Wordtandem is an independent project operated by Michael Cantrell ("Wordtandem", "we", or "us"). Michael Cantrell is responsible for the personal information described here. This policy explains how we handle personal information when you use our website, web app, desktop or mobile app, and related services (together, the "Services").
Here is the short version: we collect the information needed to run your account, sync your scripts, provide voice tracking, and handle billing and support. We do not sell personal information or use it for advertising. We do not keep a recording of audio sent to VoiceFollow Pro.
1. Information We Collect
1.1 Information You Provide to Us
- Account Information. When you register for an account, we collect your email address, an optional display name, and a cryptographically hashed representation of your password. We do not store passwords in plain text.
- Content. Scripts are saved on your device. While you are signed in, every script you create, import or edit is saved to your account automatically and synced, so it is available on your other devices. Scripts made while signed out stay on that device unless you choose to add them to your account. A copy of your account's scripts is also kept in the browser or app you use, and it stays there after you sign out so unsynced changes are not lost; to remove it from a shared device, clear the site data for wordtandem.com in that browser (or remove the app).
- Communications. If you contact us for support or other purposes, we collect the contents of your communications and your contact details.
Account details are needed to provide a signed-in account, and billing details are needed for a paid plan. Camera access, microphone access and script syncing are optional, but features that need them will not work if you decline. You can revoke camera or microphone permission in your browser or device settings.
1.2 Information Collected Automatically
- Usage Data. We record the number of minutes of cloud voice-tracking services consumed in each calendar month in order to administer plan allowances.
- Technical Data. Our infrastructure providers log Internet Protocol addresses, browser and device characteristics, request timestamps, and error diagnostics.
- Cloudflare Performance Measurement. Our hosting provider also injects a Cloudflare real-user monitoring (RUM) beacon to measure page loading and performance. Cloudflare describes this measurement as cookie-free and without browser storage or persistent visitor identifiers. It is separate from optional Google Analytics and can run when you decline Analytics; the Analytics preference and its privacy-signal controls govern Google Analytics only. See Cloudflare's RUM documentation for the provider's handling of performance data.
- Former Server-side Bot Analytics (Ahrefs). Until October 14, 2026, our Cloudflare configuration included an Ahrefs Bot Analytics integration. When we removed it on October 14, 2026, it applied to requests to our website (wordtandem.com) and our voice service (dg.wordtandem.com). Its Ahrefs component was installed in our Cloudflare account on September 30, 2026; we have not confirmed when it began applying to requests, or which of these addresses it applied to before October 14. For each request it applied to, it sent Ahrefs the full requested address, including any query string, together with the IP address, browser user-agent, referring page, request method, response status and content type, and HTTP message-signature headers when a request carried them. It did not send cookies or the content of requests or pages. Requested addresses for our voice service could include a short-lived voice access token and words selected from the script being read. This integration ran independently of your Google Analytics choice. Since its removal, requests are no longer sent to Ahrefs. We have not confirmed which requests Ahrefs received before then or how long Ahrefs keeps the data it received; contact us about this processing or a particular record.
- Optional Website Analytics. Only if you choose Allow analytics, our public website pages load Google Analytics. It measures page views and standard visit, session and engagement events, with browser, device, language, screen and approximate location information. Google receives your IP address to process the request and derive approximate location; Google states that Analytics does not log or store individual IP addresses. Analytics uses cookie identifiers to recognize visits; this is not anonymous processing. We send only fixed public-page addresses and titles, removing query strings and fragments. Referrers are limited to the origin of selected public search and social websites. We do not send email addresses, account identifiers, scripts, form contents or advertising identifiers. We do not measure signups, purchases, link clicks or form submissions with Analytics. Advertising storage, advertising personalization and advertising user-data consent remain denied. Enhanced Measurement is off. Analytics is excluded from sign-in, signup, account and other private pages, the prompter, and desktop and mobile applications. Declining does not affect these services.
- Cookies and Analytics Preference. We use a strictly necessary cookie to maintain your authenticated session. Optional Analytics cookies have a nonrolling lifetime of up to 30 days. We remember your separate analytics choice in browser storage for up to 30 days; after it expires we ask again. Google code is not loaded before opt-in. Use Analytics preferences in the public-page footer to decline or withdraw consent. Withdrawal immediately disables collection, deletes our Analytics cookies and refreshes the page to stop the loaded tag. Previously collected information is not erased by withdrawal; contact us for a deletion request. Browser privacy signals (Global Privacy Control or Do Not Track) keep Analytics off.
