What Information Do We Collect?
In short: We collect information you provide, information created when you use Connect, and limited information collected automatically for security, support, analytics, and service operation.
Information you provide
This may include your name, email address, username, authentication data, support messages, feedback, organization details, subscription details, and information you include in a contact request.
- Account data: Firebase Authentication manages account credentials. Connect does not store plaintext passwords.
- Voice and conversation data: Live audio, optional transcripts, translation context, voice settings, and related metadata needed for the features you enable.
- Optional voice features: Voice samples, voiceprints, or speaker-identification data when you enable voice personalization, speaker identification, or related features.
- Billing data: Subscription and transaction information. Stripe processes payment credentials; Connect does not store full card numbers or CVV codes.
- Operational records: Firestore records may include profiles, customer and organization records, licenses, voice metadata, translation contexts, dictionaries, feedback, issue reports, notifications, datasets, and service metadata.
Information collected automatically
We may collect IP address, approximate IP-based location, device and browser characteristics, operating system, language, referring URLs, pages or features used, session data, error reports, performance information, and security logs.
We do not request or store precise GPS location for Connect. Cookies, local storage, and similar technologies are described in our Cookie Policy.
Information from third parties
We do not purchase personal information from data brokers. If you choose Google or another supported sign-in option, the authentication provider may provide basic account information needed to create or access your Connect account.
Voice processing: Live audio may be sent to Soniox for speech recognition and translation and to Cartesia for translated voice output. Optional speaker matching may create a temporary Firebase Storage object. Optional transcripts may remain on your device until you delete them. Do not submit another person's voice unless you have provided any required notice and obtained any required permission.
How Do We Process Your Information?
We process personal information only as needed to operate Connect, respond to you, protect the service, comply with law, or carry out another purpose described here.
- Provide Connect: Real-time speech recognition, translation, transcription, translated voice output, account access, and optional voice features.
- Manage accounts and subscriptions: Authentication, licensing, billing, refunds, disputes, and account administration.
- Support users: Respond to requests, troubleshoot problems, and investigate feedback or issue reports.
- Secure and improve the service: Prevent abuse and fraud, diagnose errors, monitor reliability, and understand permitted usage trends.
- Analytics: Measure website and product use through Google Analytics, Amplitude, and Microsoft Clarity only where the applicable consent choice permits it.
- Communications: Send service messages and, where permitted, marketing communications. You can unsubscribe from marketing emails using the unsubscribe link in the email.
- Legal and compliance: Maintain records, enforce terms, respond to lawful requests, and meet accounting, security, or legal obligations.
What Legal Bases Do We Rely On?
EU and UK users
Depending on the purpose and context, we may rely on:
- Performance of a contract: To provide Connect, manage your account, and deliver requested features.
- Consent: For optional analytics, cookies, voice-identification features, voice samples, or other processing that requires permission.
- Legitimate interests: To secure, maintain, troubleshoot, and improve Connect, provided those interests do not override your rights.
- Legal obligation: To comply with legal, accounting, regulatory, or law-enforcement requirements.
- Vital interests: In exceptional situations where processing is necessary to protect a person's vital interests.
Other regions
In Canada, Japan, the United States, and other regions, we process information under the consent, contractual, statutory, and other lawful grounds available under applicable law. You may withdraw consent where consent is the basis, although withdrawal does not affect prior lawful processing or other lawful grounds.
Important: We do not sell personal information for money and do not use it for targeted advertising. Some laws use broader definitions such as “sharing”; contact us if you want to exercise an opt-out right.
When and With Whom Do We Share Personal Information?
We share information only with service providers and other parties that need it for the purposes described in this policy, to comply with law, or in connection with a business transaction. Providers are expected to process information under their agreements with us and applicable law.
