Privacy Policy
Effective date: May 6, 2026
VoicePen AI does not process or store your audio recordings, transcriptions, or AI conversations on our servers. All voice and AI data flows directly between your browser and the AI provider of your choice, using your own API key. This policy explains exactly what we do and do not collect.
1. What We Collect
Data we do collect
- Email address — provided at purchase, used solely to associate your license key
- License key — linked to your email to verify activation status
Data we do NOT collect
- Voice recordings or audio files
- Transcriptions or dictated text
- AI prompts or responses
- Notes or history you create in the extension
- Your API keys
- Browsing activity or page content
2. How AI Processing Works
VoicePen AI uses a bring-your-own-key model. Your audio and transcript data never touches our servers.
- Speech-to-text: Audio is captured in your browser and sent directly to OpenAI using the API key you provide. We do not proxy, intercept, or log this request.
- AI text processing: Transcribed text is sent directly to OpenAI for cleanup and refinement. We have no access to the content of these requests.
- Text-to-speech (optional): If enabled, synthesised speech is generated directly via Google Cloud TTS or OpenAI TTS, using your own API key.
- No proxy: API requests are made directly from your browser to the AI provider. VoicePen AI never acts as an intermediary for these calls.
3. API Key Handling
- API keys are stored locally in your browser using AES-256-GCM encryption
- Keys are never transmitted to our servers
- Keys are sent only to the respective AI provider (OpenAI or Google) when you initiate a request
- You can remove your keys at any time from the extension settings
4. Third-Party AI Providers
Your data is subject to the privacy practices of the AI provider you choose. VoicePen AI is not responsible for the data handling of third-party providers. We encourage you to review their policies:
5. Payment & Licensing
Payments are processed by LemonSqueezy. We do not store or handle payment card details.
After purchase, we receive and retain only your email address and an associated license key. This is the only personal data stored on our servers.
6. Data Retention
- Notes, history, and extension settings are stored locally in your browser only and are never uploaded to our servers
- Your email and license key are retained for as long as your license is active
- You may request deletion of your account data at any time by contacting us
7. Your Rights (GDPR)
If you are located in the European Economic Area, you have the following rights regarding your personal data:
- Access: request a copy of the data we hold about you (email and license key)
- Deletion: request that we delete your account data
- Portability: receive your data in a structured, machine-readable format
Because we do not store audio, transcriptions, or AI conversations, there is no such content to retrieve or delete from our systems.
8. Contact
If you have questions about this policy or wish to exercise your data rights, please reach out via our support page.