Privacy Notice

1. Contact and accountability

Voice Fortress Software LTD. is responsible for the personal information it holds. Our Privacy Officer is accountable for our privacy policies and practices, and is the person to whom privacy questions, requests and complaints are sent:

Privacy Officer
Voice Fortress Software LTD.
PO Box 2051
Garibaldi Highlands, BC V0N 1T0
Canada
privacy@voicefortress.com

Write to privacy@voicefortress.com for privacy questions; requests to access, correct or delete your personal information; other requests under Canadian privacy law or the GDPR; and privacy complaints. Report security vulnerabilities and incidents to security@voicefortress.com. For product and account help, write to support@voicefortress.com.

2. Information we hold

We collect this information through the website, the account and purchase pages, the app’s subscription check, and the messages you send us.

Information	Purpose	Legal basis	Retention
Website and service logs, such as IP address, timestamp, requested page and user agent	Serve the website and service, and investigate faults	Our legitimate interest in delivering and securing the website and service	30 days for logs under our control. Provider-managed logs follow the provider’s retention practices
Purchase records, such as name, email, billing country, amount and transaction reference	Administer purchases, refunds and tax or accounting obligations. Paddle, our merchant of record, sends us the email address, Paddle customer, subscription and transaction identifiers, subscription status and paid period for your purchase; we do not receive your card or full payment details.	Performing our contract with you; keeping records required by tax and accounting law (for people in the EEA, our legitimate interest in meeting those legal duties)	As long as tax and accounting law requires
Subscription records: what you agreed to when you subscribed (plan, price, the terms version and the time); your cancellation requests; and the subscription notices we send you	To show that your subscription, its renewals and any cancellation happened as consumer law requires	Keeping records required by consumer law	Three years, or one year after your subscription ends if that is longer, even if you delete your account earlier
Account records: your verified email address, an account identifier, payment-provider customer and subscription identifiers, subscription or trial status and dates, and the date you last signed in; and, for each computer you sign in on, a random installation identifier, a sign-in credential check value and two dates	Create and run your account, sign you in on your computers, keep your trial or subscription working, and let you sign out	Performing our contract with you	While you have an account with us. An installation record is deleted when you sign that computer out, or after 400 days without use. An account that never starts a trial or subscription is deleted 25 months after its last sign-in. After an account is deleted, its records can remain in our encrypted backups for up to 13 months, until those backups expire; a coded record of the deletion is kept for up to 14 months so that a restore can never bring the account back.
Trial records: the trial start and end on your account; and a one-way coded marker of an email address that can no longer start a trial. The marker is created when you delete an account that started or used a trial, or when you change your account’s email address and the account had started or used a trial or held a subscription. It contains only the coded address and dates, never your account.	Provide one fourteen-day trial per person, convert it to a subscription on the same account, and prevent repeat trials	Steps you ask us to take before a contract, then the contract; our legitimate interest in preventing trial misuse	Trial dates: while you have an account with us. Trial-used marker: 12 months after your account is deleted, or 12 months after the email address leaves your account, counted from that date for markers that already exist.
Sign-in and session records: a pending sign-in, a pending sign-in for a computer, a short-lived purchase session, and your signed-in session on our account pages	Verify your email address, sign you in securely, link a purchase to your account, and keep you signed in	Performing our contract with you; our legitimate interest in keeping accounts secure	Pending sign-in: 15 minutes. Computer sign-in: 10 minutes. Purchase session: up to an hour. Signed-in session: ends after 30 days without use and after 180 days at most, or when you sign out
Campaign code on a new signup, only if you arrived through one of our campaign links	Count how many new accounts each of our campaigns brings, without recording which campaign brought you	Our legitimate interest in knowing whether our campaigns work	Held only with your pending signup, for at most 15 minutes, and removed when you verify or the signup expires. What remains is a count per campaign and week that contains nothing about you, kept for 25 months
Account and billing activity records: that an account was verified, a trial started, a subscription started, renewed or ended, or a refund was recorded, with the date and a coded account reference	Run and plan the business: understand trials, subscriptions, renewals and refunds	Our legitimate interest in running and planning the business	About 25 months. Never linked to a campaign
Sales, support, security and privacy messages, and attachments you send	Handle your request. Support messages may be sorted, and replies drafted with help from an AI service (see “Automated support” below)	Performing our contract with you or, if you are not a customer, our legitimate interest in answering you	Only while needed, then deleted as soon as practicable, subject to legal obligations or an ongoing dispute

