Privacy Policy

Xccelerated AI Ltd. ("Company," "we," "us," or "our") is a company registered in the Dubai International Financial Centre ("DIFC"), United Arab Emirates, operating the Voxbee platform ("Voxbee," the "Platform," or the "Services"), accessible via the marketing site at https://voxbee.ai and the web application at https://app.voxbee.ai.

This Privacy Policy ("Policy") describes how we collect, process, store, use, and disclose personal data in connection with your use of the Platform, in compliance with the DIFC Data Protection Law No. 5 of 2020 ("DIFC DPL"), the EU General Data Protection Regulation ("GDPR"), and other applicable privacy and data protection laws. By accessing or using the Platform, you acknowledge and agree to this Policy, our Terms of Service, Cookies Policy, and Ethical Use Guidelines.

1. Definitions

• "Personal Data" means any information relating to an identified or identifiable individual.
• "User Content" means text, audio, video, images, prompts, project data, campaign data, or other content created, uploaded, connected, or generated by you using the Platform.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data. For most processing activities described in this Policy, Voxbee acts as the Data Controller.
• "Data Processor" means a third party that processes Personal Data on behalf of a controller or service provider, including hosting, payment, analytics, communication, support, and AI infrastructure providers.
• "Voice Data" means an audio recording of a person's voice and any technical features, embeddings, or models derived from such recordings that can be linked to an identifiable individual.
• "AI Outputs" means text, audio, video, image, subtitle, music, strategy, recommendation, narration, or other content generated by or through the Platform.

2. Scope of Data Collection

The Platform collects and processes the following categories of Personal Data:

2.1 User-Provided Information

• Identifiers such as name, email address, phone number, company name, account credentials, and related profile information.
• Professional information such as job title, team role, organization, and brand or workspace details.
• Billing and commercial information such as billing address, subscription plan, AI credit purchases, invoices, tax information, and billing metadata. Payment card details are generally processed by our payment processors and are not stored by us except for limited metadata necessary for billing support and records.
• Communications such as customer support requests, chat transcripts, survey responses, and other correspondence.

2.2 User Content and Campaign Data

• Text, prompts, scripts, images, video, audio, subtitles, narration, music, and other materials created, uploaded, imported, connected, edited, or generated through Platform features.
• Brand inputs and campaign context, including website URLs, publicly available digital footprint data you ask us to analyze, tone preferences, audience inputs, campaign goals, campaign calendars, workflow settings, and performance context used by Marketing Copilot.
• Voice recordings used for dubbing, localization, speech synthesis, narration, and voice cloning, including authorized cloned voice outputs and voice models.
• Project files, edits, exports, publishing settings, scheduling instructions, channel-specific formatting selections, and localization or subtitle settings.
• Outputs from Image Gen, Video Lab, Edit Studio, Music Studio, Podcast Pro, Motion Mix, Audiobooks, Localization, Subtitles, and Text-to-Speech workflows.

2.3 Voice and High-Risk Data

• Raw Voice Data that you record, upload, or otherwise submit.
• Derived technical representations such as acoustic features, embeddings, and user voice models used to provide voice-related features.
• Where relevant to lip-sync, localization, or video processing workflows, limited facial or video frame data and related technical data may be processed to align speech and visual output.

Depending on your jurisdiction and the context of use, some of the above may be treated as biometric, sensitive, or high-risk personal data. We process such data only where necessary to provide requested features, verify authorization and consent, prevent misuse or impersonation, improve safety and performance where permitted by law, and comply with legal obligations. We do not use Voice Data to build behavioural advertising profiles.

2.4 Technical and Usage Information

• Device identifiers, IP address, browser type, operating system, time zone, language settings, and approximate geolocation derived from IP address.
• Session logs, crash logs, audit logs, API logs, performance metrics, feature access logs, button clicks, workflow events, scheduling or publishing events, and security monitoring data.
• Analytics and telemetry data collected via analytics providers, product measurement tools, and similar technologies, subject to your cookie settings and consent where required.

2.5 Consent and Permissions Data

• Consent logs and authorization records for voice cloning, third-party voice use, connected account access, and other higher-risk workflows.
• Cookie preferences, tracking consents, and related privacy preference settings.
• Enterprise configuration data, access control settings, and account administration records.

3. Methods of Collection

• Account registration, onboarding, workspace creation, plan purchase, and billing setup.
• Use of Platform features when you create, upload, connect, generate, edit, localize, schedule, publish, or export content.
• Marketing Copilot workflows, including when you submit your website URL, digital presence references, campaign goals, brand materials, and connected channel information.
• Voice and localization workflows when you upload audio, create voice clones, record voice samples, or generate dubbed or narrated outputs.
• Customer support interactions through email, chat, helpdesk, or in-app support tools.
• Cookies, similar technologies, server logs, and in-product analytics.
• Third-party integrations including authentication providers, payment processors, analytics tools, communications tools, and security providers.

