1. Information we collect

• Account information — your email address and basic profile details when you sign in (including via magic link or Google sign-in), and your plan and billing status.
• Content you upload — audio, video, and subtitle files you submit for processing, together with technical metadata such as filenames, file size, duration, language, and the operations you select.
• Generated output — transcripts, subtitles, translations, summaries, and other artifacts the Service produces from your content.
• Payment information — handled by our third-party payment processors. We receive limited billing records (such as plan, amount, and transaction status); we never receive or store your full card number.
• Usage data — jobs created, minutes consumed, API key activity, quota usage, and similar operational records.
• Device and analytics data — IP address, browser type, pages viewed, and interaction events, collected through cookies and analytics tools such as Google Analytics.
• Communications — messages you send to our support email.

2. How we use information

We do not sell your personal information, and we do not use the content you upload to train artificial-intelligence or machine-learning models.

• To provide and operate the Service: process your files, generate output, deliver results, and maintain your account and quotas.
• To bill for the Service, enforce plan limits, return credits for failed jobs, and prevent fraud and abuse.
• To secure the Service, including monitoring for unauthorized access and abusive automation.
• To communicate with you about jobs, receipts, service changes, and support requests.
• To improve and develop the Service, using aggregated or de-identified information that no longer identifies you.
• To comply with law and enforce our Terms of Service.

3. How your content is processed

Transcription and media processing run on infrastructure we operate. Certain features — such as translation and summarization — are performed with the assistance of vetted third-party AI providers that process the relevant text on our behalf and are not permitted to use it for their own purposes.

Raw uploads are deleted after processing or within a short rolling window (typically no more than 7 days). Generated artifacts are retained on a default schedule (typically up to 30 days) so you can download them, unless you delete them earlier or a longer period is required for legal or billing reasons. We keep transcript text out of routine application logs.

4. How we share information

We share information only as needed to run the Service:

• Service providers — hosting and delivery (e.g., Netlify, Cloudflare), authentication and database (e.g., Supabase), analytics (e.g., Google Analytics), payment processing and merchant-of-record partners (e.g., Stripe, Subotiz), and the AI providers described above. These providers act on our instructions and are bound by confidentiality obligations.
• Legal reasons — when we believe disclosure is required by law, regulation, legal process, or to protect the rights, safety, or property of Vocce, our users, or the public.
• Business transfers — in connection with a merger, acquisition, financing, or sale of assets, in which case this policy will continue to apply to your information.
• With your direction — for example, when you connect the Service to your own tools via API keys or webhooks.

5. Cookies and analytics

We use essential cookies to keep you signed in and to operate the Service, and analytics cookies (such as Google Analytics) to understand how the Service is used. You can control cookies through your browser settings; disabling essential cookies may break sign-in and checkout.

6. Data retention

We retain account and billing records for as long as your account is active and as needed for legitimate business or legal purposes (such as tax and accounting). Uploaded media and generated artifacts follow the shorter schedules described in Section 3. When retention is no longer required, we delete or de-identify the data.

7. Security

All traffic to the Service is encrypted in transit (HTTPS/TLS). We limit access to personal information to personnel and systems that need it, and we design the pipeline so failed uploads and processing states are separated from billing. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. International transfers

We are a United States company, and information is processed in the United States and in other countries where we or our service providers operate. Where required, we rely on appropriate safeguards for cross-border transfers. By using the Service you understand your information may be transferred to jurisdictions with different data-protection laws than your own.

9. Your rights

Depending on where you live, you may have rights to access, correct, delete, or export your personal information, to object to or restrict certain processing, and to withdraw consent. California residents have the rights described in the CCPA/CPRA, including the right to know, delete, and correct, and the right not to be discriminated against for exercising those rights; we do not “sell” or “share” personal information as those terms are defined in the CCPA. EEA and UK users may also lodge a complaint with their supervisory authority; our legal bases for processing are the performance of our contract with you, our legitimate interests in operating and protecting the Service, and your consent where required.

To exercise any right, email cmoonchat@gmail.com from the address associated with your account. We will verify your request and respond within the timeframe required by applicable law.

10. Children

The Service is not directed to children under 13 (or the age of digital consent in your jurisdiction), and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, contact us and we will delete it.

11. Changes to this policy

We may update this policy from time to time. We will post the updated version on this page with a revised “Last updated” date, and for material changes we will provide additional notice (such as email or an in-product notice). Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

12. Contact

The data controller for the Service is:

• Company: Cmoon Inc, a corporation incorporated in the State of Wyoming, United States.
• Registered address: 30 N Gould St Ste R, Sheridan, WY 82801, USA.
• Email: cmoonchat@gmail.com (we normally reply within 2 business days).