If you are an admin of a Voice Fortress company account, you give us the work email addresses of the people who get seats and of other admins. We use them only so those people can sign in and get the access their company pays for, and to send them short service emails that they have, or no longer have, a seat or an admin role. We keep the addresses encrypted in the company roster while the corresponding seat or role lasts, and remove that roster entry when the seat or role is taken back or the company account is closed. This does not delete a person’s separate Voice Fortress account; the rest of this Privacy Notice explains how we keep and delete account records. The company’s billing email goes to Paddle for billing, as for any subscription.

When you ask to start a free trial, and when you choose to subscribe, our service checks that Voice Fortress is available where you are. It estimates your approximate country and, where needed, region from the IP address of that request, using a geolocation database kept on our own servers. Your IP address is not sent to anyone for this. We do not store your IP address or the estimated location for this check, and neither is written to the logs we keep. The check runs only when you ask for a trial or choose to subscribe, and we tell you at that step; it does not run when you simply sign in or open a page. If Voice Fortress is available there, your trial starts or your subscription can go ahead. If it is not available there, no trial starts and you cannot start a subscription from there. If we cannot determine your location, no trial starts and you can try again later or contact support@voicefortress.com; a subscription can still continue to checkout. A check that does not start a trial does not use up your trial. We use this only to decide whether a trial or a subscription can go ahead from where you are, never to identify you, follow you or limit your computers. We do this to take the steps you ask for before a contract, and because of our legitimate interest in offering Voice Fortress only where we may lawfully do so.

We do not ask which country you live in. When you subscribe, Paddle, our merchant of record, determines your price, currency and taxes from your billing details: Canadian dollars in Canada and U.S. dollars in other supported markets.

Geolocation data: IP Geolocation by DB-IP, licensed under Creative Commons Attribution 4.0. Modification: derived country/region table, filtered by Voice Fortress.

We email you about your subscription: a confirmation with a copy of your terms, reminders before renewals, a notice before a free trial ends, and notice of any price change. These are service messages, not marketing.

Your email address is needed to create your account, and an installation record is needed for each computer you sign in on; without them we cannot provide the service. You can sign in on your own computers without a fixed limit, and we do not use your IP address, location, household or hardware details to limit or identify your computers.

We do not make solely automated decisions about you that have legal or similarly significant effects. The app pauses dictation when your trial or subscription has ended; contact us and a person will review your account.

Your account email is encrypted at rest. A one-way index lets us find its record without decrypting the address for lookup. Authorised service operations can decrypt it when needed to email you. We use it to sign you in and for account administration, support, security notices and continuity communications, not marketing.

To keep a computer signed in, the app periodically sends your account identifier, that computer’s random installation identifier and the software version. It never sends dictated content, computer names or hardware details. We keep the date of the most recent renewal for that computer, replacing the previous date rather than keeping a history. That date is usage information. Voice Fortress accounts have no password, which does not mean we hold no records about you.

Support records and deletion

When your request is resolved, we delete correspondence and attachments as soon as practicable unless a legal duty or ongoing dispute requires retention. Deletion is not immediate, and provider backups may retain copies until their normal expiry. Where law requires information used in a decision affecting you to be retained for access, we keep that information for the required period. This does not create a fixed archive period for every support message.

Purchase and account records have their own retention periods. Deleting a support thread does not delete those records.

Automated support

Support is separate from the Voice Fortress app: nothing you dictate in the app is sent to support. Only messages you choose to send us are handled as described here.

