Privacy
How ReVoice handles your data.
Last updated 26 July 2026. The data controller is Caroline Ravn AB, Stockholm, Sweden.
The short version
ReVoice turns things you have already said out loud into written content in your voice. To do that it processes your transcripts and what you generate. Your content trains only your own voice profile, never a shared model. We do not sell data, we do not run advertising trackers, and you can ask for everything to be deleted at any time.
What we collect
Account: your name, email address, and sign-in credentials. Authentication is handled by Clerk; ReVoice never stores passwords.
Content: video transcripts you sync from your public YouTube channel or paste in, the drafts ReVoice generates, and your ratings and edits of them.
Profile: brand colors, fonts, language preference, and voice-profile settings, including any personal guardrails you set.
Payments: handled entirely by Stripe. ReVoice stores your subscription status and plan — never card numbers.
Usage: generation counts, feature settings, and standard server logs.
We do not ask for or process special-category data by design. You control what content you feed the system.
Why we're allowed to (legal bases)
Account, content, and payment processing happen because the service cannot function without them (performance of contract). Your ratings and edits are used to improve your own voice profile (legitimate interest). Where an optional feature needs consent, we ask for it.
Where your data goes
Your data lives with a small set of processors, each doing one job:
- Supabase — database and storage, hosted in the EU (Ireland, eu-west-1).
- Vercel — application hosting.
- Clerk — sign-in and accounts (US-based, EU transfers under Standard Contractual Clauses).
- Anthropic — AI generation. Transcript content is sent to generate your drafts. Per Anthropic's commercial policy, API inputs and outputs are deleted within 30 days and are not used to train Anthropic's models.
- Supadata — fetches YouTube transcripts.
- Stripe — payments.
Where a processor is US-based, transfers rely on Standard Contractual Clauses and, where applicable, the EU-US Data Privacy Framework. The full processor list and data processing agreements are available on request.
Cookies
ReVoice uses essential cookies only — the ones that keep you signed in. There are no advertising or marketing trackers on this site.
Your rights
You can request access to, correction of, or deletion of your data at any time. Deletion removes your profile, transcripts, generated content, and activity records, and your sign-in account is deleted in parallel. Backups expire on the standard backup cycle. You also have the right to data portability, to object to processing, and to complain to your supervisory authority (in Sweden: IMY).
Today, requests go by email — a self-serve deletion flow is on the roadmap.
Contact
Caroline Ravn AB, Stockholm, Sweden.
success@ravnmagic.com
If we change this policy, the date at the top changes with it.