Privacy Notice

[Legal entity — to be registered] is the controller for personal data processed on this platform. This notice explains what is collected, why, on what legal basis, who sees it and how long it is kept. Facial images and voice recordings are treated as sensitive throughout.

Last updated 22 September 2026Version draft · pending review by counsel per market

Categories of data

—Account data: email address, password hash, role, country of residence and citizenship, authentication provider.
—Verification data: legal name, date of birth, identity document type, country and a masked document reference, liveness result; for companies, registered name, registration number and tax identifier.
—Profile data: publication initials, headline, biography, age range, gender if you choose to share it, languages, accents and physical descriptors you enter.
—Media: photographs, video and voice recordings you upload, together with technical metadata and authenticity analysis results.
—Transaction data: offers, counter-offers, declarations, licences, payments, payouts and messages.
—Consent records: which clause text you accepted, when, from which address, under which jurisdiction pack.
—Operational data: access logs, audit trail entries and aggregate traffic counts.

Legal bases

—Explicit consent for the processing of facial and voice data, which may constitute biometric or special-category data. You may withdraw it at any time with effect for the future.
—Performance of a contract for account operation, negotiation, licence generation and payment.
—Legal obligation for identity verification, tax, accounting and sanctions screening.
—Legitimate interests for fraud prevention, platform integrity, abuse detection and enforcement against unauthorised use — balanced against your rights and documented.

What is never published

Your legal name, date of birth, identity document, address, contact details, liveness recording, tax identifier and verification file are never shown on a public profile, never shown to a counterparty, and never included in search results. A person appears publicly as initials and a reference code only. A buyer is not identified to a person before a licence is paid.

Our responsibility for verification data

We accept responsibility as controller for identity verification data. Access is restricted to authorised operations personnel, every access is logged, the data is encrypted at rest and in transit, it is retained only for the period applicable law requires, and it is not used for profiling, advertising or any purpose beyond verification, fraud prevention, tax obligations and dispute resolution.

Recipients and transfers

—Infrastructure and hosting providers.
—The Merchant of Record that processes buyer payments and the payout rail that pays people.
—Identity verification and, where enabled, media authenticity providers.
—Professional advisers, and competent authorities where legally compelled.

Retention

—Media and profile data: until you delete it or close your account.
—Consent records, licences and transaction records: for the limitation period applicable to the underlying contract, as evidence of what was agreed.
—Verification data: for the period required by financial and tax law in the operating jurisdiction.
—Message originals where a circumvention or abuse flag was raised: until the matter is closed, plus the applicable limitation period.

Your rights

Depending on where you live you may have rights of access, rectification, erasure, restriction, portability and objection, the right to withdraw consent, the right not to be subject to solely automated decisions with significant effect, and the right to complain to a supervisory authority. Requests go to voce@voce.agency.

Note that authenticity screening and the pricing-guidance mechanism are decision-support tools reviewed by a person; neither produces a final decision about you without human involvement.