We use OpenAI’s API to help us understand and sort support questions and prepare replies using our published help. Before a message is sent, our own software looks for and replaces identifiers with placeholders, including email addresses, phone numbers, sign-in codes, billing and order references, names, street addresses and numbers that could identify you or your account, such as codes and reference, account or identity numbers. Ordinary prices, quantities and durations and product details such as versions, error codes and key names are kept. It removes passages that look like quoted or pasted dictation while allowing the rest of the question to be processed. If a pasted passage cannot be separated from the question, a person handles the message. Messages that appear to contain passwords or other credentials, payment-card or bank-account numbers or identity numbers are not sent to the AI service. We aim to keep messages about health or other people’s personal matters with a person. This screening is automated and best-effort: it can miss a name, address, sensitive subject or pasted passage. Attachments are never sent to the AI service.

In this initial phase, a person reviews every AI-written reply before it is sent, and the reply says that it was prepared with AI and approved by a person. AI-written replies are not sent automatically.

If you write the word “person”, or tell us you do not want AI to handle your message, it is not sent to the AI service and a person replies. Requests for a refund, cancellation or account change, privacy or security requests and complaints are always handled by a person. We do not make solely automated decisions about you that have legal or similarly significant effects.

OpenAI processes this text for us as our service provider under a data processing agreement and does not use it to train its models. Under the standard API arrangement, it may retain inputs and replies in abuse-monitoring logs for up to 30 days, or longer where required by law or reasonably necessary to protect its services or others from harm. We request that responses are not stored for later retrieval; this does not turn off abuse-monitoring retention. This processing takes place in the United States and other countries where OpenAI and its providers operate. We delete support correspondence after your request is resolved, as explained in “Support records and deletion” above.

3. Speech, text and information on your computer

Voice Fortress processes dictation locally. The speech-processing component does not upload audio, transcripts, Dictionary entries, learned corrections or Activity history to us. It performs no analytics or telemetry uploads. These statements apply to the speech path; subscription and update connections are separate.

Once text is delivered to another application, that application’s storage and network behaviour are outside Voice Fortress’s control. Your own exports, backups and messages may also contain information you choose to share.

Sign-in, subscription confirmation and update checks use a separate component from speech processing. Voice Fortress checks for updates automatically unless you turn automatic updates off in About or your organisation disables them. Automatic checks begin only after the update disclosure has been shown. You can also check manually in About. Checks and downloads connect to updates.voicefortress.com, delivered through Amazon Web Services’ Amazon CloudFront network. The requests carry public release and member paths; they do not include your account, email, licence or device identifier, audio, dictation or History. Like other web requests, they expose your IP address, the request time and requested resource to the delivery service. These connections provide the software and its updates (performing our contract with you or, for a trial, our legitimate interest in keeping the software current). Automatic downloads wait on metered, roaming or over-limit connections. Turning automatic updates off does not delete recovery material or prevent offline recovery of an interrupted installation. Speech models are bundled with the product rather than fetched on demand.

Progress tracking is off unless you enable it. Its dictation totals and estimated time savings stay on your computer and are removed by Delete profile.

Report a problem saves a bounded technical record to a file you choose; you can open it before sending it. It contains no dictated text, audio, history, credentials, file paths or account details, but it does include counts and timings of how Voice Fortress was used in that session, such as how many keys were pressed. Saving it does not send it to us. If you attach it to an email, we keep it with that support thread. A file you save elsewhere is outside Delete profile’s control.

Use the app’s controls to view, copy or delete local information. We cannot retrieve local dictation records for you because we do not hold them.

4. What to send us

Please do not send dictated content, credentials, or personal information about other people in support or security messages. If we find credentials, payment-card or bank-account numbers, identity numbers or pasted dictation, we delete them and tell you. Other personal information we find is handled by a person and deleted with your support correspondence after your request is resolved. Describe the problem without including the underlying document or recording. You can choose whether to share the diagnostic record described above.

5. Providers and payments

Provider	Role
Amazon Web Services, Canada (Montreal)	Hosts the account and subscription service and handles sign-in email and service logs. Its Amazon CloudFront network delivers app updates from locations in and outside Canada
Cloudflare	Hosts the website and processes requests needed to deliver it
Paddle	Merchant of record for payments; processes billing, receipts, refunds and payment details under its own terms and privacy notice
Google Workspace	Handles sales, support, security and privacy correspondence
OpenAI	Processes locally redacted support text to help us understand questions and draft replies, each reviewed by a person before sending (see “Automated support” in section 2), in the United States and other countries where it and its providers operate

Voice Fortress Software LTD. provides the software and software support. Paddle handles the payment transaction. We do not receive or store your full card details. Information Paddle processes for its payment role is governed by its own privacy notice.

