Privacy Policy

Last updated: June 2026

1. Controller

The controller responsible for the processing of personal data is:
Levero GmbH
Unterdorfstrasse 8
8600 Dübendorf
Switzerland
Email: info@voqario.com

We process personal data in accordance with the Swiss Federal Act on Data Protection (FADP/DSG) and, where applicable, the EU General Data Protection Regulation (GDPR), the UK GDPR, and the California Consumer Privacy Act (CCPA/CPRA).

2. Data we collect

• Account data: email address, name (optional), encrypted password.
• Profile data: training goal, experience level, and focus chosen during onboarding.
• Usage data: voice recordings, transcripts, analysis results, scores, and progress.
• Technical/device data: IP address (e.g. for rate limiting and security), browser type, device information, and session cookies.
• Payment data: processed exclusively by Stripe; we do not store card data.

3. Voice recordings

Your voice recordings are stored temporarily on our servers so that they can be transcribed and analysed. After a recording has been successfully analysed, the audio file is deleted automatically. The transcript and the analysis results are stored so that you can track your progress. We retain only a limited number of your most recent sessions; older sessions are removed automatically. You can request deletion of your data at any time (see “Your rights”).

4. Purposes and legal bases

• Providing the AI-based service and training features (performance of contract — Art. 6(1)(b) GDPR).
• Account creation and authentication (performance of contract).
• Processing payments (performance of contract).
• Security, fraud prevention, and debugging (legitimate interest — Art. 6(1)(f) GDPR).
• Analysing and improving the Service (legitimate interest and/or your consent).
• Compliance with legal obligations (Art. 6(1)(c) GDPR).

5. Service providers and subprocessors

We use the following providers to operate the Service:

• OpenAI (USA): transcription of voice recordings and AI analysis of inputs and transcripts. Processing occurs solely to deliver the requested function.
• Stripe (USA): payment processing. Stripe processes payment data as an independent controller under its own privacy policy.
• Hetzner (Germany/EU): hosting of our servers and databases. Our servers are located in Germany.
• Google Analytics (Google, USA): aggregated usage statistics — see “Cookies and analytics” below.

We do not sell personal data, and we do not grant third parties any ownership rights in your content.

6. International data transfers

Our servers are located in Germany (EU). Some of our providers (in particular OpenAI, Stripe, and Google) may process data outside Switzerland and the European Economic Area, including in the United States. Where data is transferred to a country without an adequacy decision, we rely on appropriate safeguards such as the EU Standard Contractual Clauses (Art. 46 GDPR) and equivalent Swiss mechanisms.

7. Cookies and analytics

• Strictly necessary cookies: we use HttpOnly session cookies for authentication. These are required to log you in and are deleted when you log out.
• Analytics: we use Google Analytics 4 to understand how the Service is used and to improve it. This may set cookies and transmit usage data to Google. Google Analytics 4 does not store full IP addresses.

You can prevent analytics tracking by using the Google Analytics opt-out browser add-on (tools.google.com/dlpage/gaoptout) or by blocking cookies in your browser. Depending on your jurisdiction, non-essential cookies may require your prior consent.

8. Retention

• Voice recordings: deleted automatically after analysis.
• Transcripts and analyses: retained until you delete your account (limited to your most recent sessions).
• Account data: retained until you delete your account.
• Payment records: retained in accordance with statutory retention obligations (up to 10 years).

9. Your rights

Subject to applicable law, you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data deleted;
• restrict or object to certain processing;
• receive your data in a portable format;
• lodge a complaint with a supervisory authority.

To exercise your rights, contact us at info@voqario.com. Users in Switzerland may contact the Federal Data Protection and Information Commissioner (FDPIC); users in the EU/EEA may contact their local data protection authority.

10. UK GDPR

If you are located in the United Kingdom, you have the corresponding data protection rights under the UK GDPR, and you may lodge a complaint with the UK Information Commissioner’s Office (ICO).

11. California (CCPA/CPRA)

If you are a California resident, you have the right to know, access, correct, and delete your personal information, and the right not to be discriminated against for exercising these rights. We do not sell or share personal information as those terms are defined under the CCPA/CPRA.

12. Security

We use technical and organisational measures to protect your data, including transport encryption (TLS), hashed passwords, HttpOnly cookies, and access controls. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

13. Children

The Service is not directed to children under the age of 13, and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, please contact us so that we can delete it.

14. Note on AI analysis

Voqario provides AI-based communication training and is not a substitute for therapy or for medical, psychological, legal, or professional career advice. The AI analysis relates solely to communication patterns, not to the person.

15. Changes to this policy

We may update this Privacy Policy from time to time. The current version is always available on this page. We will inform you of material changes by reasonable means, for example by email.