| Provider or category | Purpose | Examples of information |
|---|---|---|
| Firebase / Google Cloud | Authentication, Firestore, Cloud Storage, Cloud Functions, hosting infrastructure, and Google sign-in | Account, profile, configuration, voice metadata, translation context, service records |
| Soniox | Speech recognition and real-time translation | Live audio, language settings, and translation context |
| Cartesia | Text-to-speech, translated voice output, and optional voice personalization | Text or audio needed for the selected voice feature |
| PyannoteAI (optional) | Speaker identification and voiceprint enrollment | Short voice samples and speaker-identification data |
| Google Analytics, Amplitude, and Microsoft Clarity | Consent-based website/product analytics and session diagnostics | Device, approximate IP, usage events, page interactions, and replay data where enabled |
| Stripe | Subscription billing and payment processing | Billing and transaction information; Stripe handles payment credentials |
| Sentry | Error and performance monitoring | Technical diagnostics, account identifiers, and error context |
| Resend | Transactional and selected marketing email delivery | Email address, message content, and delivery events |
| Vercel and Hetzner | Website, API, CDN, and server infrastructure where configured | Request, IP, device, and technical metadata |
Provider locations, retention periods, onward transfers, and contract terms vary by service and configuration. See our current provider list for the providers we publicly identify.
Other users and business transfers
During a call or meeting, participants may see or hear information another participant chooses to share, such as a display name, voice, audio, or translated speech. This information is not intended to be publicly visible outside the relevant session. We may also disclose information during a merger, acquisition, financing, sale of assets, or similar business transaction, subject to applicable law.
Do We Use Cookies and Tracking Technologies?
We use essential cookies and similar technologies to operate the website, remember preferences, and protect accounts. With the applicable consent choice, we may use Google Analytics, Amplitude, and Microsoft Clarity for analytics, product improvement, and session diagnostics.
Microsoft Clarity may record interactions such as clicks, scrolling, and page activity when enabled. We do not use these tools to run targeted advertising or sell personal information. You can manage cookies through your browser and the controls described in our Cookie Policy.
Google Analytics also provides an opt-out mechanism at Google's Analytics opt-out page.
Do We Offer Artificial-Intelligence-Based Products?
Yes. Connect uses artificial-intelligence services for speech recognition, transcription, translation, text-to-speech, translated voice output, voice personalization, and optional speaker identification.
Depending on the feature you select, your audio, text input, translated output, voice sample, and related settings may be processed by Soniox, Cartesia, PyannoteAI, or another provider identified in this policy. You may decline optional AI features, refuse to provide a voice sample, or disable microphone access in your device settings.
Connect does not use automated voice-derived estimates to make decisions that produce legal or similarly significant effects. Optional gender estimation is used only to support selected voice-personalization features and can be declined.
Is Your Information Transferred Internationally?
Yes. Connect and its providers may process information in the United States, Europe, Asia, and other countries where a provider operates. The exact location depends on the service and configuration. This may include Firebase/Google Cloud, Cartesia, Soniox, PyannoteAI, analytics, billing, email, hosting, and diagnostic providers.
Transfer safeguards
Where required, we will use an applicable transfer mechanism and supplementary safeguards, which may include the European Commission's Standard Contractual Clauses or another lawful mechanism. We do not claim that this policy itself is a DPA or that one single mechanism applies to every provider. You may contact us for current transfer information relevant to your request.
How Long Do We Keep Your Information?
- Live audio and temporary processing: Kept only as long as needed to provide the requested feature, subject to provider retention settings.
- Local transcripts: Stored on your device until you delete them.
- Voiceprints and optional voice data: Kept only while needed for the enabled feature or until you delete the data or close the account.
- Account and service records: Kept while needed to provide Connect, support the account, secure the service, or meet legal obligations.
- Billing and transaction records: Kept as needed for subscriptions, refunds, disputes, fraud prevention, accounting, and law.
- Analytics, diagnostics, and email records: Kept according to the relevant provider settings and operational or legal need.
When supported data is deleted through Connect, it is removed from active Firestore or Cloud Storage locations after the deletion operation completes. Production backup copies may remain separately for up to 98 days, and point-in-time recovery may retain copies for up to 7 days. Restoring or exporting a backup can create another copy. Provider retention is governed by the provider's configuration, agreement, and policy.
How Do We Keep Your Information Safe?
We use reasonable technical and organizational measures appropriate to the information and services involved, including:
- TLS encryption for data in transit between the app and our services.
- Provider-managed access controls and encrypted storage for account and voice data.
- Firebase authentication and server-side authorization for protected operations.
- Application logging and error monitoring subject to redaction and retention configuration.
- Operational controls intended to reduce unauthorized access and service abuse.