On our pricing page, if your browser loads it, Paddle’s pricing script sends a request to Paddle, which receives your IP address and uses it to estimate your country so the page can show the Canadian-dollar or U.S.-dollar price that applies. Paddle processes this under its own privacy notice. We do not receive or store that estimate, and we do not send Paddle your account, email or campaign information for this. If the preview is unavailable, we show both prices, labelled by market. Paddle confirms the final price and taxes at checkout.

We do not sell or rent personal information. We disclose it to providers for the purposes described here, where required by law, or with your consent. We do not use an advertising network, CRM, analytics platform or data broker. If we add a provider, we will name it here before it starts processing your information.

Some providers process information outside Canada, where it may be subject to the laws and lawful access requirements of the country of processing. Canadian hosting for the account service does not mean every provider processes data only in Canada.

Some of your information is communicated outside Québec and outside Canada. Voice Fortress operates from British Columbia; Google Workspace handles our email; OpenAI processes support messages for automated support; Cloudflare delivers the website and Amazon CloudFront delivers app updates through their global networks, including in the United States. Our Privacy Officer (section 1) can answer your questions about our service providers outside Canada and, on request, will give you our written information about them, including the countries involved and what they do for us.

For people in the European Economic Area: we are in Canada, which the European Commission recognises as providing adequate protection for organisations subject to Canada’s federal privacy law (PIPEDA). Where our providers — for example Google Workspace for support email, OpenAI for automated support and Cloudflare for the website — process information outside Canada, they do so under the European Commission’s Standard Contractual Clauses or, where one applies, an adequacy decision. You can ask us for a copy of these safeguards.

6. Cookies, campaign measurement and marketing

Our website sets no cookies. Our pricing page shows both prices, labelled by market. Only if you choose to see the price for your location does your browser load Paddle’s pricing script (section 5); Paddle’s network may then set its own security cookie on Paddle’s domain. We do not set, read or receive it, and it is not used for advertising, analytics or campaign measurement. Our account pages use three cookies that are strictly necessary to sign you in and keep your account secure: one for your signed-in session, which ends after 30 days without use and after 180 days at most, and two short-lived ones for a pending sign-in (15 minutes) and a pending computer sign-in (10 minutes). They are not used for advertising, analytics or campaign measurement.

We do not use advertising or analytics cookies, tracking pixels, click identifiers, device fingerprinting, location- or IP-based attribution, or conversion reporting to advertising platforms, and we do not build a profile of your behaviour. Our sign-in emails contain no tracking pixels or tracked links.

If you arrive through one of our campaign links, the campaign’s code is kept with your pending signup for at most 15 minutes. When you verify your email, we add one to a count for that campaign and week and discard the code; your account never records which campaign brought you, and nothing is shared with Paddle or any advertising platform. If you do not verify, nothing is counted.

We do not keep a marketing list and we do not send promotional email; we send only sign-in and account messages. If this changes, we will update this notice first and ask for your consent where required.

7. Your choices, rights and complaints

You can ask what personal information we hold about you and for a copy; ask us to correct it or delete it where we are not required to keep it; ask us to restrict its use; object to uses based on our legitimate interests; and ask for information you gave us in a portable format. If you live in the United States, section 12 explains how these rights and an appeal work for you. Write to privacy@voicefortress.com or to our Privacy Officer at the address in section 1.

You can also withdraw your consent to our use or communication of your information. If you do, we may no longer be able to provide a licence.

We answer privacy and access requests within 30 days of receiving them, or sooner where the law requires, unless we extend that time as described below.

Where PIPEDA applies to an access request, we extend the response period only where PIPEDA permits it. For the ordinary extension grounds, the extension is no more than an additional 30 days. We will tell you within the original 30 days, give you the new deadline and our reasons, and tell you about your right to complain to the Office of the Privacy Commissioner of Canada.

Where the GDPR applies, we respond without undue delay and within one month of receiving your request. A complex or numerous request may instead be extended by up to two further months; we will tell you within the first month and explain why.

