Privacy Policy
Last updated: March 27, 2026
What is the purpose of this notice?
This Privacy Policy provides information about how MB "Su ideja" ("We," "Us," or "Our") collect, use, access or otherwise process personal data relating to visitors of https://voicecap.ai/ ("Website") or customers of our services ("Data"). It also outlines the extent of such processing, your rights regarding that Data, and how you can exercise those rights.
Who is my Data Controller?
Name: MB Su ideja Legal entity code: 305153490 Email address: hello@voicecap.ai Address: K. Baršausko g. 59, 51423, Kaunas, Lithuania
Purposes and legal basis of processing, categories of Data concerned
Provision of Services
If you are our customer or a representative of a company that is our customer, we will process your Data to conclude and execute the service agreement, enable you to create and manage your account with us, as well as provide access to and enable use of the VoiceCap platform, enable the upload and secure storage of audio recordings, generate and provide transcriptions and AI-generated outputs, such as meeting summaries, action items, and structured notes and provide you with other Services.
| Legal basis for the processing | Categories of Data concerned | Is the provision of Data a requirement? |
|---|---|---|
| Contract (Article 6(1)(b) of GDPR) Legitimate interest to perform an agreement (Article 6(1)(f) of GDPR) | Name and surname, email address, telephone number, signature, correspondence, details of the company that you represent (e.g., industry), your affiliation with the company, mailing address, account information (e.g., username and encrypted password), payment information, credit card information, and usage data (e.g., access logs, activity history, and preferences), meeting content data (audio recordings, transcripts / transcriptions generated from recordings, AI-generated outputs derived from transcripts, other meeting metadata provided by you (e.g., meeting title, date/time, participant information)) | Yes. It is a contractual requirement. If you do not provide this Data, we will not be able to provide you with our Services |
Handling your requests and inquiries
We are committed to providing support and answering any questions or complaints you might have. To effectively respond to your inquiries, it is necessary to process your Data as described below.
| Legal basis for the processing | Categories of Data concerned | Is the provision of Data a requirement? |
|---|---|---|
| Consent (Article 6(1)(a) of GDPR) | Name, surname, e-mail, contact information, date, content of and attachments to your request or inquiry, response to your request or inquiry, other communications | No |
Securing and improving our Website
We need to keep our Website safe and smooth. Thus, please be aware that upon visiting our Website, we automatically gather certain technical Data regarding your device and the use of our Website. This is a standard procedure aimed at ensuring optimal functionality and security during your browsing experience.
| Legal basis for the processing | Categories of Data concerned | Is the provision of Data a requirement? |
|---|---|---|
| Legitimate interest to secure and improve our website (Article 6(1)(f) of GDPR) | IP address, log-in information, browser type and version, operating system and platform, type of device, a unique device ID, mobile network information, mobile operating system and the type of mobile browser you use, screen resolution, general information about your use of and actions on our Website | No |
Keeping you informed and gathering your feedback about our Services
When you use our Services, consent to receive marketing communications from us, or in situations where we have a legitimate interest in informing you about our Services, we will send you newsletters, ask your opinion about our services and conduct other marketing activities as outlined below.
| Legal basis for the processing | Categories of Data concerned | Is the provision of Data a requirement? |
|---|---|---|
| Consent (Article 6(1)(a) of GDPR) Legitimate interest in conducting marketing (Article 6(1)(f) of GDPR) Upholding customer relationship (Article 81(2) of Law of the Republic of Lithuania on Electronic Communications) | Name, surname, email address, telephone number, preferences for receiving marketing communications and details about how you engage with our marketing communications | No |
Administration of our social media profiles
| Legal basis for the processing | Categories of Data concerned | Is the provision of Data a requirement? |
|---|---|---|
| Consent (Article 6(1)(a) of GDPR) | Name and surname provided in your social media profile, email address, messages, message information, attachments, comments, shares, reactions, other interactions, other Data provided | No |
Compliance with legal requirements and defence of our legal interests
We will retain the Data in accordance with statutory limitation periods to defend our rights and legal interests if necessary. Some Data must be retained to comply with legal requirements in accounting, archiving, and other areas. In rare cases, if you become involved in a legal process to which we are a party, we will use this Data for that legal process.
| Legal basis for the processing | Categories of Data concerned | Is the provision of Data a requirement? |
|---|---|---|
| Legal obligation (Article 6(1)(c) of GDPR) Legitimate interest in protecting our rights and legal interests (Article 6(1)(f) of GDPR) | Request and inquiry information, legal documents, accounting information, information specified by law | No |
How long do you keep my Data?
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected and processed, and always in accordance with applicable legal obligations. Data that is no longer needed for these purposes, and for which there is no legal requirement to retain it, is securely deleted.
Retention periods depend on the type of data and the context in which it is processed:
- Account data (e.g., name, email address, login credentials, organization details) is retained for as long as your account remains active. Following account termination, such data is deleted or anonymised within thirty (30) days, unless a longer retention period is required by law or necessary for the establishment, exercise, or defense of legal claims.
- Billing and payment data is retained for the period required under applicable tax and accounting laws for 8 years.
