Privacy policy
This page is translated for convenience. If a translation differs from the English version, the English version applies.
This policy explains what personal data Advanced Technology Initiatives LLC collects when you use advancedinitiatives.com and the TrueVoice app at truevoice.advancedinitiatives.com, why we collect it, and the choices you have. In short: we check audio and then delete it, we keep only what we need to run your account and the forms you send us, and we do not sell your data.
Who we are
Advanced Technology Initiatives LLC, [registered address], is the controller of your personal data. Contact us about privacy at info@advancedinitiatives.com.
What we collect and why
Audio you check
When you record with your microphone or choose a file, your browser turns it into a short audio clip (one channel, at most the first 60 seconds) and sends it to our detection service, which returns an estimate of whether the voice is AI. The clip is held in memory only for the check and then deleted. We do not store it, we do not keep the result, and we do not use your audio to train models. We do not use audio to identify who is speaking.
Your account
To use the TrueVoice app you sign in with Google or with a code sent to your email. We keep your email address, how you signed in (Google, email or both), when the account was created and when you last signed in. From Google we ask only for your email address and whether Google has verified it. We do not receive your name, your contacts or your Google password.
Scam reports
If you send a scam report, we keep what you write and the details you choose to give: the date, how you were contacted, who the scammer pretended to be, any money lost and your country. We also note the country your connection came from and the language of the page. Your email address is kept only if you tick the box agreeing to be contacted. If you are signed in, the report is linked to your account so that it is deleted with the account.
API access requests
If you ask for access to the TrueVoice API on advancedinitiatives.com, we keep the name, email, company and details you enter, and the country your connection came from, so that we can reply.
Security and technical data
To stop abuse we use Cloudflare Turnstile, which looks at technical signals from your browser to tell people from automated programs. We use your IP address to limit how many sign-in codes, reports and checks one connection can make. For sign-in codes and reports we store only a one-way hash of it, and delete it within a day. For checks, the detection service keeps a count of checks for each IP address for one day. Our hosting provider keeps short-lived technical logs, such as the IP address and the page requested, to run and secure the service.
Legal bases
- Providing the service you asked for (contract): your account, sign-in and the audio checks.
- Legitimate interests: preventing abuse and keeping the service secure, understanding voice scams through the reports people send, and replying to API access requests.
- Consent: contacting you about a scam report, only if you tick the box. You can withdraw consent at any time by emailing us.
Who processes your data
We do not sell your personal data or share it for advertising. We use these service providers, who process data only on our instructions:
- Vercel (United States): hosting the website and storing accounts, reports and requests.
- Cloudflare (United States): the Turnstile bot check and the secure connection to the detection service.
- Google (United States): sign-in, only if you choose Continue with Google.
- Resend (United States): sending sign-in codes by email.
- Cloud computing providers: the servers that run the detection model. They receive the audio clip for the check, and your IP address for the daily limit on checks.
We may also disclose data when the law requires it, or to protect people from fraud or harm.
International transfers
Some of these providers are in the United States or in other countries outside the European Economic Area and the United Kingdom. These transfers are covered by the EU-US Data Privacy Framework and its UK extension where the provider is certified, and otherwise by the European Commission's Standard Contractual Clauses with the UK addendum.
How long we keep data
The data policy lists every item. In short: audio is not stored; accounts are kept until you delete them, or for 24 months after your last sign-in; sign-in codes last 10 minutes; scam reports and API access requests are kept for 24 months.
Your rights
Depending on where you live, including under the GDPR and the UK GDPR, you have the right to:
- see the personal data we hold about you and get a copy in a portable format;
- have it corrected;
- have it deleted. You can delete your account and its reports yourself on the data policy page;
- object to processing based on legitimate interests, or ask us to restrict it;
- withdraw consent at any time, without affecting what was done before;
- complain to the data protection authority where you live. In the United Kingdom this is the Information Commissioner's Office.
To use these rights, email info@advancedinitiatives.com from the address on your account. We reply within one month.
We do not sell or share personal information as California law defines those terms, and we do not use it for targeted advertising.
Cookies and browser storage
We use only what is strictly needed, so we do not ask for cookie consent:
- tv_session: keeps you signed in to the TrueVoice app, for 30 days or until you sign out.
- tv_oauth: protects Google sign-in, for 10 minutes while you sign in.
- Cloudflare Turnstile: the bot check described above.
- Language: the language you pick is saved in your browser's local storage and is not sent to us.
There are no advertising or analytics cookies.
Children
TrueVoice is not for children under 16, and we do not knowingly collect their data. If you think a child has given us data, email us and we will delete it.
Security
Data is sent over encrypted connections and kept in private storage that only we can reach. Sign-in codes are stored only as a one-way hash, and sessions are signed so that they cannot be forged.
Changes
If we change this policy, we will update the date at the top. For important changes we will also tell signed-in users in the app.