Legal
Privacy policy
As little data as possible, hosted in France, never sold. No cookies for the readers of your articles.
Updated: 3 November 2026
Who is responsible
Nadir Tounsi (Nads Dev), 64 rue Waldeck Rousseau, 69006 Lyon, France, bonjour@vokyt.cc.
For customer accounts, Vokyt is the controller. For readers of blogs that embed Vokyt, Vokyt acts as a processor for that blog, which remains the controller.
Customer data (accounts)
| Data | Why | Legal basis | Retention |
|---|---|---|---|
| Name, email, password (hashed) | Create and secure your account | Contract | While the account exists, then 30 days |
| Session IP address and browser | Sign-in security | Legitimate interest | Session length (30 days at most) |
| Voice notes, transcripts, titles, declared sites | Provide the service | Contract | Until deleted, or 30 days after the account closes |
| Dictation: duration and character count | Count minutes | Contract | Like the account. Dictation audio is not kept |
| Voice drafts: audio, transcript, outline | Provide the service (private, never published) | Contract | Until deleted, or 30 days after the account closes |
| Plan, invoices, Stripe ID | Billing | Legal obligation | 10 years (French Commercial Code) |
Card details are entered at Stripe and never touch our servers.
Article readers' data
When a reader sees or plays a voice note, the Vokyt player sends anonymous events: seen, play started, 25 / 50 / 75 % listened, listened to the end. Each event only contains the voice note ID, its type and the date.
We store no IP address, reader identifier or cookie. Stats are aggregated and cannot track a person. As with any web page, the IP address only passes through our technical providers to deliver the player and the audio.
If the reader turns on autoplay, that choice is remembered in the reader's browser (local storage), with no cookie and nothing sent to our servers.
Providers (processors)
| Provider | Role | Data location |
|---|---|---|
| HOSTKEY B.V. | Server, database, audio files | France |
| Cloudflare, Inc. | Delivery and protection of the site | Global network |
| Mistral AI | Transcription and dictation with Voxtral when available | European Union |
| Groq, Inc. | Transcription and dictation with Whisper (current engine), outlining voice drafts | United States |
| Resend, Inc. | Sending service emails (welcome, password reset) | European Union (Ireland) |
| Stripe | Payment and billing | European Union and United States |
Transfers outside the European Union (Groq, Stripe, Cloudflare) rely on the EU–US Data Privacy Framework and the European Commission's standard contractual clauses. When Voxtral (Mistral AI) is available in your dashboard, you can choose it to avoid any transfer of your recordings to the United States.
No data is sold or used for advertising. We do not ask transcription providers to train their models on your recordings.
Chrome extension “Vokyt – Dictate anywhere”
The extension only acts when you trigger it (keyboard shortcut or click on its icon), on the tab open at that moment. It has no standing access to the sites you visit, does not read your pages and does not track your browsing.
During a dictation, your microphone audio is recorded and sent to Vokyt for transcription. It is not kept: it is deleted as soon as the text is produced. The text is inserted into the field where your cursor is; Vokyt keeps no copy of it. Only the length and date of the take and the number of characters produced are recorded, to count your dictation minutes.
The extension stores in your browser your extension key (dk_live_…) and your dictation language. The key only allows dictation: it gives no access to your voice notes or your account, and you can revoke it at any time in the dashboard.
No extension data is sold, used for advertising or to assess creditworthiness. Its use of data complies with the Chrome Web Store Developer Program Policies, including the Limited Use requirements.
Security
Encrypted connections (HTTPS), hashed passwords, key-only server access, database not exposed to the Internet, customer secret keys never sent to browsers, regular backups.
Your rights
You can access, correct or erase your data, get a copy (portability), restrict or object to processing, by writing to bonjour@vokyt.cc. We reply within one month.
If you read a blog that uses Vokyt, contact that blog first; we will help it answer you.
You can also lodge a complaint with the CNIL (cnil.fr) or your local data protection authority.
Changes
If this policy changes significantly, customers are notified by email. The update date is shown at the top of the page.