Vocalize ("Vocalize", "we", "us") is a browser extension and companion web service that reads web pages, PDFs, and EPUB documents aloud using text-to-speech, with optional AI-generated summaries. This policy explains what data we collect, how it is used, and the choices you have.

Contact: voicemaster.vocalize@gmail.com.

1. Data we collect
   We collect only what is needed to read content aloud and to operate your account:

Document content you choose to have read. When you start narration or request a summary, the text extracted from the current web page, PDF, or EPUB is sent to our service to generate speech audio and, if you enable summaries, an AI-generated summary. We only process the page you actively ask us to read — we do not read pages in the background or collect your browsing history.
Account and authentication data. If you sign in, we process your email address and an authentication token issued for your Vocalize account.
Settings and preferences. Your selected voice, reading speed, theme, and feature toggles are stored locally and synced to your account so they persist across devices and sessions.
Anonymous trial identifier. Before you sign in, we generate a random identifier to provide a limited free trial. It is not linked to your identity.
We do not collect health data, payment card data (see §5), personal communications, precise location, or browsing history. The Vocalize browser extension contains no third-party analytics or tracking SDKs; our websites use privacy-respecting analytics, described in §4.

1. How we use data
   To convert the content you select into spoken audio.
   To generate optional summaries of that content.
   To authenticate you and provide subscription features.
   To save and sync your preferences.
   We do not use your data to build advertising profiles, and we do not sell or rent your data to third parties.
2. Sharing and sub-processors
   We share data only with service providers that help us deliver the product, and only as needed to provide it:

Cloud speech and AI providers — the text you choose to have read is processed by third-party cloud text-to-speech and summarization services to produce audio and summaries.
Cloud hosting and storage — our backend and any generated files are hosted with a cloud infrastructure provider.
Payment processor (Stripe) — subscription payments are handled by Stripe in the Vocalize web app. The extension itself does not collect or process payment card details.
Website analytics — our websites use Plausible (cookie-less) and Google Analytics 4 (cookie-based, loaded only after consent) to understand site usage. See §4.
These providers process data on our behalf. We do not transfer your data to anyone for their independent use.

1. Cookies and analytics
   Our websites (www.voicemaster.io and the Vocalize web app) use two analytics services to understand how the sites are used. This applies to the websites only — the browser extension contains no analytics or tracking SDKs.

Plausible — a privacy-friendly analytics service that is cookie-less and collects only aggregate usage data. It stores no personal data and does not track you across sites, so it needs no consent.
Google Analytics 4 — uses cookies, but only after you opt in via our cookie banner. We use Google Consent Mode v2: until you accept, Google Analytics stores no analytics data on your device and sets no cookies (it may send anonymous, cookie-less signals). We enable analytics storage only; advertising signals stay disabled, so we build no advertising profiles.
Your control. A banner asks for your choice on your first visit. You can change or withdraw your choice at any time using the "Cookie preferences" link in the footer. If you decline, Google Analytics sets no cookies and stores no analytics data on your device.

1. Payments
   Subscriptions are purchased through the Vocalize web app using Stripe. Card numbers and payment details are entered into and handled by Stripe directly; the extension never receives or stores them.
2. Data retention
   Document text submitted for narration or summarization is processed to generate the audio/summary and is not retained for longer than necessary to provide and improve that result.
   Account data is retained while your account is active. When you delete your account, associated personal data is deleted or anonymized.
   Locally stored settings remain on your device until you remove the extension or clear its storage.
3. Your choices and rights
   Access/deletion. You may request access to or deletion of your account data by contacting us at voicemaster.vocalize@gmail.com.
   Sign out. Signing out removes the stored authentication token from your device.
   Uninstall. Removing the extension deletes its locally stored data.
   Depending on your location, you may have additional rights (e.g., under GDPR or CCPA), including the right to access, correct, delete, or restrict processing of your personal data.
4. Security
   We use industry-standard measures, including encryption in transit (HTTPS), to protect your data. No method of transmission or storage is completely secure, but we work to protect your information against unauthorized access.
5. Children
   Vocalize is not directed to children under 13 (or the minimum age in your jurisdiction), and we do not knowingly collect personal data from them.
6. Changes to this policy
   We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above and, where appropriate, through in-product notice.
7. Contact
   Questions or requests: voicemaster.vocalize@gmail.com.