Wordtandem is an independent project operated by Michael Cantrell ("Wordtandem", "we", or "us"). This policy explains how we handle personal information when you use our website, web app, desktop or mobile app, and related services (together, the "Services").
Here is the short version: we collect the information needed to run your account, sync your scripts, provide voice tracking, and handle billing and support. We do not sell personal information or use it for advertising. We do not keep a recording of audio sent to VoiceFollow Pro.
1. Information We Collect
1.1 Information You Provide to Us
- Account Information. When you register for an account, we collect your email address, an optional display name, and a cryptographically hashed representation of your password. We do not store passwords in plain text.
- Content. Scripts are saved on your device. If you sign in, we also store the scripts you choose to sync so they are available on your other devices.
- Communications. If you contact us for support or other purposes, we collect the contents of your communications and your contact details.
1.2 Information Collected Automatically
- Usage Data. We record the number of minutes of cloud voice-tracking services consumed in each billing period in order to administer plan allowances.
- Technical Data. Our infrastructure providers log Internet Protocol addresses, browser and device characteristics, request timestamps, and error diagnostics.
- Website Analytics. Our public marketing pages (the home page, pricing, download, comparison, contact and legal pages) load Ahrefs Web Analytics. It is not loaded inside the prompter, in the desktop or mobile applications, or on signed-in account pages. It measures page views and outbound link clicks. It receives the page address, the referring address, your browser's user agent string and language preference, and your IP address. Ahrefs uses the IP address to derive a country- and city-level location and, combined with the user agent, a one-way hash with a salt that is regenerated and discarded every twenty-four hours; Ahrefs states that the raw IP address is discarded and never stored. The result is a daily aggregate of page views and visitors. It sets no cookies, stores nothing on your device, and does not track you across websites or days. Because the IP address and user agent are personal data while they are being processed, we treat this as processing under our legitimate interest in understanding how the website is used (Section 4), and we do not use it for advertising.
- Cookies. We use a single strictly necessary cookie to maintain your authenticated session. We do not use advertising, tracking, or analytics cookies, and our analytics tool stores nothing on your device.
1.3 Audio Input
The Services offer two categories of speech recognition. Basic voice
recognition uses the speech-recognition capability built into your web
browser; audio handling in that mode is governed by your browser vendor's own
privacy policy, and we neither receive nor process that audio. VoiceFollow
Pro sends microphone audio to Deepgram, our speech-to-text provider, to
create the live transcript that keeps the prompter in place. It also sends a
limited list of distinctive names and terms selected from your script so those
words are more likely to be recognized correctly. We set mip_opt_out=true on every request. Deepgram states that opted-out
content is kept only as long as needed to process the request and is excluded
from its model-improvement program. We do not make or keep a separate copy.
1.4 Camera and Recordings
If you turn on the camera or make a recording, the camera and microphone feed stays on your device. Recordings are saved directly to the location you choose; Wordtandem does not upload or store the video file. The microphone audio used by VoiceFollow Pro is handled separately as described above.
1.5 Information Stored on Your Device
The prompter stores scripts, preferences, and recent diagnostic information in local browser or app storage so it can remember your setup. The desktop and mobile apps may store a device sign-in key in the operating system's secure credential storage. You can clear local scripts and settings from the app or through your browser controls.
1.6 Information We Do Not Collect
We do not collect or store payment card numbers, bank account details, or digital-wallet credentials. Stripe collects and manages payment methods on its own pages. We receive customer, subscription, and transaction identifiers and status information needed to manage your plan. We do not purchase personal information from data brokers.
2. Biometric Information
Wordtandem does not collect, capture, purchase, receive through trade, or otherwise obtain biometric identifiers or biometric information as those terms are defined under the Illinois Biometric Information Privacy Act (740 ILCS 14/), the Texas Capture or Use of Biometric Identifier Act (Tex. Bus. & Com. Code § 503.001), the Washington Biometric Privacy Act (RCW 19.375), or comparable laws.
Specifically, and without limitation, the Services do not perform speaker recognition, speaker identification, speaker verification, or speaker diarization; do not generate voiceprints, voice templates, embeddings, or other mathematical representations of vocal characteristics; and do not retain audio recordings. Audio is processed transiently for the sole purpose of transcription and is not stored.
3. How We Use Personal Information
We process personal information for the following purposes:
- To create, authenticate, and administer your account;
- To provide the Services, including synchronizing your content across your devices and delivering voice-tracking functionality;
- To measure consumption against plan allowances and to process billing;
- To communicate with you regarding your account, transactions, service changes, and support requests;
- To maintain the security and integrity of the Services, to detect and prevent fraud or abuse, and to diagnose technical faults;
- To comply with applicable legal obligations and to establish, exercise, or defend legal claims.
We do not use your content or your audio to train machine-learning models, and we do not permit our subprocessors to do so.
