Privacy Policy

1. Introduction

RemoveVocals ("we," "us," "our," or "Company") is operated by NOTHING SAS, a company registered in France. We are committed to protecting your privacy and ensuring transparency about how we handle your data. This Privacy Policy explains what information we collect, how we use it, and your rights under applicable law, including the General Data Protection Regulation (GDPR).

2. Data Controller

NOTHING SAS is the data controller responsible for your personal data. You can contact us at:

NOTHING SAS
58 rue de Monceau
75008 Paris, France
SIREN: 892 798 208
Email: contact@removevocals.ai

3. Audio Files — 100% Client-Side Processing Guarantee

Critical Privacy Assurance: ALL audio files you process through RemoveVocals are processed 100% locally in your browser. No audio data is ever transmitted to our servers, stored on our infrastructure, or accessed by us in any way.

This means:

• Your audio files remain entirely on your device
• We never receive, see, store, or access your audio in any form
• Audio processing is powered by your device's computational resources and local browser APIs
• No audio data can be leaked, hacked, or shared because we never have access to it
• You maintain complete privacy and ownership of your audio content

If a user downloads processed audio from RemoveVocals, that file exists only on their device. We have no way to access, recover, or use that file.

4. Data We Collect

4.1 Audio Files

We collect no audio files or audio data. All audio processing happens client-side in your browser.

4.2 Optional Account Data

If you create an optional account through Supabase authentication, we collect:

• Email address — used for account authentication and recovery only
• User account ID — generated by Supabase for account identification
• Optional profile information — if you choose to provide it (name, preferences, etc.)

Account creation is entirely optional. RemoveVocals functions fully without an account.

4.3 Analytics Data

We use Google Analytics 4 (GA4) to understand how users interact with RemoveVocals. GA4 collects:

• Pages visited and time spent on each page
• Browser type and version
• Operating system
• Device type (mobile, tablet, desktop)
• General geographic location (country/region level)
• Anonymized IP addresses (IP anonymization enabled)
• Referral source (where you came from)
• User interactions and events (feature usage, tool access)

We do not track which specific audio you process, your account identity in analytics, or any identifying information linked to your device. GA4 data is anonymized and aggregated.

4.4 Technical Data

We may collect minimal technical data to maintain service functionality:

• Error reports and crash logs (browser-based, non-identifying)
• Service performance metrics
• Browser compatibility information

5. Legal Basis for Data Processing

We process personal data based on the following legal grounds:

• Consent (GDPR Article 6(1)(a)): For account creation through Supabase, we process your email based on your explicit consent.
• Legitimate Interest (GDPR Article 6(1)(f)): We process analytics data to understand user behavior, improve our service, and ensure technical functionality. Our legitimate interest in providing a reliable, free service outweighs privacy concerns since analytics is anonymized.
• Contract (GDPR Article 6(1)(b)): If you create an account, processing is necessary to provide the service you've requested.

6. Cookies & Storage

6.1 Cookie Types

RemoveVocals uses the following cookies:

• Essential Cookies: Required for the website to function (authentication, security, user preferences). These are necessary for our legitimate interest and are exempt from consent requirements under GDPR.
• Analytics Cookies (Google Analytics 4): Used to track anonymized usage patterns. These require your consent unless you've configured your browser to opt out.

We do NOT use advertising cookies, tracking cookies, or third-party marketing cookies.

6.2 Browser Storage

We may use browser local storage and session storage to:

• Save user preferences (audio settings, UI language, theme)
• Maintain session state
• Store authentication tokens (if logged in)

None of this data is transmitted to our servers or third parties.

6.3 Opting Out

You can disable GA4 analytics by using browser privacy settings, browser extensions that block Google Analytics, or by configuring your browser's Do Not Track (DNT) settings. Essential cookies cannot be disabled as they are necessary for the service to function.

7. Third-Party Services

RemoveVocals uses the following third-party services:

• Google Analytics 4 (GA4): For anonymized usage analytics. Your data is processed by Google in accordance with their privacy policy. Google may be a data processor under our arrangement. Visit Google's Privacy Policy for details.
• Supabase: For optional user authentication and account management. Supabase acts as a data processor. Visit Supabase's Privacy Policy for their data handling practices.
• Google Fonts CDN: For loading the Plus Jakarta Sans font. This connection may send a referrer header and your IP address to Google, but does not involve personal data processing.

We have data processing agreements in place with all third-party processors to ensure your data is protected in accordance with GDPR.

8. Data Retention

• Audio Files: We retain no audio files at any time.
• Account Data: Account data (email, profile) is retained as long as your account exists. When you delete your account, all associated data is deleted within 30 days.
• Analytics Data: Google Analytics typically retains data for 14 months. See Google Analytics Help for current retention policies.
• Log Data: Server logs and error logs are retained for up to 90 days for security and troubleshooting purposes.

9. Your Rights Under GDPR

If you are a resident of the European Union, you have the following rights under GDPR:

• Right of Access (Article 15): You can request access to all personal data we hold about you.
• Right of Rectification (Article 16): You can request correction of inaccurate data.
• Right to Erasure (Article 17): You can request deletion of your data ("right to be forgotten") subject to legal obligations.
• Right to Restrict Processing (Article 18): You can request we limit how we use your data.
• Right to Data Portability (Article 20): You can request your data in a portable format.
• Right to Object (Article 21): You can object to processing of your data for legitimate interest purposes.
• Right to Withdraw Consent (Article 7(3)): For processing based on consent, you can withdraw consent at any time.

To exercise any of these rights, contact us at contact@removevocals.ai. We will respond to requests within 30 days in accordance with GDPR requirements.

10. Data Transfers

Analytics data collected by Google Analytics 4 may be transferred and processed by Google in the United States. Google is certified under the EU-US Data Privacy Framework, which provides appropriate safeguards for data transferred outside the EU. For more information, see the Data Privacy Framework official site.

Account data stored in Supabase is hosted in the EU region and remains protected under GDPR.

11. Children's Privacy

RemoveVocals is not directed to children under the age of 16. We do not knowingly collect personal data from children under 16. If we become aware that a child under 16 has provided us with personal data, we will delete such data immediately and terminate the child's account if applicable.

12. Data Security

We implement industry-standard security measures to protect your data, including:

• HTTPS encryption for all data transmission
• Secure authentication protocols (Supabase)
• Regular security audits and updates
• Limited employee access to personal data
• Firewalls and network security measures

However, no online service is 100% secure. While we work to protect your information, we cannot guarantee absolute security against unauthorized access or breaches.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by updating the "Last updated" date at the top of this policy. Your continued use of RemoveVocals following changes constitutes your acceptance of the updated policy.

14. Contact & Data Protection Authority

If you have questions about this Privacy Policy or wish to exercise your rights, please contact:

Data Controller:
NOTHING SAS
58 rue de Monceau
75008 Paris, France
Email: contact@removevocals.ai

If you believe your privacy rights have been violated and we have not resolved your concern satisfactorily, you have the right to lodge a complaint with your national data protection authority. In France, this is the Commission Nationale de l'Informatique et des Libertés (CNIL). Visit www.cnil.fr for more information.