Legal
Privacy Policy
Last updated: March 9, 2026
Vocal Labs LLC (“VocalPresets.com”, “we”, “us”, or “our”) operates the VocalPresets.com marketplace. This Privacy Policy explains what personal information we collect, how we use it, and your rights regarding that information. By using the Platform, you agree to the practices described in this policy.
1. What We Collect
We collect the following categories of information:
Account information
When you register, we collect your name, email address, and password (stored as a secure hash). If you sign in with Google, we receive your name, email, and profile picture from Google.
Payment information
When you make a purchase, payment details are collected and processed directly by Stripe. We receive only a transaction record — we never see or store your full card number, CVV, or bank account details.
Purchase and download history
We store records of your purchases, download events, and dispute history to enable re-downloads, resolve disputes, and comply with tax and legal obligations.
Seller information
If you are a Seller, we collect additional information including your payout details (managed by Stripe), preset submissions, sales data, and payout history.
Usage data
We collect standard server logs including IP addresses, browser type, referring URLs, pages visited, and timestamps. This data helps us diagnose issues and improve the Platform.
Cookies and local storage
We use cookies and browser local storage to maintain your session, store your authentication token, and remember your theme preference. See Section 5 for details.
2. How We Use Your Information
We use the information we collect for the following purposes:
- •To create and manage your account, authenticate you, and maintain your session.
- •To process purchases and payments, generate download links, and deliver purchased presets.
- •When you purchase from a seller, we share your name, email, and purchase details with that seller solely for order fulfillment, customer support, and dispute resolution; sellers are required to use this information only for those purposes.
- •To send transactional emails — purchase receipts, download confirmations, payout notifications, and dispute updates.
- •To send seller notifications about preset review decisions, new sales, and payout events.
- •To review and moderate seller presets, respond to DMCA notices, and resolve disputes.
- •To detect and prevent fraud, abuse, and violations of our Terms of Service.
- •To generate aggregate, anonymized analytics that help us improve the Platform (no individual tracking).
- •To comply with legal obligations, including tax reporting and responding to lawful requests.
3. What We Don't Do
- ✓We do not sell, rent, or trade your personal data to any third party.
- ✓We do not use your data for third-party advertising or behavioral profiling.
- ✓We do not share your data with data brokers or ad networks.
- ✓We do not send unsolicited marketing emails — all marketing communications include an unsubscribe link.
- ✓We do not store your full payment card details at any point.
4. Third-Party Service Processors
We share data with the following third-party service providers, solely to operate the Platform:
When you buy a preset or bundle, the seller who listed that product receives your display name, email address, and the details of your purchase (e.g. product, date, amount) solely for order fulfillment, customer support, and dispute resolution. Sellers are contractually bound to use this information only for these purposes and may not use it for their own marketing or share it with third parties.
Stripe (including Stripe Connect)
Payment processing, seller payouts, fraud detection, and seller identity verification. Buyer payment details are collected directly by Stripe — we never see or store full card numbers. Sellers onboard through Stripe Connect Express, which collects identity documents, bank account details, and tax information (e.g., W-9/W-8BEN) directly from the seller. All seller financial and identity data is managed by Stripe, not by VocalPresets.com. Review Stripe's privacy policy at stripe.com/privacy.
Supabase
Database and file storage. Your account data, purchase records, and uploaded files are stored in Supabase on US-based servers.
Resend
Transactional email delivery. We share your email address with Resend solely to deliver emails you have requested or that are required by your account activity.
Vercel
Platform hosting and CDN. Vercel processes server request logs including IP addresses for platform operation and security.
Google (OAuth & Analytics)
If you choose to sign in with Google, we receive basic profile information from Google's OAuth service. We also use Google Analytics 4 (GA4) to collect anonymized usage data — pages visited, session duration, and general geographic region (country level). GA4 sets two cookies: _ga (2-year expiry) and _gid (24-hour expiry). IP addresses sent to Google are anonymized. GA4 analytics are only activated after you consent via the cookie banner. You can opt out at any time by declining or clearing your cookie preference. See Google's privacy policy at policies.google.com/privacy.
Upstash Redis
In-memory data store used for API rate limiting and caching. Upstash processes request metadata including IP address-derived rate limit keys to protect the Platform from abuse. No personally identifiable information is stored in Redis; all keys are pseudonymous identifiers and automatically expire. Upstash servers are located in the United States.