1.3 Audio Input
The Services offer two categories of speech recognition. Basic voice
recognition uses the speech-recognition capability built into your web
browser; audio handling in that mode is governed by your browser vendor's own
privacy policy, and we neither receive nor process that audio. VoiceFollow
Pro sends microphone audio to Deepgram, our speech-to-text provider, to
create the live transcript that keeps the prompter in place. It also sends a
limited list of distinctive names and terms selected from your script so those
words are more likely to be recognized correctly. We set mip_opt_out=true on every request. Deepgram states that opted-out
content is kept only as long as needed to process the request and is excluded
from its model-improvement program. We do not make or keep a separate copy.
When cloud minutes run out or cloud access is denied, Wordtandem can switch automatically to Basic recognition where your browser supports it. Audio in Basic mode follows the browser vendor’s privacy policy described above.
1.4 Camera and Recordings
Camera preview and recordings made in Wordtandem are processed on your device. Videos can contain both camera images and microphone audio. The local recordings library stores video data and details such as names, dates, sizes and durations in your browser or app. For recordings saved to a chosen file, it may instead store a file reference so you can find the recording again. You can preview, export and delete local library copies. Exported files remain in the location you chose until you remove them separately.
Wordtandem does not upload or store your video recordings on its servers. Clearing browser or app data can remove local library copies. Account deletion does not erase exported files or local recordings on your devices.
Optional CamBridge controls in the desktop app communicate with your configured camera-control service to show camera status and monitoring images and send camera commands. They do not upload recordings to Wordtandem. Camera-card recordings remain on the camera until you transfer them using your own workflow.
1.5 Information Stored on Your Device
The prompter stores scripts, preferences, and recent diagnostic information in local browser or app storage so it can remember your setup. The desktop and mobile apps may store a device sign-in key in the operating system's secure credential storage. You can clear local scripts and settings from the app or through your browser controls.
1.6 Optional Phone Controller
If you pair another device as a controller, we store a pairing record associated with your account, protected pairing keys as hashes, reading status, and short-lived playback and scroll commands. This feature does not send your script, microphone audio, or camera feed to the controller service. Pairings stop working after two hours or when you end them. Expired records are removed during subsequent pairing cleanup; ending a pairing removes its records immediately.
1.7 Information We Do Not Collect
We do not collect or store payment card numbers, bank account details, or digital-wallet credentials. Stripe collects and manages payment methods on its own pages. We receive customer, subscription, invoice and billing-event identifiers, plan and payment status, and the amounts of plan changes we show you, as needed to manage your plan. We do not purchase personal information from data brokers.
2. Biometric Information
Wordtandem does not use your voice or camera image to identify or authenticate you. Our voice-tracking integration transcribes speech; it does not perform speaker identification, voice verification or speaker diarization, and we do not create or store voiceprints for identification. Camera recording does not perform facial identification.
Ordinary audio and video may still contain personal or sensitive information. Local recordings can retain your voice and image on your device as described in Section 1.4. This is separate from the transient speech-processing service.
3. How We Use Personal Information
We process personal information for the following purposes:
- To create, authenticate, and administer your account;
- To provide the Services, including synchronizing your content across your devices and delivering voice-tracking functionality;
- To measure consumption against plan allowances and to process billing;
- To communicate with you regarding your account, transactions, service changes, and support requests;
- To maintain the security and integrity of the Services, to detect and prevent fraud or abuse, and to diagnose technical faults;
- To comply with applicable legal obligations and to establish, exercise, or defend legal claims.
We do not use your scripts, microphone audio or recordings to train machine-learning models. Our VoiceFollow Pro integration opts out of Deepgram's model-improvement program. Basic recognition is supplied by your browser vendor and is subject to that vendor's handling of audio.
4. Legal Bases for Processing (EEA and United Kingdom)
Where the General Data Protection Regulation or the UK GDPR applies, we rely on the following legal bases:
| Purpose | Legal Basis |
|---|---|
| Provision of the Services; account administration; billing | Performance of a contract (Art. 6(1)(b)) |
| Security, fraud prevention, service improvement | Legitimate interests (Art. 6(1)(f)) |
| Optional Analytics on our public website | Consent (Art. 6(1)(a)), withdrawable through Analytics preferences |
| Retention of financial records | Legal obligation (Art. 6(1)(c)) |
5. Disclosure of Personal Information
We do not sell personal information, and we do not share personal information for cross-context behavioral advertising, as those terms are defined under the California Consumer Privacy Act, as amended.
