Privacy Policy

Our Commitment to Privacy

At Speakeroo, we believe in transparency. We collect only what we need to run the service, improve the product, and measure whether our advertising is effective when you consent. You control Analytics and Advertising choices at any time.

No Account Required for Core Features

You can complete a full practice session and read all of its feedback without creating an account. One session a day is free without one; an account is needed to keep practicing. When you use the tool without an account:

• Your audio is sent for automated analysis and stored with the session it belongs to
• No name, email, or other personal information is collected or stored
• Your sessions are stored on our servers with no account attached, and your browser keeps the list of them so you can find them again
• A random identifier generated by your browser is stored with each session so we can apply the one-a-day limit. It is not derived from you, your device, or your network, and it is removed from a session when that session is claimed to an account
• Clearing your browser data removes that list, not the sessions themselves — delete a session from its own page to remove it from our servers
• The next time you sign in on this browser, the sessions in that list are automatically claimed to your account

What a Session Link Gives Access To

A session created without an account has no owner for us to check a visitor against, so the session's web address is what grants access to it. Anyone who has the link — not only you — can:

• Open the session page and read its transcript and practice insights
• Play back the audio you recorded
• Delete the session and its recording permanently
• Claim the session into their own account by signing in with it, after which only they can open it and you lose access

Session addresses are long random identifiers, so they cannot be guessed, and we neither list them publicly nor allow search engines to index them. But an accountless session's link does not expire and we cannot revoke it: once you share a link, everyone who has it keeps that access. Treat a session link the way you would treat the recording itself, and only send it to people you are happy to have hear your voice.

If you want a session the link alone cannot open, create an account before you practice. Sessions saved to an account can only be opened while signed in to that account (and, for Team Members, by their Team Admins as described under Teams below). Claiming an accountless session to your account also stops its link from opening the session page for anyone else, but it cannot undo access already given: anyone who opened the session beforehand may have kept a copy of the recording or a direct address for its audio. The only way to remove a shared session from our servers is to delete it.

Information We Collect (Plus Users Only)

If you choose to upgrade to Plus, we collect the following information:

• Account Information: Name and email address through WorkOS authentication
• Session Data: Your practice sessions, recordings, and analysis results (only if you choose to save them)
• Usage Data: Progress metrics and dashboard statistics
• Payment Information: Processed securely through Stripe (we never store your credit card details)

Teams

If you create or join a Team, additional information is collected and shared within that Team as described below.

• Team Information: Team name, membership role (Team Admin or Member), and WorkOS Organization identity data
• Member Account Information: Name and email address for invited and active Members, managed through WorkOS authentication and invitations
• Member Session Access: Team Admins can view Member practice sessions, including recordings, transcripts, and practice insights, to review practice and provide feedback. Members are told this when they accept a Team invite.
• Team Billing: Subscription and payment details for the Team are processed through Stripe at the Team level. We do not store credit card details on our servers.
• Recording Minutes: Allocated and used recording-minute balances are tracked per Member and for the Team pool
• Coach Feedback and Requests: Human feedback published by Team Admins and feedback requests submitted by Members

If you had an active Plus subscription before joining a Team, billing for that personal subscription is paused while you remain a Member. If you are removed from the Team and previously had Plus, your personal Plus subscription may resume.

How We Use Your Information

For Plus users, we use your information to:

• Store and sync your practice sessions across devices
• Display your progress and analytics in the dashboard
• Process payments and manage your subscription
• Send important service updates and billing notifications
• Improve our automated analysis and speech recognition features

For Teams, we additionally use information to:

• Manage Team membership, invitations, and admin roles
• Let Team Admins review Member sessions and publish coach feedback
• Track assignment progress, recording-minute allocations, and Team billing
• Send service and billing notifications related to the Team subscription

Data Storage and Security

We take security seriously:

• All data is encrypted in transit and at rest
• We use Convex for secure backend storage
• Authentication is handled through WorkOS, a secure identity platform
• Payment processing is handled by Stripe, meeting PCI compliance standards
• We regularly review and update our security practices

Third-Party Services

We use the following trusted third-party services:

• WorkOS: For secure authentication and Team identity, membership, and invitations
• Stripe: For payment processing for Plus subscriptions and Team billing
• Convex: For backend data storage (Plus and Team users)
• Cloudflare: For content delivery and DDoS protection
• PostHog: For product analytics (browser and server). Data may be processed in the European Union. See the PostHog Privacy Policy.
• Meta Platforms: For advertising measurement via Meta Pixel (browser) and Conversions API (server), only when you enable Advertising. Data may be processed in the United States. See the Meta Privacy Policy.

