Privacy Policy
Last updated: January 26, 2026
1. Introduction
MB Su idėja ("VoiceCap", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered meeting transcription and summarization service.
VoiceCap is operated by MB Su idėja, a company registered in the Republic of Lithuania, with registered address at K. Baršausko g. 59, Kaunas, 51423, Lithuania.
2. Data Controller
MB Su idėja is the data controller responsible for your personal data. For any questions about this Privacy Policy or our data practices, please contact us at hello@voicecap.ai.
3. Data We Collect
We collect the following categories of data:
- Account Data: Name, email address, organization name, and authentication credentials
- Audio Recordings: Meeting audio files you upload for transcription
- Transcripts: Text generated from your audio recordings
- Meeting Summaries: AI-generated insights and action items extracted from transcripts
- Usage Data: Processing history, feature usage, and interaction logs
- Technical Data: IP address, browser type, device information, and access timestamps
4. How We Use Your Data
We process your personal data for the following purposes:
- Service Delivery: Processing audio files to generate transcriptions and AI summaries
- Account Management: Creating and managing your user account and organization
- Service Improvement: Analyzing usage patterns to improve our service (using aggregated, anonymized data)
- Communication: Sending service-related notifications and responding to your inquiries
- Legal Compliance: Meeting our legal obligations under applicable laws
We do NOT use your audio recordings or transcripts to train AI models. Your conversations remain yours.
5. Legal Basis for Processing
We process your personal data based on the following legal grounds under GDPR:
- Contract Performance: Processing necessary to provide the services you have requested
- Legitimate Interests: Improving our services and ensuring security
- Legal Obligation: Compliance with applicable laws and regulations
- Consent: Where you have provided explicit consent for specific processing activities
6. Third-Party Services
We use the following third-party services to provide our service:
- Audio transcription services (GDPR compliant)
- Google Vertex AI (Gemini): AI summarization (GDPR compliant)
- Amazon Web Services (AWS): Secure file storage in S3 and transactional email via SES (EU region)
- Neon: Database hosting (EU region)
All our service providers are contractually bound to process data only as instructed and maintain appropriate security measures. We have Data Processing Agreements in place with all processors.
7. Data Retention
We retain your data as follows:
- Account Data: Retained while your account is active, deleted within 30 days of account closure
- Audio Recordings: Retained according to your organization's configured retention policy, or deleted upon request
- Transcripts and Summaries: Retained according to your organization's configured retention policy
- Usage and Technical Data: Retained for up to 12 months for security and analytics purposes
You can request deletion of your data at any time by contacting us at hello@voicecap.ai.
8. Data Security
We implement appropriate technical and organizational measures to protect your data:
- Encryption: AES-256 encryption for data at rest, TLS 1.3 for data in transit
- Access Controls: Role-based access control and authentication requirements
- Infrastructure: SOC 2 Type II and ISO 27001 certified infrastructure providers
- Monitoring: Continuous security monitoring and audit logging
All data is stored exclusively within the European Union. Processing is fully GDPR compliant.
9. Your Rights Under GDPR
As a data subject, you have the following rights:
- Right of Access: Request a copy of your personal data
- Right to Rectification: Request correction of inaccurate data
- Right to Erasure: Request deletion of your personal data
- Right to Restriction: Request restriction of processing
- Right to Data Portability: Receive your data in a structured, machine-readable format
- Right to Object: Object to processing based on legitimate interests
- Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent
To exercise any of these rights, please contact us at hello@voicecap.ai. We will respond to your request within 30 days.
10. International Data Transfers
Your data is processed and stored within the European Union. We do not transfer personal data outside the EU/EEA unless required for specific service functionality, in which case appropriate safeguards (such as Standard Contractual Clauses) are in place.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on our website and updating the "Last updated" date. Your continued use of the service after any changes constitutes acceptance of the updated Privacy Policy.
13. Contact Us
If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:
MB Su idėja K. Baršausko g. 59 Kaunas, 51423 Lithuania Email: hello@voicecap.ai
You also have the right to lodge a complaint with the Lithuanian State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija) if you believe we have violated your data protection rights.