[MOCK — placeholder for demonstration only. Not legal advice.]

VOXIFYER PRIVACY NOTICE

Version: v1.0 (demo) Last updated: 2026-06-04

This notice explains how Voxifyer AB processes personal data as a controller when you use the Voxifyer platform. It is written to reflect the information duties under Articles 13–14 of the EU General Data Protection Regulation (GDPR).

1. CONTROLLER Voxifyer AB, reg. no. 559000-0000, Stockholm, Sweden. Contact: privacy@voxifyer.example. For data protection questions: dpo@voxifyer.example.

2. WHAT DATA WE PROCESS

• Account and identity data: name, email, phone, organisation, role, verification status.
• Content data: scripts, manuscripts, briefs, and uploaded materials you provide.
• Voice and audio data: recordings and, for voice talent, voice samples used to match, present, and (where you have separately consented) train synthetic voice models. Voice data may constitute biometric or special-category data depending on use.
• Transaction data: wallet, credits, orders, contracts, and payment metadata.
• Technical data: device, log, IP, and usage data.

3. PURPOSES AND LEGAL BASES

• To provide the platform and perform our contract with you — Art. 6(1)(b).
• To verify identity, prevent fraud, secure the service, and meet our legal duties — Art. 6(1)(c) and our legitimate interests under Art. 6(1)(f).
• To process payments and keep accounting records — Art. 6(1)(b) and (c).
• To train or deploy synthetic voice models from a talent's voice — only on the basis of that talent's explicit consent under Art. 6(1)(a) and, for special-category data, Art. 9(2)(a). Consent can be withdrawn at any time without affecting prior processing.
• To send service and lifecycle communications — contract performance or legitimate interests; marketing only with consent where required.

4. RECIPIENTS AND PROCESSORS We share data with processors who act on our instructions — authentication, hosting and cloud infrastructure, payment, email delivery, identity verification, and (where enabled) voice-model training providers. Each is bound by a data processing agreement. We do not sell personal data.

5. INTERNATIONAL TRANSFERS Where data is transferred outside the EU/EEA, we rely on adequacy decisions or the European Commission's Standard Contractual Clauses with appropriate safeguards.

6. RETENTION We keep personal data for as long as needed for the purposes above and to meet legal, accounting and dispute-resolution requirements, then delete or anonymise it. Signed contracts are retained for the limitation period required by law.

7. YOUR RIGHTS Subject to conditions, you have the right to access, rectify, erase, restrict, and port your data, to object to certain processing, and to withdraw consent. You may lodge a complaint with the Swedish Authority for Privacy Protection (IMY) or your local authority. To exercise rights, contact privacy@voxifyer.example.

8. AUTOMATED DECISIONS We do not make decisions producing legal or similarly significant effects based solely on automated processing.

9. CHANGES We may update this notice and will indicate the version and date above.

[END — MOCK DOCUMENT]