UNIVOX PRIVACY POLICY

1. INTRODUCTION

This Privacy Policy is issued by TECHMINDS SOLUTIONS S.R.L., a Romanian legal entity, with registered office in accordance with national and European regulations, and operating the Univox mobile application ("Univox", "we", "our"). The present document outlines the manner in which personal data is collected, processed, and protected in compliance with Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR), Law no. 190/2018, and other applicable legal instruments.

By accessing or using the Univox platform (mobile application), the user ("data subject") acknowledges having read, understood, and accepted the terms of this Privacy Policy. The refusal to accept this document requires the immediate discontinuation of the use of the application.

Univox acts in its capacity as Data Controller, pursuant to Article 4(7) of the GDPR.

2. CATEGORIES OF PERSONAL DATA PROCESSED

TECHMINDS SOLUTIONS S.R.L., through Univox, processes the following categories of personal data:

• Data provided directly by the user: Full name, email address, profile photo (via Google Sign-In), voice recordings for translation, and audio samples provided explicitly for voice cloning purposes.
• Biometric Data: Voice characteristics extracted for the purpose of creating a unique digital voice model ("Voice Clone"), processed only with explicit user consent.
• Data collected automatically: Information about the mobile device (model, OS version), IP address, application usage patterns, crash reports, and performance logs.
• Data obtained from third parties: Authentication tokens and basic profile information obtained through authorized authentication services (Google Firebase Auth).

3. PURPOSES AND LEGAL BASES FOR DATA PROCESSING

Univox processes personal data solely for specific, explicit, and legitimate purposes and only when a lawful basis, as provided by Article 6 of the GDPR, is applicable.

The data processing is carried out for the following purposes:

• To provide the core service: Real-time voice transcription, translation, and speech synthesis. (Legal basis: Performance of a contract)
• To create and manage Voice Clones: Generating a custom AI voice model based on user audio samples. (Legal basis: Explicit User Consent)
• To administer user accounts: Authentication, settings synchronization, and identity management. (Legal basis: Performance of a contract)
• To ensure technical functionality: Debugging, crash analysis, and service optimization. (Legal basis: Legitimate Interest)
• To comply with legal obligations: Regulatory compliance, data protection audits, and lawful requests from authorities. (Legal basis: Legal Obligation)

4. DATA SHARING AND RECIPIENTS

Personal data processed by Univox may be disclosed under strict confidentiality obligations and only to the following categories of recipients:

• Authorized Data Processors:
  • OpenAI (USA): For high-accuracy speech-to-text transcription and contextual translation.
  • ElevenLabs (USA/EU): For voice cloning technology and text-to-speech synthesis.
  • Google Firebase (USA): For secure authentication, database hosting, and cloud infrastructure.
  All processors act under binding Data Processing Agreements (DPAs) ensuring GDPR compliance.
• Competent Authorities: Public institutions or law enforcement, when such disclosure is required by law or by a binding legal obligation.

Univox does not sell, lease, or monetize user personal data to third parties under any circumstances.

5. DATA RETENTION PERIODS

Personal data shall be stored for a duration strictly necessary to fulfill the purposes for which it was collected.

• Transient Audio: Audio recorded for translation is processed in real-time and is not permanently stored on our servers. It is discarded immediately after processing.
• Voice Clones: Retained for the duration of the user's active account or until the user explicitly deletes the voice model via the app settings.
• Account Data: Retained for the entire duration of the user's active use of the platform. Upon deletion of the account, data is anonymized or deleted within 30 days.
• Technical Logs: Retained for a period of up to 12 months for security and audit purposes.

6. DATA SECURITY MEASURES

Univox implements a comprehensive framework of technical and organizational security measures, including:

• Encrypted data transfer (TLS 1.2+) and encryption at rest (AES-256).
• Strict access controls (RBAC) for backend systems.
• Use of secure, audited cloud infrastructure (Google Cloud Platform).
• Regular security assessments of third-party AI providers.

Despite our best efforts, no system can be guaranteed to be entirely secure. Users are advised to maintain the confidentiality of their Google account credentials.

7. RIGHTS OF THE DATA SUBJECT

Pursuant to Chapter III of the GDPR, users benefit from the following rights, which may be exercised by submitting a written request to contact@artbyte.ro:

• The right to access personal data concerning them;
• The right to rectification of inaccurate or incomplete data;
• The right to erasure ("right to be forgotten");
• The right to restriction of processing;
• The right to data portability;
• The right to object to processing based on legitimate interests;
• The right to withdraw consent for voice cloning at any time (by deleting the voice model in settings);
• The right to lodge a complaint with the competent supervisory authority (ANSPDCP – Romania).

8. INTERNATIONAL DATA TRANSFERS

Some data (specifically audio for processing) may be transferred to processors in the United States (OpenAI, ElevenLabs). Univox ensures adequate protection measures for such transfers, including the use of Standard Contractual Clauses (SCCs) approved by the European Commission and the EU-US Data Privacy Framework adequacy decision where applicable.

9. CHILDREN'S PRIVACY

Univox is intended for general audiences but is not directed at children under the age of 16. TECHMINDS SOLUTIONS S.R.L. does not knowingly collect personal data from minors. If we become aware of such data processing, the data will be erased immediately.

10. MODIFICATIONS TO THIS POLICY

TECHMINDS SOLUTIONS S.R.L. reserves the right to amend this Privacy Policy at any time. Any modifications will be published with an updated "Effective Date". Continued use of Univox following changes constitutes acceptance of the revised terms.

11. CONTACT DETAILS

For any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact:

Data Protection Officer – TECHMINDS SOLUTIONS S.R.L.
Email: contact@artbyte.ro