Each service has its own privacy policy and security measures in place.

Analytics, Advertising, and Cookies

We use cookies and similar technologies to run the service, understand how it is used, and measure the effectiveness of our advertising only with your consent.

• Essential cookies: Required for authentication, session management, and security (Plus and Team users).
• Analytics (PostHog): Helps us understand product usage and improve the service. Analytics is enabled by default when you first visit and may run in your browser and on our servers. You can turn Analytics off at any time via Privacy choices in the site footer. When Analytics is off, we stop sending new analytics data to PostHog going forward.
• Advertising (Meta Pixel and Conversions API): Helps us measure whether our ads lead to sign-ups and subscriptions. Advertising is off by default. We only send advertising measurement data to Meta if you turn Advertising on. You can change this choice at any time via Privacy choices.

We do not use advertising measurement to collect practice audio, transcripts, calibration content, or other sensitive practice data.

What We Send to Meta

When Advertising is enabled, we send only these standard events:

We never send to Meta:

• Your email or name
• Practice recordings, transcripts, or calibration data
• Free-text content or payment card details
• Campaign tracking parameters (UTMs)

Meta Pixel runs only on our campaign landing page and sign-up or subscription confirmation pages. Server events are deduplicated with browser events using a shared event ID.

Overseas Disclosure

Some service providers process data outside Australia, including PostHog (European Union) and Meta (United States). We take reasonable steps to ensure overseas recipients handle personal information in line with applicable law.

Your Data Rights

You have the right to:

• Turn Analytics on or off via Privacy choices
• Turn Advertising on or off via Privacy choices (default: off)
• Withdraw Advertising consent at any time. When you do, we immediately stop all Meta Pixel and Conversions API sends (browser and server; no queued or retroactive events)
• Access your personal data
• Request data deletion
• Export your data
• Cancel your subscription at any time
• Opt out of marketing communications

To exercise these rights, use Privacy choices on the site or email support@speakeroo.app.

Data Retention

Completed sessions are retained until you delete them, whether or not you have an account — we do not remove them on a schedule. The one exception is a Conversation session started without an account and never completed, which we delete after 7 days. Without an account, your browser holds the list of your sessions, so clearing it removes your way back to them rather than the sessions themselves. For Plus users:

• Session data is retained as long as your account is active
• You can delete individual sessions or all data at any time
• Deleting your account permanently deletes your sessions, recordings, stored audio, analyses, practice history, and support tickets
• A few records outlive the account with every identifier stripped from them, so nothing left behind points back at you: your consent records for the window below, and anything you produced for someone else — feedback you wrote on a Team Member's session, a recording you added to a shared library, an assignment you set
• Cancelling your subscription does not delete anything — your account and its data remain until you delete the account
• Billing records are retained as required by law

For Team Members:

• Session data remains available to Team Admins while you are an active Member
• If you delete your account, your sessions and their feedback go with it, including the Team Admin's view of them, and any assignment set for you alone is removed
• If you are removed from a Team, your personal account data follows the Plus retention rules above unless you request deletion
• Team billing records are retained as required by law

For Analytics and Advertising:

• Consent records (your Analytics and Advertising choices, with timestamps) are kept for 2 years. Deleting your account strips your account and browser identifiers from them, leaving the choice and its date
• Advertising delivery and deduplication logs are kept for 90 days, and are deleted outright when you delete your account
• Failed delivery retry queues are kept for 7 days, then deleted
• Meta may retain event data according to its own policies (currently up to two years for Event Data). We delete derived advertising audiences when no longer needed

Children's Privacy

Our service is not directed to children under 13. We do not knowingly collect information from children under 13.

Changes to This Policy

We may update this privacy policy from time to time. We will notify Plus users and Team Admins of any material changes via email. The "Last updated" date at the top of this page indicates when the policy was last revised.

Contact Us

If you have any questions about this privacy policy or our practices, please contact us at: support@speakeroo.app