4. Legal Bases for Processing

• Contractual necessity, where processing is required to create and manage your account, provide the Services you request, operate your subscription, and fulfill our contractual obligations.
• Consent, where you explicitly opt in to certain processing, including certain marketing communications, non-essential cookies, certain voice cloning workflows, and other processing where consent is required by law.
• Legitimate interests, where processing is necessary to secure, improve, monitor, support, analyze, protect, and operate the Services, provided those interests are not overridden by your rights and freedoms.
• Legal obligations, where processing is necessary to comply with laws, regulations, lawful requests, accounting obligations, fraud prevention obligations, or enforceable legal processes.

Where we rely on consent, you may withdraw it at any time, subject to the lawfulness of prior processing and subject to the fact that certain features may no longer be available if the relevant consent is withdrawn.

5. Purposes of Processing

• Service delivery, including operation of Marketing Copilot and all content production, localization, publishing, and editing features.
• Account administration, subscription management, AI credit administration, billing, invoicing, and payment processing.
• Authentication, fraud prevention, abuse detection, audit logging, and platform security.
• Processing, storing, rendering, transforming, exporting, localizing, and publishing user content and AI Outputs.
• Customer support, issue resolution, product troubleshooting, and service communications.
• Analytics, service measurement, product improvement, and feature optimization using aggregated, anonymized, pseudonymized, or otherwise lawfully processed data.
• Marketing communications and updates, where permitted by law and, where required, based on your consent or opt-in choices.
• Compliance, dispute resolution, contract enforcement, and legal defense.

5.1 AI Training and Model Improvement

In accordance with DIFC Data Protection Regulation 10 (Autonomous and Semi-Autonomous Systems), we employ robust algorithmic accountability and ethical safeguards when processing Personal Data through our AI models. We implement comprehensive technical measures to prevent algorithmic bias, secure user prompts, and ensure that generative models operate transparently. Where Personal Data or synthetic data is utilized to tune or enhance localized workflows, we rely on legitimate interests or explicit consent. Users retain control over their content, and we provide accessible opt-out mechanics within the platform dashboard to exclude User Content from internal optimization cycles. We do not disclose raw voice files or downstream user models to third-party providers for independent training.

5.2 Content Safety and Misuse Detection

We may review and analyze inputs and outputs, including limited samples of audio, video, images, text, and publishing behavior, to detect and prevent misuse of the Platform, including unauthorized impersonation, harmful deepfakes, exploitative content, hate content, fraud, spam, abuse, or intellectual property infringement. This may include automated systems and, in limited cases, human review by authorized personnel under confidentiality obligations.

6. Disclosure of Personal Data

6.1 Service Providers

• Payment processors and billing providers.
• Authentication and identity providers.
• Cloud hosting, storage, security, CDN, and infrastructure providers.
• Analytics, telemetry, support, communication, and customer engagement providers.
• AI model, speech, media generation, or related processing providers, where necessary to provide requested outputs.

All such providers are engaged subject to contractual restrictions, confidentiality obligations, and data-protection safeguards appropriate to the nature of the processing.

6.2 Legal Requirements

We may disclose Personal Data where required by law, regulation, legal process, government request, or where necessary to protect the rights, property, safety, or security of Voxbee, our users, or others.

6.3 Corporate Transactions

Personal Data may be disclosed or transferred in connection with a merger, acquisition, financing, restructuring, reorganization, insolvency event, sale of assets, or similar corporate transaction, subject to appropriate confidentiality and data-protection safeguards.

7. Cookies and Tracking Technologies

Voxbee uses cookies and similar technologies such as pixels, local storage, tags, and SDKs to ensure platform functionality, authenticate sessions, remember preferences, measure product performance, analyze feature usage, support security, and, where permitted, support communications and marketing. Essential cookies are always active where required for the Platform to function. Non-essential cookies, including analytics or marketing cookies, are used only where permitted under applicable law and, where required, based on your consent. You can manage or withdraw cookie preferences at any time through the cookie banner, cookie settings, or your browser settings. Please see our Cookies Policy for more detail.

8. International Data Transfers

Personal Data may be processed in countries outside the DIFC and outside your country of residence, including jurisdictions in which our affiliates, hosting providers, infrastructure providers, AI providers, or other processors operate. Where we transfer Personal Data internationally, we implement appropriate safeguards such as DIFC-approved transfer mechanisms, Standard Contractual Clauses, contractual controls, encryption, access controls, and other technical and organizational measures.

9. Data Retention

We retain Personal Data only for as long as necessary for the purposes described in this Policy, including to provide the Services, maintain accounts, manage subscriptions, comply with legal obligations, resolve disputes, investigate abuse, and enforce our agreements.

