Privacy Policy
Last updated: August 14, 2026
This policy describes how A Kirilyuk LLC handles personal data. It is not legal advice.
A Kirilyuk LLC("we", "us", "our") operates https://app.voicethere.io, the VoiceTheredashboard, APIs, CLI, hosted runtime, waitlist, and related services (collectively, the "Service"). This Privacy Policy explains what we collect, why we use it, who we share it with, and the choices you have.
Scope
This policy applies when you visit our website, join the waitlist, create an account, use the dashboard, deploy agents, connect via our APIs or CLI, or otherwise interact with the Service.
Our roles
- Controller for account, waitlist, billing, marketing consent, website analytics (when you opt in), and our own operational data.
- Processor for Customer Content — your agent code, session metadata, optional speech-to-text and text-to-speech conversation history, agent logs, and related data you upload or generate through the Service — on your instructions as the customer or organization admin.
When you use the Service on behalf of an organization, that organization is typically the controller of Customer Content; we process it under your configuration and applicable agreements.
Data we collect
- Account: email address and password (stored as hashes via Supabase Auth); optional profile fields; organization and project membership.
- OAuth sign-in: if you use Google, GitHub, or LinkedIn, we receive the profile and email address you authorize from that provider.
- Waitlist: email address; optional name and company; consent records; signup timestamp.
- Billing: billing contact details and payment information processed by Stripe (we do not store full card numbers).
- Email: we send transactional messages (authentication, billing, security, and operational alerts) and, only if you opt in, marketing about product updates. Email delivery is processed by Resend.
- Customer Content: code you deploy, session and deployment metadata, optional conversation history per project settings, agent logs, and configuration you provide.
- Technical: IP address, user agent, request timestamps, and security logs; Cloudflare Turnstile challenge data on protected forms.
- Analytics (optional): if you accept analytics cookies, Google Analytics collects pages viewed, referral source, device and browser information, and approximate location derived from IP.
Why we use personal data
- Provide, operate, and secure the Service
- Authenticate users and manage accounts, organizations, and projects
- Process waitlist signups and send invites you requested
- Bill subscriptions and usage; send billing-related communications
- Host and run your deployed agents and sessions on our infrastructure
- Diagnose errors and improve reliability
- Send product updates by email only when you have opted in to marketing
- Comply with legal obligations and enforce our Terms of Service
Legal bases (EEA/UK GDPR)
Where GDPR applies, we rely on:
- Contract — to provide the Service, accounts, billing, and support you request
- Consent — waitlist and marketing email, analytics cookies, and optional OAuth where required
- Legitimate interests — security, fraud prevention, service improvement, and operational communications, balanced against your rights
- Legal obligation — tax, accounting, and regulatory requirements
Cookies and similar technologies
We use essential cookies and local storage for authentication, consent preferences, and bot protection. Optional analytics cookies are set only after you consent. See our Cookie Policy for details.
Third-party processors
We use the following categories of service providers. They process data on our instructions under appropriate agreements, except OAuth providers where you choose to sign in directly with them.
| Processor | Purpose | Typical data | Privacy policy |
|---|---|---|---|
| Supabase | Authentication, Postgres database, and object storage for accounts, organizations, projects, waitlist, conversation history, and operational logs. | Email address, password hashes, auth identifiers, waitlist and profile fields, organization and project metadata, conversation history, agent logs, and related service data. | View policy |
| Resend | Transactional email (authentication, billing, operational alerts) and marketing email when you opt in. | Email address, name if provided, message content, delivery metadata, and engagement events. | View policy |
| Stripe | Payment processing, subscriptions, invoicing, and billing customer records. | Billing email and name, payment method tokens, invoice and transaction metadata — not full card numbers (PAN). | View policy |
| Sentry (EU region) | Error monitoring and performance diagnostics for the platform and dashboard. | Error reports that may include request URLs, user or organization identifiers, stack traces, and device or browser metadata. | View policy |
| Cloudflare | Content delivery, DNS, DDoS protection, and Turnstile bot challenges on signup and other forms. | IP address, request metadata, challenge tokens, and browser signals used for security and abuse prevention. | View policy |
| Google Analytics | Website analytics when you opt in to analytics cookies — pages viewed, referral source, and product usage trends. | Pages visited, device and browser type, approximate location derived from IP, and pseudonymous usage identifiers. | View policy |
| Optional sign-in with Google when you choose OAuth instead of email and password. | Profile information and email address you authorize Google to share with us. | View policy | |
| GitHub | Optional sign-in with GitHub when you choose OAuth instead of email and password. | Profile information and email address you authorize GitHub to share with us. | View policy |
| Optional sign-in with LinkedIn when you choose OAuth instead of email and password. | Profile information and email address you authorize LinkedIn to share with us. | View policy | |
| Infrastructure host (EU metal / Hetzner) | Physical and virtual infrastructure in the European Union where we host and operate the VoiceThere runtime, APIs, and related services. | Service data we store and process on your instructions, including deployed application code, session metadata, and operational logs. | View policy |
International transfers
A Kirilyuk LLC is a United States entity (1111b South Governors Avenue STE 20759 Dover DE 19904 United States of America). We host core runtime workloads in the European Union and use vendors in the EU, United States, and other countries. Where required, we rely on Standard Contractual Clauses, the EU–US Data Privacy Framework, or equivalent safeguards for cross-border transfers.
Retention
- Accounts: until you delete your account or we no longer need the data to provide the Service, subject to legal holds.
- Waitlist: until you withdraw consent, we launch general availability, or we no longer need the entry.
- Conversation history: according to your project retention settings and plan limits.
- Billing records: as required by tax and accounting law.
- Security logs: for a limited operational period unless longer retention is needed for investigations.
Security
We apply administrative, technical, and organizational measures appropriate to the risk, including encryption in transit, access controls, and monitoring. No method of transmission or storage is completely secure; we cannot guarantee absolute security.
Your rights
Depending on your location, you may have rights to access, correct, delete, restrict, port, or object to processing of your personal data, and to withdraw consent where processing is consent-based. You can delete your account from Settings in the dashboard. To exercise other rights, contact hello@voicethere.com. You may lodge a complaint with your local supervisory authority.
California and US state privacy
We do not sell personal information or share it for cross-context behavioral advertising as those terms are defined under applicable US state privacy laws.
Children
The Service is not directed to anyone under 18. We do not knowingly collect personal data from children.
Changes
We may update this policy by posting a revised version with a new "Last updated" date. Material changes may be communicated by email or through the Service where appropriate.
Contact
A Kirilyuk LLC
1111b South Governors Avenue STE 20759 Dover DE 19904 United States of America
hello@voicethere.com