- Audio recordings, transcripts, AI-generated summaries, and related meeting metadata are processed on behalf of customer organizations and retained in accordance with the retention period configured by the customer within the VoiceCap platform.
- Usage logs and technical security data are generally retained for up to twelve (12) months, unless longer retention is necessary for security, fraud prevention, or legal compliance purposes.
Where do you collect my Data from?
We collect all data stored about you directly from you or via your publicly available professional profiles at the platforms of the companies listed below.
| Source of origin of data | Purpose of processing |
|---|---|
| Social media service providers | To manage and maintain our own social media profiles |
| Public authorities and legal bodies (this includes state labor, social security, tax, and supervisory authorities, law enforcement agencies, courts, prosecutors, and other state or municipal entities) | To comply with legal obligations and to protect or exercise our legal rights |
| Your representative(s), including your employer, if your employer is a client of ours | To perform Service Agreements and provide our Services |
Who do you share my Data with?
Where necessary for the above purposes and subject to applicable law, we share data with the following recipients.
| Recipients or categories of recipients | Third country | Safeguard measure |
|---|---|---|
| Providers of IT, infrastructure, servers, marketing, audio transcription, customer support, accounting, legal, agency, and other services | --- | --- |
| Courts, law enforcement institutions, tax, regulatory and other public authorities, entities performing public functions - only in cases where we are statutorily required to provide the information | --- | --- |
| Google Cloud EMEA Limited (AI audio and language processing, cloud infrastructure) | Ireland (EU) | N/A (EU entity) |
| OpenAI OpCo, LLC (AI audio and language processing) | USA | EU Standard Contractual Clauses |
| Groq, Inc. (AI audio and language processing) | USA | EU Standard Contractual Clauses |
| Eleven Labs, Inc. (AI audio and language processing) | USA | EU Standard Contractual Clauses |
| AssemblyAI Inc. (AI audio and language processing) | USA | EU Standard Contractual Clauses |
| Amazon Web Services (cloud infrastructure and IT services provider) | --- | --- |
| Neon, LLC (managed database hosting provider) | USA | EU Standard Contractual Clauses |
| Vercel Inc. (application hosting and delivery) | USA | EU Standard Contractual Clauses |
| Microsoft Corporation (IT infrastructure and services provider) | EU / USA | EU Standard Contractual Clauses |
| Facebook (Meta) (social media service provider) | USA | EU Standard Contractual Clauses |
| LinkedIn (social media service provider) | USA | EU Standard Contractual Clauses |
| Potential or actual purchasers of the business or part of it and their authorised advisers or representatives | Various | EU Standard Contractual Clauses |
What rights do I have in relation to the processing of my Data?
| My right | Summary |
|---|---|
| Right of access | The right to obtain confirmation from us as to whether Data relating to you is being processed and, if such Data is being processed, the right to have access to the Data and information about the processing. |
| Right to rectification | The right to require us to rectify inaccurate Data relating to you. |
| Right to erasure ('right to be forgotten') | When Data are no longer necessary in relation to the purposes for which they were collected or otherwise processed; when you withdraw consent on which the processing of Data is based and there is no other legal ground for the processing; when you object to the processing of Data and there are no overriding legitimate grounds for the processing, or you object to the processing for direct marketing purposes; where the Data have been unlawfully processed; where the Data have to be erased for compliance with a legal obligation; where the Data have been collected in relation to the offer of information society services directly to a child and subject to a consent. |
| Right to restriction of processing | Where the accuracy of the Data is contested by you; where the processing of Data is unlawful and you oppose the erasure of the Data and request the restriction of their use instead; where we no longer need the Data for the purposes of the processing, but they are required by you for the establishment, exercise or defense of legal claims; where you have objected to the processing of the Data and until it has been verified whether our legitimate interests override yours. |
| Right to data portability | Where you seek to receive the Data you have provided in a structured, commonly used and machine-readable form or to transmit those Data to another controller, the processing is based on consent or on a contract and is carried out by automated means. |
| Right to object | Where the collection and use of the Data is based on a task carried out in the public interest or in the exercise of official authority vested or legitimate interest, including profiling, as explained in Section 3 of this Privacy Policy, or where you object to the collection of your Data for direct marketing purposes. |
| Right to withdraw consent | Where the processing of Data is based on consent, as explained in Section 3 of this Privacy Policy, and you seek to withdraw it at any time. |
| Right to lodge a complaint | Right to lodge a complaint with a supervisory authority. |
How to submit a request?
If you wish to exercise your data protection rights, you may contact us at or send a written request to hello@voicecap.ai. Please provide sufficient information for us to verify your identity and respond appropriately. We will handle your request promptly and in accordance with applicable data protection laws, typically within one month. You also have the right to lodge a complaint with a data protection authority if you believe your rights have been infringed.
Automated decision-making, including profiling
No, we do not make decisions based solely on automated processing of Data, including profiling, which would produce legal effects concerning you or similarly significantly affect you. The platform generates transcriptions and AI-assisted summaries. Any decisions taken based on such outputs are made solely by the customer organization.
Can this Policy be amended?
We update this Policy from time to time. The latest version of this Policy can be found on https://voicecap.ai/privacy.