PROPRIETARY SOFTWARE · COPYRIGHT © 2025 · ALL RIGHTS RESERVED · PROTECTED UNDER EU LAW

PRIVACY POLICY

Vi Voice™ - Voice Input Assistant
Effective Date: September 2025
Last Updated: September 2025

1. ABOUT US

Vi Voice™ is a product of:
Oleksandr Hrytsai
Einzelunternehmer (sole proprietor)
Registered: Bayreuth, Germany
Registration Date: 08.02.2023
Contact:
Website: vi-voice.com

2. WHAT DATA WE COLLECT

We collect the minimum amount of data necessary for the service to function:

Device ID - a unique pseudonymized device identifier

  • Generated randomly in your browser
  • Required to authorize your requests
  • Not linked to your identity
  • Legal basis: legitimate interest (GDPR Art. 6.1.f) - the service cannot function without it

Encrypted OpenAI API key (stored encrypted with AES-256-GCM)

  • Associated with device_id for your authorization
  • We cannot decrypt it without your master_secret

Usage statistics:

  • Number of service requests
  • Request processing time
  • GPT model used (gpt-3.5-turbo, gpt-4o-mini, gpt-4o)
  • Dictation language
  • Number of processed tokens

3. WHAT DATA WE DO NOT COLLECT

We DO NOT collect or store:

  • Personal data (name, email, phone, address)
  • Texts you dictate
  • IP addresses
  • Cookies or other tracking technologies
  • Your browsing history
  • Information about your computer or browser

4. DATA AGGREGATION AND MINIMIZATION

We apply the principle of data minimization to protect your privacy and comply with GDPR. This means we transform detailed information into anonymous statistics, making it impossible to track specific users.

HOW IT WORKS:

  • Every hour: detailed logs become aggregated statistics
  • After aggregation we know "there were 50 users", but not who they are
  • After 90 days: all records with device identifiers are completely deleted

RESULT:
After data processing it is impossible to:

  • Track specific device activity
  • Restore usage history
  • Link statistics to a specific user

We retain only anonymous metrics to improve the service: total number of users, average response time, popular languages. This data contains no information about specific devices or users.

5. HOW WE USE DATA

Collected data is used exclusively for:

  • Providing text processing service
  • Protection against abuse (rate limiting)
  • Improving service quality
  • Creating anonymous usage statistics

6. DATA SECURITY

We apply modern protection methods:

  • API key encryption: AES-256-GCM
  • Text encryption during transmission: XOR with one-time key
  • Secure connection: HTTPS/TLS
  • "Zero knowledge" principle: we cannot decrypt your API keys without your master_secret
  • Dictation texts exist only in server RAM for 2-3 seconds during processing

7. DATA RETENTION PERIODS

  • Detailed logs with device_hash: automatic deletion after 90 days
  • Encrypted API keys: stored until manually deleted by user
  • Aggregated statistics: indefinitely (completely anonymous)
  • Dictation texts: not stored at all

8. DATA SHARING WITH THIRD PARTIES

We share data only with:

  • OpenAI - for text processing through their API (their Privacy Policy applies)
  • We DO NOT sell, rent, or share your data with other companies

9. YOUR RIGHTS (GDPR)

Under the General Data Protection Regulation (GDPR), you have the right to:

  • ACCESS - request what data we store about you
  • CORRECTION - correct inaccurate data
  • DELETION - when deleting API key through the extension:
    • Immediately deleted: device_id and encrypted API key
    • Within 90 days deleted: all request history (device_hash)
    • After complete deletion it is impossible to restore or link data to your device
  • RESTRICTION - restrict processing of your data
  • PORTABILITY - receive your data in machine-readable format
  • OBJECTION - object to data processing

To exercise these rights, contact us:

10. CHILDREN'S DATA

Our service is not intended for persons under 16 years of age. We do not knowingly collect children's data. If you believe we have accidentally collected a child's data, please contact us.

11. INTERNATIONAL DATA TRANSFER

Your data is processed on servers in the USA (through OpenAI API). By using the service, you agree to such data transfer.

12. CHANGES TO POLICY

We may update this policy. We will notify you of significant changes through the extension. The date of the last update is indicated at the top of the document.

13. CONTACT INFORMATION

For all privacy questions:

Email:
Website: vi-voice.com

Data Protection Officer:
Oleksandr Hrytsai
Bayreuth, Germany