You can complain to us about our handling of personal information. If you are not satisfied, you may contact the privacy regulator responsible for your situation. In Canada, this may be the Office of the Privacy Commissioner of Canada or a provincial privacy commissioner. You may contact the federal office for guidance on where to direct a complaint.

If you are in the European Economic Area, you can also complain to the data-protection supervisory authority where you live, work or where you believe an infringement occurred.

8. Safeguards

We limit the personal information we collect to the purposes described in this notice. Account email addresses are encrypted at rest, as described above.

9. Children

Voice Fortress is not directed at children, and we do not knowingly collect personal information from children.

10. Changes to this notice

We keep previous versions of this notice. Material changes are announced on the website before they take effect.

11. How we manage personal information

Our Privacy Officer approves our privacy policies and practices and oversees how we handle personal information at every stage, from collection to deletion. Voice Fortress Software LTD. has no employees: the Privacy Officer is the only person at Voice Fortress with access to the information described in this notice. Before anyone else is given access, they must agree in writing to our policies and complete privacy training, and their access is limited to what their role needs; these roles and responsibilities are set out in our internal policies. We keep each kind of information only for the period stated in section 2 and then delete it.

To make a privacy complaint, write to our Privacy Officer (section 1). We acknowledge it within five business days, look into it, and answer in writing within 30 days. If you are not satisfied, you can contact a privacy regulator (section 7).

12. Additional information for residents of the United States

This section applies if you live in the United States. It adds to the rest of this notice; it does not replace it.

12.1 Who is responsible

Voice Fortress Software LTD. (PO Box 2051, Garibaldi Highlands, BC V0N 1T0, Canada) is the controller of the personal information described in this notice, and is the designated controller for the purposes of Rhode Island law. Our Privacy Officer handles every request in this section at privacy@voicefortress.com.

12.2 What we collect, why, and who receives it

The categories of personal information we collect, the purposes we use them for and how long we keep them are in section 2. In U.S. terms they are: identifiers (email address, licence and computer identifiers, Paddle customer and subscription identifiers), commercial information (subscription status, paid period and, through Paddle, purchase records), internet activity limited to service and website logs, and the messages you send us. We receive purchase information from Paddle, our merchant of record; we do not receive your card or full payment details.

We do not collect the speech or text you dictate: Voice Fortress processes it on your computer (section 3).

We share personal information only with the service providers listed in section 5, which process it for us (hosting, email and app-update delivery: Amazon Web Services; website delivery: Cloudflare; correspondence: Google Workspace; automated support: OpenAI), and with Paddle to administer your purchase. We do not sell personal information and we do not share it with third parties for their own marketing.

12.3 Sensitive information

We do not ask for sensitive personal information as U.S. state laws define it — for example precise location, health, biometric or financial-account data, government identifiers or information about children. Please do not send it to us; if we find it in a message, we handle it as described in section 4.

12.4 Sale, targeted advertising, profiling and tracking

We do not currently sell personal information, share it for cross-context behavioural advertising, process it for targeted advertising, or use it for profiling that produces legal or similarly significant effects. Our website and app do not use advertising or analytics cookies, pixels or other tracking, and no third party collects information about your online activities across different websites or services through our website or app. Because none of that processing takes place, there is nothing for a “Do Not Track” or Global Privacy Control signal to switch off; our website does not change its behaviour in response to those signals.

If we ever intend to begin any of these activities, we will update this notice with a new effective date and provide the opt-outs the law requires before we start.

12.5 Your rights

Depending on the state you live in, you may have the right to:

• confirm whether we process your personal information and access it;
• correct inaccurate personal information;
• delete personal information you provided or that we obtained about you;
• obtain a copy of personal information you provided to us in a portable format; and
• opt out of the sale of personal information, targeted advertising and certain profiling (we do none of these, so there is nothing to opt out of today).

We honour the first four requests from any U.S. resident, whether or not the law of your state gives you that right. We do not charge for requests and will not treat you differently because you make one. We do not need you to create an account.

