Privacy notice
Last updated 2026-10-23.
Who is responsible
Invership B.V., Mechelenstraat 66, 4826 KN Breda, the Netherlands, KvK 97741876, is the controller for the personal data described here. Questions and requests: [email protected].
The short version
- Audio and text sent to the API are scored in memory and dropped. They are never stored and never used for training unless your account opts in.
- We keep one usage line per API request (time, endpoint, status, audio length, score) to count your limits and bill you.
- We do not sell personal data and do not use advertising trackers. This website sets no cookies; it remembers your language choice in your browser only.
What we process, and why
| Data | Purpose | Legal basis | Kept |
|---|---|---|---|
| Email address, account and key records | Run your account, send service and billing notices | Contract | Until you close the account, then 30 days |
| API audio and text | Produce the score | Contract | Seconds, in memory only |
| API usage lines | Limits, billing, abuse prevention, fixing faults | Contract and legitimate interest | 13 months |
| Learner app recordings and progress | Score practice and schedule it; recordings only if you choose to keep them | Contract | Until you delete them or close the account |
| Billing records (via Paddle) | Payments, invoices, tax | Legal obligation | 7 years, as Dutch tax law requires |
| Messages you send us | Answer you and improve the service | Legitimate interest | 2 years |
| Technical logs (IP address, time, request path) | Security and keeping the service up | Legitimate interest | 30 days |
Who else handles data
- Paddle (Paddle.com Market Ltd, UK) is our reseller and Merchant of Record. It processes payment and billing details as an independent controller under its own privacy notice. We never see your full card details.
- Cloudflare (Cloudflare, Inc.) hosts this website and carries traffic to the service, as our processor.
- Google (Gmail) carries email we exchange with you, as our processor.
Some of these providers are outside the European Economic Area. Transfers rely on the EU-US Data Privacy Framework or the European Commission's standard contractual clauses. The scoring itself runs on our own machine in the Netherlands.
Your rights
You may ask to see, correct, export or delete your personal data, to restrict or object to its use, and to withdraw consent where we rely on it. Write to [email protected]; we answer within one month. You may also complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens.
Children
The service is not meant for children under 16, and we do not knowingly process their data.
Changes
We will post changes here and, for material ones, email account holders first.