• Account, subscription, billing, and support records are typically retained for the life of the account and for a reasonable period afterward to satisfy legal, tax, accounting, audit, and dispute-resolution requirements.
• Voice Data, cloned voice assets, and related voice models are generally retained while the relevant feature, asset, or account remains active, and are deleted or anonymized within a reasonable period after deletion or account closure unless longer retention is required for legal, security, or abuse-prevention purposes.
• Generated content, campaign data, projects, scheduling records, and export-related data are generally retained while your projects or account remain active and may be deleted or anonymized within a reasonable period after deletion or account closure, subject to technical and legal constraints.
• Analytics, telemetry, logs, and security records are retained according to operational need, legal requirements, provider configuration, fraud-prevention requirements, and platform security requirements.

We may retain anonymized or aggregated information for longer where it no longer identifies you. Where required by law or contract, we will honor deletion or shortened-retention requests subject to legal and technical limitations.

10. User Rights

• Access your Personal Data and obtain a copy of relevant data we process about you.
• Request correction of inaccurate or incomplete Personal Data.
• Request deletion of Personal Data where applicable.
• Request restriction of processing in certain circumstances.
• Request portability of certain Personal Data in a structured, commonly used, machine-readable format where applicable.
• Object to certain processing based on legitimate interests and object at any time to direct marketing.
• Withdraw consent where processing is based on consent.
• Request additional controls over sensitive or high-risk data, subject to applicable law and technical feasibility.

10.1 California Rights

If you are a California resident, you may have additional rights under the CCPA/CPRA, including rights to know, delete, correct, and opt out of certain types of sharing as defined by applicable law. We do not sell Personal Data for money, and we do not knowingly share Personal Data for cross-context behavioural advertising as those terms are defined by applicable law, except as may be described in our cookie and tracking disclosures where applicable.

10.2 Exercising Your Rights

You may exercise applicable rights by updating your account settings where available or by contacting support@voxbee.ai. We may request information necessary to verify your identity and authority before responding. You may also contact dpo@voxbee.ai regarding data-protection requests or complaints.

11. Automated Decision-Making

The Platform does not use Personal Data to make decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you within the meaning of GDPR or comparable laws, except to the extent strictly necessary for security, abuse prevention, or service operation and as permitted by law. If this changes, we will provide required notices and safeguards.

12. Data Security

• Encryption in transit and, where appropriate, at rest.
• Role-based access controls, least-privilege permissions, and internal access restrictions.
• Network, infrastructure, and application security measures, logging, monitoring, and incident response procedures.
• Audit logging, abuse detection, rate limiting, and security monitoring controls.
• Vendor due diligence and data protection agreements where appropriate.

No system can be guaranteed to be 100% secure. You are responsible for maintaining the confidentiality of your credentials and notifying us promptly if you suspect unauthorized access or misuse of your account.

13. Children's Privacy

The Platform is not directed to individuals under 16 years of age, or under a lower age threshold only where such threshold is expressly permitted by applicable law. We do not knowingly collect Personal Data from children in violation of applicable law. If we become aware that we have collected such data unlawfully, we will take reasonable steps to delete it.

14. AI and Voice Ethics

• Users retain rights over content they create or upload, subject to our Terms of Service and applicable law.
• Voice cloning, localization, dubbing, and related features may only be used where you have all necessary rights, permissions, and consents.
• We do not use your Voice Data to create publicly available voice identities for third parties without an appropriate legal basis and, where required, your explicit agreement.
• We do not use your User Content to train unrelated third-party products outside the scope of providing and improving Voxbee without an appropriate legal basis and, where required, your consent.
• All AI-generated content remains subject to our Terms of Service and Ethical Use Guidelines.

15. Third-Party Integrations

• Authentication and sign-in providers.
• Payments and billing providers.
• Analytics, telemetry, and communications providers.
• Security, hosting, storage, and content delivery providers.
• AI model and media processing providers.
• Third-party publishing, distribution, or channel integrations where you choose to connect such services.

These providers process Personal Data in accordance with their own policies and contractual arrangements with us where applicable. We recommend reviewing the privacy practices of any third-party services you connect to or use through the Platform.

16. Policy Updates

We may update this Policy from time to time to reflect legal, regulatory, technical, operational, or product changes. Material changes will be communicated through the Platform, by email, or by other appropriate means where required by law. The latest version of this Policy will be made available at https://voxbee.ai/privacy.

17. Contact Information

If you have questions, concerns, or requests regarding this Policy or our data practices, you may contact:

Xccelerated AI Ltd.

Level 1, Innovation Hub

Dubai International Financial Centre (DIFC)

Dubai, United Arab Emirates

General & Support: support@voxbee.ai

Data Protection Officer: dpo@voxbee.ai