Email address — collected at registration. Used for authentication, billing, and product updates.
• Name — optional, used for personalisation.
• Payment information — processed by Stripe. We never store full card numbers.

3.2 Voice and Audio Data

This section is particularly important for a voice-based product.

• Real-time audio stream — during an active coaching session, your microphone audio is streamed to our servers for analysis. The raw audio is processed in real-time to extract speech metrics (pace, filler words, volume, clarity).
• Audio is not permanently stored by default. After the session ends, the raw audio stream is discarded. Only the extracted metrics (numerical data, not audio) are retained.
• Saved sessions — if you choose to save a session for later review, an audio recording is stored encrypted on our servers. You can delete saved sessions at any time from your dashboard.
• Transcripts — speech-to-text transcripts may be generated for analysis. These are tied to your account and deletable.

We do not use your voice recordings to train AI models. Voice data is used solely to provide you with coaching feedback.

3.3 Speech Analytics

• Session metrics — words per minute, filler word count, pause patterns, volume variation, and clarity scores.
• Progress data — historical metrics to show improvement over time.
• Session metadata — session type (demo call prep, podcast practice, etc.), duration, and timestamp.

3.4 Lead Magnet Data

• Email address and name — collected when you download a free resource.

3.5 Usage and Technical Data

• Log data — IP address, browser type, pages visited. Retained for 90 days.
• Analytics — page views and feature usage via PostHog.

4. How We Use Your Data

• Providing the service — real-time voice analysis, generating coaching feedback, tracking your speaking improvement.
• AI processing — speech metrics and transcripts may be processed by AI providers to generate coaching insights. Providers operate under data processing agreements and do not retain your data.
• Billing — subscription management via Stripe.
• Communications — transactional emails and, with consent, coaching tips and product updates.
• Product improvement — aggregate, anonymised analytics only.

5. Audio Data and Consent

Voice Coach requires microphone access to function. By starting a coaching session, you consent to audio capture for the duration of that session. You can:

• Revoke microphone permission at any time through your browser settings.
• Choose not to save session recordings (they are discarded by default).
• Delete any saved recordings from your dashboard.
• Request complete deletion of all audio data via [email protected].

6. Legal Basis for Processing (GDPR)

For users in the EEA, UK, or Switzerland:

• Contractual necessity (Article 6(1)(b)) — account data and session analytics to deliver the service.
• Consent (Article 6(1)(a)) — audio capture during sessions, marketing emails, and saved recordings. Withdraw at any time.
• Legitimate interests (Article 6(1)(f)) — log data, usage analytics, and fraud prevention.
• Legal obligation (Article 6(1)(c)) — financial records retention.

7. California Privacy Rights (CCPA/CPRA)

California residents may:

• Know — what personal information we collect.
• Delete — request deletion of personal information.
• Correct — request correction of inaccurate data.
• Opt-Out of Sale/Sharing — we do not sell or share personal information.
• Non-Discrimination — exercising rights will not affect your service.

Contact [email protected]. We respond within 45 days.

8. Data Sharing

We do not sell or rent your data. We share data only with:

• AI providers — for speech analysis and coaching feedback generation.
• Service providers — hosting (Cloudflare, Railway), payments (Stripe), email (Resend), analytics (PostHog).
• Legal requirements — if required by law.
• Business transfers — with prior notice.

9. Data Retention

• Account data — retained while active. Deleted within 30 days of closure.
• Session audio (unsaved) — discarded immediately after session ends.
• Session audio (saved) — retained until you delete it or close your account.
• Speech metrics — retained while your account is active for progress tracking.
• Financial records — 7 years per tax law.
• Log data — 90 days.

10. Your Rights (GDPR)

EEA, UK, and Swiss users may: access, rectify, erase, restrict, port, and object to processing of their data. Withdraw consent at any time. Email [email protected].

11. Security

TLS encryption in transit, AES-256 at rest for saved audio, role-based access, regular security reviews. Audio streams use encrypted WebSocket connections.

12. International Data Transfers

Infrastructure in EU and US. Transfers outside the EEA protected by Standard Contractual Clauses.

13. Cookies

Strictly necessary cookies for authentication. Analytics via PostHog with privacy-friendly defaults. No cross-site tracking.

14. Changes

14 days notice by email before material changes take effect.

15. Contact