4. Legal Bases for Processing (EEA and United Kingdom)
Where the General Data Protection Regulation or the UK GDPR applies, we rely on the following legal bases:
| Purpose | Legal Basis |
|---|---|
| Provision of the Services; account administration; billing | Performance of a contract (Art. 6(1)(b)) |
| Security, fraud prevention, service improvement | Legitimate interests (Art. 6(1)(f)) |
| Aggregate, cookieless analytics on our public website | Legitimate interests (Art. 6(1)(f)) |
| Retention of financial records | Legal obligation (Art. 6(1)(c)) |
5. Disclosure of Personal Information
We do not sell personal information, and we do not share personal information for cross-context behavioral advertising, as those terms are defined under the California Consumer Privacy Act, as amended.
We disclose personal information to the following categories of recipients:
5.1 Subprocessors
| Subprocessor | Function | Categories Disclosed |
|---|---|---|
| Cloudflare, Inc. | Hosting, database, edge compute | Account data, content, usage data, technical data |
| Deepgram, Inc. | Speech-to-text processing for VoiceFollow Pro | Audio input and a limited list of script-derived names and terms (processed for the request; excluded from model improvement) |
| Stripe, Inc. | Payment and subscription processing, including stored payment methods and supported digital wallets | Email address, billing and transaction data |
| Resend (Plus Five Five, Inc.) | Transactional email delivery | Email address |
| Ahrefs Pte. Ltd. | Aggregate website analytics on our public marketing pages only (not the prompter, the applications, or account pages) | Page address, referrer, user agent, language, and IP address (processed transiently for location and a daily-rotated hash; raw IP not stored) |
We use these providers under their service terms and applicable data protection commitments.
5.2 Other Disclosures
We may disclose personal information where required by law, subpoena, or other legal process; where necessary to protect the rights, property, or safety of Wordtandem, our users, or the public; and in connection with a merger, acquisition, financing, or sale of assets, in which case we will require the recipient to honor commitments made in this Policy.
6. Data Retention
| Category | Retention Period |
|---|---|
| Account information | While your account is open; deleted when you close it, subject to legal exceptions |
| Synced scripts | Until you delete them or close your account |
| Usage records | While your account is open; deleted when you close it |
| Billing and transaction records | As long as needed for tax, accounting, dispute, and legal obligations; Stripe also keeps records under its own policy |
| Support communications | As long as reasonably needed to answer the request and keep support records |
| Technical and diagnostic logs | For the shortest period reasonably needed for security and troubleshooting, subject to provider settings |
| VoiceFollow Pro input | Only for the time needed to process the request; we do not keep a recording |
Residual copies may persist in encrypted backups for a limited period before being overwritten in the ordinary course.
7. Your Rights and Choices
7.1 Rights Available to All Users
Subject to applicable law, you may request to access, correct, delete, or obtain a portable copy of your personal information, and may object to or request restriction of certain processing. Requests may be submitted to privacy@wordtandem.com. We will respond within forty-five (45) days where the CCPA applies and within one (1) month where the GDPR or UK GDPR applies, subject to permitted extensions.
7.2 California Residents
In the preceding twelve (12) months, we collected the categories of personal information identified in Section 1 for the business purposes identified in Section 3, and disclosed them to the categories of recipients identified in Section 5. We did not sell or share personal information. California residents have the right to know, delete, correct, and opt out of sale or sharing, and the right not to receive discriminatory treatment for exercising these rights. You may designate an authorized agent to submit requests on your behalf.
7.3 Opt-Out Preference Signals
We do not sell or share personal information for cross-context behavioral advertising, so a Global Privacy Control signal does not change how the Services behave.
7.4 Residents of Other United States Jurisdictions
If a state privacy law applies to us, residents may have rights to access, correct, delete, or obtain a copy of their information, and to appeal a request we deny. Use the email address in Section 12 to make a request or appeal.
7.5 EEA and United Kingdom Residents
You may lodge a complaint with your local data-protection authority. Where required, transfers outside the EEA or United Kingdom use an applicable lawful transfer mechanism, such as the European Commission's Standard Contractual Clauses or the UK International Data Transfer Addendum.
8. Security
We maintain administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, disclosure, alteration, and destruction. These include encryption of data in transit, password hashing using industry-standard key-derivation functions, and restriction of production access to authorized personnel. No method of transmission or storage is entirely secure, and we cannot guarantee absolute security. We will notify affected individuals and applicable regulators of a personal data breach where required by law.
9. International Users
The Services are operated from the United States. Our providers may process information in the United States and other countries where they operate. Those countries may have different data-protection laws from the place where you live.
10. Children's Privacy
The Services are not directed to children under thirteen (13) years of age, and we do not knowingly collect personal information from such children. If we become aware that we have collected personal information from a child under thirteen, we will delete it promptly. A parent or guardian may contact us at the address in Section 12. Where local law requires consent from a parent or guardian for an older child, the child may use the Services only with that consent.
11. Changes to This Policy
We may amend this Policy from time to time. We will revise the "Last Updated" date above and, where changes are material, provide notice by email or through the Services before the changes take effect.
12. Contact Us
Questions, requests, and complaints about this Policy may be directed to:
Michael Cantrell, independent operator of Wordtandem
privacy@wordtandem.com
Questions about this? support@wordtandem.com