We disclose personal information to the following categories of recipients:
5.1 Service Providers
| Provider | Function | Categories Disclosed |
|---|---|---|
| Cloudflare, Inc. | Hosting, database, edge compute and technical performance measurement | Account data, content, usage data, technical data |
| Deepgram, Inc. | Speech-to-text processing for VoiceFollow Pro | Audio input and a limited list of script-derived names and terms (processed for the request; excluded from model improvement) |
| Stripe, Inc. | Payment and subscription processing, including stored payment methods and supported digital wallets | Email address, billing and transaction data |
| Resend (Plus Five Five, Inc.) | Transactional email delivery | Email address and email contents, such as verification links and account notices |
| Ahrefs (removed October 14, 2026) | Former server-side Bot Analytics integration | Request metadata as described in Section 1.2; which requests were sent before removal, and Ahrefs’ retention of data it received, are not yet confirmed |
| Google Analytics | Optional public-page measurement | Sanitized public page and referrer information, cookie identifiers, browser/device/session/engagement information and approximate location; IP address processed as described in Section 1.2 |
We use these providers under their service terms and applicable data protection commitments. Some providers, including payment providers, also process information for their own legal, security and compliance purposes under their privacy policies.
5.2 Other Disclosures
We may disclose personal information where required by law, subpoena, or other legal process; where necessary to protect the rights, property, or safety of Wordtandem, our users, or the public; and in connection with a merger, acquisition, financing, or sale of assets, in which case we will require the recipient to honor commitments made in this Policy.
6. Data Retention
| Category | Retention Period |
|---|---|
| Optional website Analytics | Analytics cookies and your browser preference expire within 30 days. Collected Analytics reports follow Google’s property retention settings and provider policy; cookie expiry does not delete previously collected reports. Contact us about a particular record or deletion request. |
| Account information | While your account is open. Closing your account deletes your account record and sign-in sessions, device sign-in keys, phone-controller pairings, pending email and password links, and your plan, pending checkout and price-quote records from our application database. The records listed below as kept after closure are the exceptions. |
| Synced scripts | Until you delete them or close your account. Deleting a script erases its name and text; an empty placeholder that lets your other devices sync the deletion remains until you close your account. |
| Usage records | Monthly usage totals in our application database are kept while your account is open; there is currently no scheduled age-based deletion of those totals. They are deleted when you close your account. Our voice relay keeps a separate usage record linked to your account identifier (plan, minutes used in the current month and when the service was last used; no audio, transcript or email address). While your account exists, no automatic deletion period is set for it. When you close your account we also delete the voice-tracking records our voice relay keeps for it: your monthly usage counters (including any internal evaluation usage), any reserved session capacity, and any usage waiting to be copied to your account record, and any voice session running at the time is normally ended within about 15 seconds (if our application cannot be reached at that moment, within about five minutes). A running trial session can briefly retain a marked session record and its reserved capacity until final metering settles; it cannot start a new session. After settlement, for up to 24 hours after closure the relay keeps only a random account identifier, with no name, email or usage, so that a session started just before closure cannot recreate the record; it is then deleted too. If the relay cannot be reached when you close your account, we record the outstanding deletion and retry it. Logs held by our hosting provider (Cloudflare) follow its own retention, and licence keys we issued to you directly are separate licences that closing an account does not delete. Security records may also remain, as described below. |
| Billing and transaction records | Our records contain Stripe identifiers, not card details. When a subscription ends, is replaced or is removed by an administrator, we record its Stripe customer and subscription identifiers with your account identifier. We also keep the identifiers of billing events we have processed, notes about billing problems that need review, and a record of each paid plan you agree to: the plan, billing cycle, price and amount shown, renewal interval, included VoiceFollow Pro minutes, the Terms and Privacy Policy revisions in force, and when you agreed. You can see your own plan records on your account page. These records are kept after you close your account, so that charges and disputes can still be traced, and no automatic deletion period is set. We keep them while they may be needed for tax, accounting, dispute and legal purposes; contact us to ask about deleting them. Closing your account cancels your subscription but does not delete your customer record at Stripe, which keeps your email address, payment details and invoices under its own policy. |
| Records of administrator actions | When an administrator changes, suspends or deletes an account, we record the action, which can include the account's email address. These records are kept after the account is closed so account disputes can be traced; no automatic deletion period is set. |
| Support communications | As long as reasonably needed to answer the request and keep support records |
| Technical and diagnostic logs | For the shortest period reasonably needed for security and troubleshooting, subject to provider settings. Rate-limiting counters, which can be keyed by email address, IP address or account identifier (including a count of the cloud voice sessions you start), are normally removed about a day after they stop mattering. |
| Local recordings and exported videos | Until you delete them or local storage is cleared; exported copies are controlled separately on your device |
| VoiceFollow Pro input | Only for the time needed to process the request; we do not keep a recording |
Deleting information from the active application database may not immediately remove copies in provider backups or security records. Retention depends on the record type, operational recovery needs and applicable legal obligations. Contact us for information about a particular record or deletion request.