We do not grant these providers the right to use your data for their own purposes beyond providing services to us. Each provider is bound by their own privacy commitments.
5. Cookies
We use a minimal set of cookies to operate the Platform. Essential session cookies are always active. Analytics cookies (set by Google Analytics 4) are only activated after you provide consent via the cookie banner that appears on your first visit. We do not use advertising cookies or behavioral tracking pixels.
| Cookie | Type | Expiry | Purpose |
|---|---|---|---|
| sb-auth-token | Essential | Session | Supabase authentication session token. Keeps you signed in. |
| sb-refresh-token | Essential | Session | Supabase refresh token for session renewal. |
| vp_ref | Functional | 90 days | Stores referral source to credit affiliates. |
| _ga | Analytics (opt-in) | 2 years | Google Analytics 4 — distinguishes users for aggregate traffic reporting. Only set with consent. |
| _gid | Analytics (opt-in) | 24 hours | Google Analytics 4 — distinguishes users within a 24-hour session. Only set with consent. |
Essential cookies cannot be disabled as they are required for the Platform to function. You can withdraw analytics consent at any time by clearing your browser's local storage or cookies. Refreshing the page after clearing will present the consent banner again.
6. Data Storage & Security
Your data is stored in Supabase on servers located in the United States (AWS us-east-2 region). All data is encrypted in transit using TLS and encrypted at rest by the storage provider.
We implement access controls including Row Level Security (RLS) on our database so that users can only access their own data. Admin access is restricted to authenticated Vocal Labs LLC team members.
While we take reasonable steps to protect your data, no system is completely secure. If you become aware of a security issue, please contact us immediately at support@vocalpresets.com.
7. Payment Data
Stripe is a PCI DSS Level 1 certified payment processor. For more information on how Stripe handles your data, see stripe.com/privacy.
8. Your Rights
You have the following rights regarding your personal data:
- •Access: Request a copy of the personal data we hold about you.
- •Correction: Request that we correct inaccurate or incomplete personal data.
- •Deletion: Request deletion of your account and personal data. Note: we may retain certain records for legal compliance (e.g., purchase records for tax purposes).
- •Portability: Request a machine-readable export of your personal data.
- •Objection: Object to certain processing of your data, including any marketing communications.
- •Unsubscribe: Opt out of marketing emails at any time using the unsubscribe link in any email we send.
To exercise any of these rights, email us at support@vocalpresets.com. We will respond within 30 days. We may need to verify your identity before processing your request.
9. Data Retention
We retain your personal data for as long as necessary to provide the Platform and comply with our legal obligations:
- •Account data (name, email, profile) is retained while your account is active, and for 90 days after account deletion — then permanently deleted.
- •Purchase records are retained for 7 years from the date of purchase for tax, accounting, and legal compliance purposes.
- •Server logs are retained for 90 days, then deleted automatically.
- •DMCA and legal records are retained indefinitely as part of our legal compliance obligations.
10. Children's Privacy
VocalPresets.com is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal data, please contact us at support@vocalpresets.com and we will delete that information promptly.
11. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date at the top of this page and notify registered users by email. We encourage you to review this policy periodically.
Your continued use of the Platform after any changes to this policy constitutes your acceptance of the updated policy.
12. California Privacy Rights (CCPA)
If you are a California resident, the California Consumer Privacy Act (CCPA) grants you specific rights regarding your personal information:
- •Right to Know: You have the right to know what personal information we collect, how we use it, and with whom we share it. This Privacy Policy describes those practices in full.
- •Right to Delete: You have the right to request deletion of your personal information. You can do this directly via Account Settings → Delete Account, or by contacting us at support@vocalpresets.com.
- •Right to Opt Out of Sale: We do not sell, rent, or trade your personal information to third parties. There is nothing to opt out of.
- •Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights. You will receive the same level of service regardless of your privacy choices.
To exercise your California privacy rights, contact us at support@vocalpresets.com. We will respond within 45 days. We may need to verify your identity before processing your request.
13. Contact
For privacy-related requests, questions, or concerns, contact us at:
Vocal Labs LLC — Privacy
Email: support@vocalpresets.com
A Delaware Limited Liability Company
AS Marina & Resort Complex, Falmouth Harbour, St. Pauls, Antigua