Legal
Privacy Policy
Last updated: September 20, 2026
Vocal Labs LLC (“VocalPresets.com”, “we”, “us”, or “our”) operates VocalPresets.com, a unified platform with a marketplace for vocal presets and bundles plus vocal tools (AI Vocal Presets, Vocal Enhancer, and Vocal Recipe), membership plans, credit packs, and an affiliate program. This Privacy Policy explains what personal information we collect, how we use it, and your rights. By using the Platform, you agree to the practices described here.
1. What We Collect
We collect the following categories of information:
Account information
When you register, we collect your name, email address, and password (stored as a secure hash), or we receive identity information from the sign-in method you choose. If you sign in with Google, we receive your name, email, and profile picture. If you sign in with Discord, we receive your Discord identity and store your Discord ID on your account.
Payment information
Payment details are collected and processed by Stripe. We receive tokens and transaction records only. We never see or store your full card number, CVV, or bank account details.
Purchases, downloads, and disputes
We store records of your purchases, downloads, and disputes so you can re-download what you bought, so we can resolve disputes, and so we can meet tax and legal obligations.
Seller information
If you are a seller, we collect submissions, sales data, payout history, and payout mode (Stripe Connect or platform). Stripe collects payout account details, identity documents, and tax forms (such as W-9 / W-8BEN) directly from you.
Affiliate information
If you apply to the affiliate program, we collect your application details (such as website and audience size) plus earnings, referral attribution, and payout records.
Vocal audio for tools
When you use AI Vocal Presets, Vocal Enhancer, or Vocal Recipe, we collect the vocal audio you upload so we can process the job. See Section 8 for how long that audio is kept.
Marketing preferences
We store whether you opted in to marketing email at signup, checkout, or in account settings, plus unsubscribe and suppression status.
Usage logs
We collect standard server logs including IP address, browser type, pages visited, and timestamps. This helps us operate the Platform, diagnose issues, enforce rate limits, and prevent fraud.
Cookies and local storage
We use cookies and browser local storage for sign-in, affiliate attribution, cookie-consent choice, analytics, and advertising measurement. See Section 5. The site is dark-only; we do not store a theme preference.
2. How We Use Your Information
We use the information we collect for the following purposes:
- •To create and manage your account, authenticate you, and keep you signed in.
- •To process checkout, memberships, credit packs, and downloads of presets and bundles you purchased or claimed.
- •To run vocal tools: AI Vocal Presets (Kits.ai), Vocal Enhancer (RunPod worker), and Vocal Recipe (recipe worker).
- •To manage membership minutes, credit packs, and any marketplace discount tied to your plan.
- •When you buy a preset or bundle, we share your display name, email, and purchase details with that seller only — for fulfillment, support, and disputes. Sellers may not use this information for their own marketing.
- •To review seller submissions, pay sellers, and administer Connect or platform payout mode.
- •To handle disputes, refunds (admin-initiated), and DMCA notices.
- •To detect fraud, enforce rate limits, and protect the Platform.
- •To send transactional email (receipts, downloads, payout notices, dispute updates, account mail).
- •To send marketing email and drip sequences if you opted in, including an unsubscribe link.
- •To attribute affiliate referrals via the HMAC-signed vp_ref cookie.
- •To produce aggregate analytics about how the Platform is used.
- •To comply with legal and tax obligations and respond to lawful requests.
3. What We Don't Do
- ✓We do not sell personal information for money.
- ✓We do not share data with data brokers.
- ✓We never store full card numbers, CVV codes, or bank account numbers.
- ✓Marketing email includes an unsubscribe link, and you can also unsubscribe at /unsubscribe.
We do use advertising and analytics technologies. We use Google Analytics 4 and the Reddit Ads Pixel. In the EEA, UK, Switzerland, Iceland, Norway, and Liechtenstein — and when we cannot determine your region — a cookie banner is required. Accept grants analytics_storage and ad_storage together and loads the Reddit pixel. Decline keeps both denied. Outside those regions the banner is skipped and analytics plus ads load automatically. You can reopen the banner from the Footer link “Manage Cookie Preferences”, which clears the localStorage key cookie-consent.
4. Third-Party Service Processors
We share data with the following processors so we can operate the Platform:
When you buy a preset or bundle, the seller who listed that product receives your display name, email address, and purchase details (product, date, amount) for fulfillment, support, and disputes only. Sellers may not use this information for their own marketing or share it with others.
Stripe + Stripe Connect
Payments, memberships, credit packs, Connect payouts, fraud tools, and seller KYC / tax documents collected by Stripe. Buyer payment details go directly to Stripe. We never see or store full card numbers. Review Stripe's privacy policy at stripe.com/privacy.