7. Your Rights and Choices
7.1 Rights Available to All Users
Subject to applicable law, you may request to access, correct, delete, or obtain a portable copy of your personal information, and may object to or request restriction of certain processing. Requests may be submitted to privacy@wordtandem.com. We will respond within forty-five (45) days where the CCPA applies and within one (1) month where the GDPR or UK GDPR applies, subject to permitted extensions.
7.2 California Residents
In the preceding twelve (12) months, we collected the categories of personal information identified in Section 1 for the business purposes identified in Section 3, and disclosed them to the categories of recipients identified in Section 5. We did not sell or share personal information. Where the CCPA applies, California residents have the right to know, delete, correct, and opt out of sale or sharing, and the right not to receive discriminatory treatment for exercising these rights. You may designate an authorized agent to submit requests on your behalf. We may ask for information reasonably needed to verify your identity and the agent's authority. We do not require you to create a new account to make a request.
7.3 Opt-Out Preference Signals
We do not sell or share personal information for cross-context behavioral advertising. We also honor Global Privacy Control and Do Not Track by keeping optional website Analytics off.
7.4 Residents of Other United States Jurisdictions
If a state privacy law applies to us, residents may have rights to access, correct, delete, or obtain a copy of their information, and to appeal a request we deny. Use the email address in Section 12 to make a request or appeal.
7.5 EEA and United Kingdom Residents
You may object to processing based on legitimate interests, request restriction or erasure where applicable, and lodge a complaint with your local data-protection authority, including the UK Information Commissioner’s Office. Where processing relies on consent, you can withdraw it without affecting processing that was lawful before withdrawal. We do not use your information for automated decisions that produce legal or similarly significant effects. Contact us for information about the countries, recipients and safeguards applicable to an international transfer of your information.
8. Security
We maintain administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, disclosure, alteration, and destruction. These include encryption of data in transit, password hashing using industry-standard key-derivation functions, and restriction of production access to authorized personnel. No method of transmission or storage is entirely secure, and we cannot guarantee absolute security. We will notify affected individuals and applicable regulators of a personal data breach where required by law.
9. International Users
The Services are operated from the United States. Our providers may process information in the United States and other countries where they operate. Those countries may have different data-protection laws from the place where you live.
10. Children's Privacy
The Services are not directed to children under thirteen (13) years of age, and we do not knowingly collect personal information from such children. If we become aware that we have collected personal information from a child under thirteen, we will delete it promptly. A parent or guardian may contact us at the address in Section 12. Where local law requires consent from a parent or guardian for an older child, the child may use the Services only with that consent.
11. Changes to This Policy
We may amend this Policy from time to time. We will revise the "Last Updated" date above and, where changes are material, provide notice by email or through the Services before the changes take effect.
Revision 2026-10-18-r1 adds the record of each paid plan you agree to, described under billing and transaction records in Section 6. It is kept with the other billing records, including after you close your account.
Revision 2026-10-16-r1 describes existing behavior more precisely and does not change what we collect or share: scripts made while signed in sync automatically, a copy stays in your browser after sign-out, and the timing of ending a running voice session at account closure when our application is unavailable.
12. Contact Us
Questions, requests, and complaints about this Policy may be directed to:
Michael Cantrell, independent operator of Wordtandem
privacy@wordtandem.com
Questions about this? support@wordtandem.com