How to make a request. Email privacy@voicefortress.com, or write to our Privacy Officer at the address in section 1. To protect your records we will confirm that the request comes from the owner of the licence email address, for example by asking you to reply from it or to complete our email confirmation. You may use an authorized agent; we will ask the agent for proof of your authorization and may confirm the request with you.

When we respond. We respond within 30 days of receiving your request. If a request is unusually complex we may extend that once and will tell you why before the first period ends; we will never take longer than your state’s law allows (generally 45 days plus a 45-day extension).

Nevada residents. We do not sell covered information. You may nevertheless direct us not to sell it by emailing privacy@voicefortress.com, our designated request address; we will respond within 60 days.

12.6 Appeals

If we decline to act on your request, in whole or in part, we will tell you why and how to appeal. To appeal, reply to our decision or email privacy@voicefortress.com with “Appeal” in the subject line within 90 days. Our Privacy Officer will review the decision afresh and tell you in writing what action we took or did not take, and why, within 45 days of receiving your appeal. If we deny your appeal, we will also tell you how to contact your state Attorney General, for example:

• Texas: consumerprotection.texasattorneygeneral.gov
• Nebraska: File a data privacy complaint

12.7 Changes

We announce material changes to this notice on the website before they take effect, and each version shows its effective date at the top.

13. Additional information for people in other countries

This section applies if you live in one of the countries listed below. It adds to the rest of this notice; it does not replace it.

13.1 For every country in this section

Who is responsible. Voice Fortress Software LTD., PO Box 2051, Garibaldi Highlands, BC V0N 1T0, Canada, is responsible for your personal information. Our Privacy Officer answers every request and complaint in this section at privacy@voicefortress.com. Where a law below calls for a data protection officer or a person answering questions about our processing, it is our Privacy Officer.

What we hold and why. Section 2 lists what we hold, why, our legal basis and how long we keep it. The product never sends us the speech you dictate or the text it produces (section 3). If you choose to include dictated content in a message to us, section 4 explains what we do with it. You must give us your email address to have an account; without it we cannot provide the service. Everything else in section 2 is either created by using the service or is optional.

Information from Paddle. Paddle, our merchant of record, sends us the email address, Paddle customer, subscription and transaction identifiers, subscription status and paid period for your purchase; we do not receive your card or full payment details.

Where your information goes. We keep your account information in Canada (Amazon Web Services, Montreal). Our email (Google Workspace), automated support (OpenAI), our website (Cloudflare) and app updates (Amazon CloudFront) are processed in the United States and other countries where those providers operate. Paddle, a United Kingdom company, processes your purchase under its own privacy notice. Each provider is bound by a written contract to process your information only on our instructions, keep it confidential and secure, tell us about security incidents, and delete it when we ask. You can ask our Privacy Officer for a copy of those safeguards.

Your rights. You can ask whether we hold your personal information and for a copy of it (in electronic form if you prefer), ask us to correct it or delete it, object to our use of it, withdraw any consent you gave, and ask for information you gave us in a portable format. We do not charge for requests. We answer within 30 days, or sooner where your country’s law requires. If we cannot answer in time, we tell you before the deadline, give you the date we will answer, and explain why. If we refuse a request, we tell you why and how to complain. To protect you, we confirm your identity using the email address on your account before answering.

Complaints. You can complain to us first. We acknowledge a complaint within five business days and answer in writing within 30 days. You can also complain to the regulator named for your country below, or to the data protection authority where you live.

Security incidents. If a security incident affects your personal information, we tell you and the regulator where your country’s law requires, within its deadline.

13.2 Switzerland

Our Privacy Officer answers requests under the Federal Act on Data Protection. We disclose personal data to Canada, which Switzerland recognises as providing adequate protection. We also disclose it to the United States, where Cloudflare and Amazon Web Services rely on the Swiss-U.S. Data Privacy Framework, Google on standard contractual clauses recognised by the Federal Data Protection and Information Commissioner (FDPIC), and OpenAI on such clauses or an adequacy decision, as its data processing agreement provides. Access requests are answered within 30 days and free of charge. You can report a concern to the FDPIC.

13.3 Japan

This part is published under the Act on the Protection of Personal Information.

