GDPR & Data Protection

1. Who is responsible for your data

For the personal data of our individual users, ZeroEnd Technology AB is the controller:

ZeroEnd Technology AB
Company registration number (organisationsnummer): [ORG-NR]
Registered address: [REGISTERED ADDRESS]
VAT number: [VAT NUMBER]
Data-protection contact: privacy@soundfox.ai

Because we are established in the EU (Sweden), we are not required to appoint an EU representative under Article 27 GDPR. The Services are not currently offered to residents of the United Kingdom; if and when we offer them in the UK, our UK representative under Article 27 UK GDPR will be: [UK REPRESENTATIVE].

2. Our key data-protection commitments

• We do not sell your personal data.
• We do not use your recordings or transcripts to train our own AI models, and we configure our speech-to-text and AI providers so your content is not used to train their models (see Section 6 of the Terms of Service and Section 6 of the Privacy Policy).
• Audio is not stored by default — storing audio is an option you must turn on.
• We collect only what we need to provide and improve the Services, and we apply technical and organisational security measures appropriate to the risk.

3. The legal bases we rely on

We process personal data under one or more of the following bases (see the Privacy Policy for the mapping to each purpose):

• Performance of a contract — to create your account and provide the Services you ask for.
• Legitimate interests — to secure, maintain, and improve the Services and prevent abuse, balanced against your rights.
• Consent — for optional features (such as audio storage), opt-in marketing, and non-essential cookies; you can withdraw consent at any time.
• Legal obligation — to meet our legal, tax, and accounting duties and respond to lawful requests.

4. Your rights

If you are in the EEA or the UK, you have the right to:

• access the personal data we hold about you and receive a copy;
• rectify inaccurate or incomplete data;
• erase your data in certain circumstances;
• restrict our processing in certain circumstances;
• port certain data to another provider in a structured, machine-readable format;
• object to processing based on our legitimate interests, and to direct marketing at any time; and
• withdraw consent where we rely on it, without affecting prior processing.

You can exercise much of this directly in the product — for example, editing your account, deleting individual transcriptions or your whole history, managing cookie choices, and closing your account.

5. How to exercise your rights

Email privacy@soundfox.ai or use our contact form at soundfox.ai/support/ticket. Please tell us which right you want to exercise and the email address on your account. We may need to verify your identity before we act. We will respond within the time limits set by law — generally one month under the GDPR, which we may extend for complex requests, in which case we will let you know. We do not charge for these requests unless they are manifestly unfounded or excessive.

6. Sub-processors and international transfers

We use a small number of vetted service providers (sub-processors) to deliver the Services, listed in our Privacy Policy. Some are located outside the EEA, including in the United States. Where we transfer personal data outside the EEA (or the UK), we rely on appropriate safeguards — the EU–US Data Privacy Framework (and its UK extension) where the provider is certified, and the European Commission’s Standard Contractual Clauses (with the UK Addendum where relevant), with additional measures where needed.

7. Retention and security

We keep personal data only as long as necessary for the purposes described in the Privacy Policy — for example, account data while your account is active, with stored transcriptions and personal data deleted within 30 days of account closure, and billing records kept for the period required by law. We protect personal data with encryption in transit and at rest, access controls, and other measures appropriate to the risk, and we will notify you and the relevant authority of a personal data breach where the law requires.

8. Complaints

We would like the chance to resolve any concern first, so please contact privacy@soundfox.ai. You also have the right to lodge a complaint with a supervisory authority. In Sweden this is the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY, www.imy.se); you may also contact the authority in your EEA country of residence, or (for UK users, if and when the Services are available there) the UK Information Commissioner’s Office (ICO).

9. Business customers — data processing agreement

Where we process personal data on behalf of a business customer (so that the customer is the controller and we act as its processor), a data processing agreement (DPA) governs that processing. We do not currently offer self-serve business onboarding, but a DPA is available on request — contact legal@soundfox.ai.

10. Contact us

ZeroEnd Technology AB
Company registration number (organisationsnummer): [ORG-NR]
Registered address: [REGISTERED ADDRESS]
VAT number: [VAT NUMBER]
Privacy: privacy@soundfox.ai · Legal: legal@soundfox.ai
Support: soundfox.ai/support/ticket
Supervisory authority (Sweden): Integritetsskyddsmyndigheten (IMY), www.imy.se