Our privacy policy and how we use your data
Last updated: September 15, 2026
This Privacy Policy explains how SpeechOptimizer handles personal information when you visit the site, create an account, record or upload speech, receive an analysis, use billing features or contact us. It applies to the production service at speak-confidently.online.
Depending on how you use SpeechOptimizer, we process account data such as email address, profile name and authentication identifiers; speech recordings you record or upload; transcripts, timing information, delivery metrics, practice context and AI coaching feedback; usage and entitlement records; billing order and payment-status records; privacy preferences; and support communications.
For security, abuse prevention and guest access controls, we may also process technical information such as IP-derived rate-limit records, request timestamps, browser or device information, security events and CAPTCHA verification results.
We use information to authenticate users, accept and validate audio, transcribe speech, calculate delivery metrics, generate coaching feedback, preserve report history and re-record comparisons, manage usage entitlements, process or reconcile billing events, send service emails, respond to support requests, prevent abuse, secure the service and diagnose reliability problems.
Source audio is private. For signed-in users, source audio is deleted after analysis by default unless you explicitly choose to retain source audio in the Speech Privacy setting for that analysis flow. Guest source audio is always configured for deletion after analysis. Transcripts, metrics and reports may remain in your account history until you delete them or request account deletion.
Audio and derived text may be transmitted to configured speech-to-text and AI-feedback providers solely to produce the requested analysis. We currently use Inferera as the configured OpenAI-compatible API endpoint for those processing steps. We do not sell speech recordings or transcripts.
The production service relies on specialized providers to operate. The current stack includes Vercel for application hosting, Supabase for authentication, database and private storage, Inferera as the configured OpenAI-compatible endpoint for transcription and feedback, Resend for transactional and authentication email, Cloudflare Turnstile for human-verification and anti-abuse controls, Google when you choose Google sign-in, and Waffo / Pancake for billing checkout and payment-event integration. These providers process only the information needed for their role and are subject to their own privacy and security terms.
Where a legal basis is required, we process information as necessary to provide the service you request and perform our agreement with you; to pursue legitimate interests such as service security, fraud prevention, product reliability and support; to comply with legal obligations; and based on consent where applicable, including optional choices you make about retaining source audio.
We keep personal information only for as long as reasonably necessary for the purposes described above. Source audio follows the deletion behavior described in Section 4. If you explicitly retain source audio, it remains associated with your account until you delete the relevant data or account, or until we apply a shorter published retention rule. Account profile data, transcripts, reports, history and billing records are retained while needed to provide the account and are deleted or de-identified when you delete the relevant data or account, except for limited records we must retain for payment, fraud prevention, security, dispute resolution or legal compliance.
You can choose whether signed-in analyses retain source audio, review your report history, delete supported product data and request account deletion through the application. Depending on your location, privacy law may also give you rights to access, correct, delete, restrict or object to processing, obtain a portable copy, withdraw consent, or complain to a data-protection authority. We will honor applicable rights subject to identity verification and lawful exceptions.
Our providers may process information in countries different from the country where you live. Where required, we rely on lawful transfer mechanisms and provider contractual safeguards. Mandatory local privacy protections continue to apply where applicable.
We use access controls, private storage, authenticated application boundaries, row-level database controls, secret management, abuse protection and other technical and organizational safeguards designed to protect personal information. No internet service can guarantee absolute security, so you should also protect your account credentials.
SpeechOptimizer is not directed to children who cannot lawfully consent to the processing described here. If applicable law requires parental or guardian consent, the service may be used only with that consent. If you believe a child provided personal information without required consent, contact us so we can review the request.
We may update this Privacy Policy when the product, providers or legal requirements change. The date at the top identifies the latest version, and we will provide additional notice for material changes where required by law.
To ask a privacy question or exercise an applicable privacy right, use our public Contact page.