Политика конфиденциальности

Voco (“Voco”, “we”, “us”, “our”) provides a real-time sermon translation platform for churches and congregations. Our service is operated from the United Kingdom. For data protection queries, contact us at privacy@voco.church.

Account data (admin users only)

• Email address (required to authenticate via magic link, password, or OAuth)
• Church name (provided at sign-up)
• Your unique church URL slug (e.g. voco.church/c/your-church)
• Subscription and billing status (we do not store card details)

Service data

• Event names
• Transcript segments — the text output of speech-to-text processing, stored per service
• Translations of each segment in your selected languages

Attendee data

Attendees (congregation members) do not create accounts and we do not ask for their name, email address, or phone number. We assign a random device identifier and record the service joined, selected language, first and last activity time, approximate listening duration, and whether the same device has used Voco before. This is used to deliver the reader, keep the service reliable, and show aggregated usage in the church dashboard. A device may be shared or reset, so Voco does not present these records as identified people or infer nationality from a language selection.

Dashboard recommendation data (admin users only)

Voco uses aggregated service and attendee-reader activity to select a practical weekly dashboard recommendation. We store the recommendation shown and an admin user's optional response, such as whether the church plans to try it, already does it, considers it irrelevant, or found it helpful. Controlled product logic selects the evidence and action. An AI language service may be used only to make the recommendation heading warmer; it is not given attendee identities and is not permitted to infer nationality or introduce unsupported cultural claims.

Sign-up enrichment data (admin users only)

When you create an account, we record information to help us understand how people find Voco and to improve our service. This includes your approximate location (country and city, derived from your IP address at sign-up), the device type, browser, and operating system you used, your browser language and timezone, and the referring website or advertising channel that brought you to voco.church. This data is linked to your organisation account and is not shared with third parties for advertising purposes.

Publicly sourced business outreach data

We may collect limited business contact information from public sources where we reasonably believe Voco could be relevant to an organisation. This may include an organisation name, a generic or professional business email address, country or region, the public source URL, and brief notes about the source and relevance. Sources may include official public registers, denominational or church-network directories, and an organisation's own website. We do not use publicly sourced contacts to subscribe people to a newsletter.

Technical data

• Server access logs (IP addresses, request timestamps) — retained for 30 days for security purposes
• Anonymised usage analytics (page views, feature usage) — no cross-site tracking

Live sermon audio is captured in your browser and securely streamed for speech-to-text processing. Audio is processed transiently and is not stored by Voco after transcription. Only the resulting text transcript is stored in your Voco account.

• To provide the service — authentication, event management, real-time translation delivery
• To process payments — subscription billing, payment methods, and invoices
• To send transactional emails — sign-in links, password reset links, billing receipts, and essential service notifications.
• To send limited business-to-business introductions — where permitted by law, we may send a relevant, one-time introduction to a publicly listed organisational contact under our legitimate interests in introducing Voco to churches and organisations that may reasonably benefit from it. Each message identifies us, explains the public source of the contact information, and provides a straightforward way to object. We do not add these contacts to a newsletter or send automated marketing follow-ups unless the recipient asks to continue the conversation.
• To understand how people find us — sign-up enrichment data (referrer, device, approximate location) is used under legitimate interest to measure which channels bring churches to Voco and to improve our marketing. It is not used for cross-site advertising or sold to third parties.
• To improve Voco — anonymised usage data helps us understand which features are used and where we can improve accuracy
• To personalise church dashboard insights — aggregated reader activity and an admin user's voluntary responses help Voco choose more relevant weekly recommendations and avoid repeating suggestions that do not fit that church
• To comply with legal obligations — we may process data as required by law

When you use Voco to run a live service, your church acts as the data controller for any personal data processed through that service (e.g. the voice of your preacher). Voco acts as a data processor on your behalf, processing that data only on your documented instructions.

If your church is subject to UK GDPR or EU GDPR, you can request a Data Processing Agreement (DPA) from us at any time by emailing privacy@voco.church. We will provide a signed DPA within 5 business days.

We use carefully selected infrastructure and processing sub-processors solely to deliver Voco. The plain-English provider list is published on our Security & Trust page. Customers can also request the current named sub-processor list under our Data Processing Agreement or by emailing privacy@voco.church.

† International transfers to the USA are covered by Standard Contractual Clauses (SCCs) under UK GDPR Article 46(2)(c).

• Account data — retained for as long as your account is active. Deleted within 30 days of account closure.
• Transcripts and translations — retained for 90 days by default. You can delete individual events (and all associated transcripts) at any time from your dashboard.
• Sign-up enrichment data — retained for the life of your account and deleted alongside your account data on closure.
• Anonymous reader analytics and dashboard recommendation responses — retained for the life of the church account so trends and preferences can improve over time, then deleted within 30 days of account closure.
• Business outreach data — retained only while we assess relevance and conduct a limited outreach campaign, normally for no longer than 12 months from collection. If you object or unsubscribe, we retain the minimum information needed on a suppression list so that we do not contact you again.
• Access logs — retained for 30 days then automatically purged.
• Billing records — retained for 7 years as required by UK law.

As a data subject you have the right to:

• Access the personal data we hold about you
• Rectification of inaccurate data
• Erasure (“right to be forgotten”) where there is no overriding legal basis for processing
• Restriction of processing in certain circumstances
• Portability — export your account data in a machine-readable format
• Object to processing based on legitimate interests

To exercise any right, email us at privacy@voco.church. We will respond within 30 days. You also have the right to lodge a complaint with the ICO at ico.org.uk.

You can object to direct marketing at any time by using the unsubscribe option in a message, replying “remove”, or emailing privacy@voco.church. We will stop the marketing and retain only the minimum suppression information needed to respect your request.

We use cookies in the following categories:

• Strictly necessary — a session cookie used to keep you signed in. This cannot be disabled while using the admin dashboard.
• Analytics (optional) — Google Analytics 4, loaded only after you accept analytics cookies via our consent banner. All data is anonymised (IP masking enabled). You can withdraw consent at any time using the Cookie settings link in the footer, by clearing your browser cookies, or by contacting us at privacy@voco.church.
• Marketing (optional) — Meta Pixel, loaded only after you accept marketing cookies via our consent banner. Used to measure the effectiveness of any paid advertising we run. Not used for retargeting attendees.
• Attribution (functional) — a first-party cookie (voco-utm) that records which page or channel first brought you to voco.church. It is set on your first visit, retained for up to 90 days or until you create an account, and is then deleted. It does not track you across other websites and is used solely to help us understand which channels are effective.

Your cookie preferences are stored locally in your browser and respected on every visit. Attendee pages (/c/…) do not set analytics, marketing, or attribution cookies.

Voco is not directed at individuals under 16. If you believe a child has created an account, please contact us immediately at privacy@voco.church and we will delete the account promptly.

We may update this policy from time to time. If we make material changes we will notify admin users by email at least 14 days before the changes take effect. The effective date at the top of this page will always reflect the most recent version.