Security disclaimer: No electronic transmission or storage system is completely secure. Do not reuse passwords, keep your account secure, and use Connect from a trusted environment.
Do We Collect Information From Minors?
Connect is not directed to children under 18, or the equivalent age required by law in the relevant jurisdiction. We do not knowingly collect or market to minors. If we learn that we collected personal information from a minor, we will take reasonable steps to deactivate the account and delete the information. Contact us if you believe this has occurred.
What Are Your Privacy Rights?
Depending on your location and applicable law, you may have the right to access, correct, delete, or export your information; restrict or object to processing; withdraw consent; opt out of certain analytics or sharing; and request human review of a decision that has legal or similarly significant effects.
Marketing choices
You can unsubscribe from marketing and promotional emails at any time by clicking the unsubscribe link in the email. You may also contact us. We may still send service, security, billing, or account-related messages that are necessary to operate Connect.
How to exercise your rights
Submit a request through our contact page or email support@belora-connect.com. We may verify your identity and will respond within the period required by applicable law. Authorized agents may be required to provide proof of authority.
If we decline a request where an appeal is available, contact us through the same channels and we will explain the applicable appeal process.
Controls for Do-Not-Track Features
Browsers and devices may offer Do-Not-Track or similar settings. Because there is no consistent technical standard, Connect does not currently respond to every DNT signal. We do honor applicable consent choices and the controls described in our Cookie Policy.
Do US Residents Have Specific Privacy Rights?
Residents of states with applicable privacy laws may have rights to know, access, correct, delete, obtain a copy of, or opt out of certain processing. The exact rights and exceptions depend on the state and the facts of the request.
Categories processed in the preceding 12 months
| Category | Examples | Collected? |
|---|---|---|
| A. Identifiers | Name, email, account name, online identifier, IP address | Yes |
| B. California customer records | Name, contact, account, subscription, and billing-related information | Yes |
| C. Protected characteristics | Optional gender estimate and other information voluntarily provided | Limited / optional |
| D. Commercial information | Subscription, transaction, and purchase information | Yes |
| E. Biometric information | Voice samples or voiceprints for optional speaker features | Limited / optional |
| F. Internet or network activity | Feature use, browsing, diagnostics, and analytics events | Yes, consent where required |
| G. Geolocation | Approximate location inferred from IP or analytics | Yes; no precise GPS |
| H. Audio, electronic, or sensory data | Live voice audio, translated audio, and related recordings where enabled | Yes |
| I. Professional information | Employment history or qualifications | No for service use |
| J. Education information | Student records | No |
| K. Inferences | Optional voice-derived estimate used for personalization, not legal/significant decisions | Limited / optional |
| L. Sensitive personal information | Account login information and optional biometric voice data | Yes, limited to stated purposes |
We do not sell personal information for money or use it for targeted advertising. We may disclose the categories above to the providers listed in Section 4 to operate Connect. Where applicable, you may request access, correction, deletion, portability, limitation of sensitive-data use, or opt-out of profiling or sharing by contacting us.
AI Voice Processing and Biometric Data
Connect uses AI services for speech recognition, translation, transcription, text-to-speech, translated voice output, and optional voice personalization or speaker identification. Live audio and short voice samples may be sent to Soniox, Cartesia, PyannoteAI, or another provider identified in Section 4.
Optional voice personalization and speaker-identification features may create or use a voiceprint or other biometric voice information. These features are not required for basic translation. You may decline them, disable microphone access, or request deletion. Connect does not sell voice recordings, voiceprints, or biometric information.
Do We Make Updates to This Notice?
Yes. We may update this policy as our Services, providers, or legal obligations change. The “Last updated” date at the top will show when the policy was revised. If a change is material, we may provide additional notice through the Services or by email where appropriate.
How Can You Contact Us About This Notice?
Connect is operated by BeLora Labs, Inc. For privacy questions, rights requests, or complaints, contact us through the Contact & Support page or email support@belora-connect.com.
We do not publish a postal address on this page. We may verify your identity before responding.
How Can You Review, Update, or Delete Your Information?
You can manage available account information through your Connect account settings or submit a request through our contact page. We will consider and act on the request under applicable law. Active account data is deleted or deactivated when the request is completed, subject to legal, security, fraud-prevention, billing, and backup limitations described in Section 8.