• Business operator: Voice Fortress Software LTD., PO Box 2051, Garibaldi Highlands, BC V0N 1T0, Canada. Representative: Jon Gawiuk.
• Purposes of use: those listed in section 2.
• Requests: requests to disclose (including by electronic record), correct, add, delete, stop using or stop providing your retained personal data go to our Privacy Officer by email. There is no fee. We respond without delay.
• Complaints: our Privacy Officer at privacy@voicefortress.com. You may also contact the Personal Information Protection Commission (PPC).
• Security measures we take:
  • The owner is the only person with access, and only through access-controlled accounts.
  • Email addresses are encrypted at rest.
  • Each provider is bound by contract to security, confidentiality and incident notification.
  • Service logs are deleted after 30 days.
• Understanding foreign environments: we are in Canada, and our providers process data in Canada (Amazon Web Services), and in the United States and other countries (Google, OpenAI, Cloudflare, and Amazon Web Services for app updates). We took our measures after reviewing the privacy systems of Canada and the United States, using the information the PPC publishes on those systems.
• Providers outside Japan: each provider that handles your personal data for us is bound by contract to measures equivalent to those the Act requires. We review that every year. On request we give you the information the Act requires about each provider’s country, its system and the provider’s measures.

13.4 Singapore

Our Privacy Officer is our Data Protection Officer for the Personal Data Protection Act 2012 and can be reached at privacy@voicefortress.com. We read and answer messages on business days, including Singapore business days. If we cannot give you access within 30 days, we tell you in writing within that time when we will. Transfers out of Singapore are protected by legally enforceable obligations: our providers’ contracts, and Cloudflare’s Global Privacy Recognition for Processors certification. You can apply to the Personal Data Protection Commission (PDPC) to review how we handled an access or correction request.

13.5 Israel

You are not legally obliged to give us your personal information. Your email address is needed to create an account; without it we cannot provide the service. We use it for the purposes in section 2, and share it only with the providers in section 5 for those purposes. You have the right to access your personal information, in English, and to ask us to correct or delete it. You can contact the Privacy Protection Authority.

13.6 South Africa

The Information Officer for the Protection of Personal Information Act, 2013 is our Privacy Officer.

• Supplying information: supplying your email address is voluntary, but without it we cannot provide an account.
• No law requires collection: no law requires us to collect your information.
• Transfers: we transfer your information to Canada and the United States under the protections described in section 13.1.
• Your rights:
  • access your information;
  • ask us to correct or delete it;
  • object at any time, on reasonable grounds, to our use of it based on our legitimate interests.
• How to make a request: requests and objections can be made free of charge by email, in writing or on the regulator’s forms. We tell you in writing what we did within 30 days.
• Complaints: you can complain to the Information Regulator.

13.7 Philippines

Our Privacy Officer is our Data Protection Officer for the Data Privacy Act of 2012. We process your information because it is needed to perform our contract with you, and for our legitimate interests described in section 2.

• Your rights:
  • to be informed;
  • to access your information;
  • to object to its processing, including automated processing;
  • to have it corrected, blocked or erased;
  • to data portability;
  • to damages;
  • to complain to the National Privacy Commission (NPC).
• How to make a request: email our Data Protection Officer.
• Response time: we respond within 30 days. For complex or numerous requests we may take up to 15 more working days, and we tell you why.

13.8 Hong Kong

The personal data we collect and why are in section 2. We transfer it only to the classes of recipients in section 5 (our processors and our merchant of record). Supplying your email address is obligatory to have an account. You may request access to and correction of your personal data. Requests go to: Privacy Officer, Voice Fortress Software LTD., PO Box 2051, Garibaldi Highlands, BC V0N 1T0, Canada, privacy@voicefortress.com. We comply within 40 days, and in practice within 30.

13.9 United Arab Emirates

Before we process your personal data we tell you:

• Purposes: the purposes are in section 2.
• Recipients: our providers inside and outside the State are in section 5.
• Cross-border protection: the measures that protect your data abroad are in section 13.1.

Your rights:

• information about our processing;
• correction and erasure;
• objection;
• a copy in machine-readable form;
• withdrawing any consent you gave.

You can complain to the UAE Data Office.

Back to the top