Supabase
Database and file storage on US-based servers. Account records, purchases, listings, and uploaded files live here.
Resend
Transactional email and in-house marketing / drip sequences. We share your email address so Resend can deliver those messages.
Vercel
Hosting, CDN, and request logs (including IP addresses) for operation and security.
Google OAuth if you choose that sign-in method (name, email, profile picture); Google Analytics 4 for analytics and advertising measurement; reCAPTCHA v3 on /contact to reduce spam. See policies.google.com/privacy.
Discord
Discord OAuth if you choose that sign-in method. We receive Discord identity and store discord_id on your account.
Upstash Redis
Rate limiting and cache. Keys may include account IDs or IP-derived identifiers. Keys expire automatically (TTL). Servers are in the United States.
Google Merchant Center
Public listing data (names, descriptions, prices, cover art, seller display names) for Shopping / free listings. Optional review syndication may include display name, star rating, and review text — not email or payment data.
Kits.ai
AI vocal transformation. We generate a time-limited signed URL of the uploaded vocal, retrieve the audio, and send it to Kits.ai to run the conversion.
RunPod / Vocal Enhancer worker
Vocal enhancement. We send a time-limited signed URL of the uploaded vocal to the enhancer worker.
Vocal Recipe worker
Vocal chain analysis of uploaded audio via a time-limited signed URL.
Reddit Ads Pixel
Advertising measurement when ads storage is granted — or auto-granted outside consent regions.
These providers process data to provide services to us. Each is bound by its own privacy terms.
5. Cookies
Essential cookies keep the Platform working. Analytics and advertising cookies depend on your region and, where a banner is required, your Accept or Decline choice. Cookie names can vary slightly by browser, chunking, or the vendor's current implementation.
| Cookie | Type | Expiry | Purpose |
|---|---|---|---|
| sb-*-auth-token (and .0, .1 chunks) | Essential | 1 year | Supabase session. On production, scoped to .vocalpresets.com so apex and www stay signed in together. |
| vp_ref | Functional | 90 days | HMAC-signed affiliate referral attribution. |
| vp-geo-consent-required | Essential | Session / short (about 24 hours) | Middleware geo flag for whether to show the cookie banner. |
| auth_redirect | Essential | 10 minutes | Post-OAuth return path. |
| vp_signup_marketing_opt_in | Functional | 10 minutes | Honors the signup marketing checkbox after Google or Discord OAuth returns. |
| cookie-consent (localStorage) | Preference | Until you clear it | Not a cookie. Records Accept or Decline. Footer Manage Cookie Preferences clears this key. |
| _ga | Analytics | 2 years | Google Analytics 4. Opt-in in consent regions; automatic outside those regions. |
| _gid | Analytics | 24 hours | Google Analytics 4 session distinction. Same consent rules as _ga. |
| _ga_<container> | Analytics | Up to 2 years | GA4 container cookie. Name includes the measurement ID. Same consent rules as _ga. |
| Reddit pixel cookies | Advertising | Vendor-set (names vary) | Set only when ads storage is granted, or auto-granted outside consent regions. |
| __stripe_mid / __stripe_sid | Essential | Set by Stripe | Stripe fraud and checkout cookies, set by Stripe on checkout pages. |
| reCAPTCHA cookies | Essential / security | Set by Google | Set on /contact only when reCAPTCHA v3 runs. |
There is no theme cookie. During OAuth signup we may also set a short-lived vp_signup_marketing_opt_in cookie so we can honor the marketing checkbox after you return from Google or Discord.
Essential cookies cannot be turned off. In consent regions, Accept grants analytics_storage and ad_storage together; Decline keeps both denied. Reopen the banner anytime via Footer “Manage Cookie Preferences”.
6. Data Storage & Security
Your data is stored in Supabase on servers in the United States. Data is encrypted in transit with TLS and encrypted at rest by the storage provider.
We use access controls including Row Level Security so an account can reach only its own data. Admin access is limited to authenticated Vocal Labs LLC team members.
No system is completely secure. If you become aware of a security issue, contact us at hello@vocalpresets.com.
7. Payment Data
Stripe is a PCI DSS Level 1 certified payment processor. See stripe.com/privacy.
8. Vocal Tools & Audio Retention
Tool audio is kept only as long as needed to run the job and let you download the result:
- •Tool input uploads are deleted after 24 hours.
- •Vocal Recipe temp uploads are deleted after 1 hour.
- •Tool output files are deleted after 7 days, and the job download URL is cleared.
- •Marketplace ZIP, cover art, and demo audio are retained while the listing or a purchase still requires them.
9. Your Rights
You have the following rights regarding your personal data:
- •Access: Request a copy of the personal data we hold about you.
- •Correction: Request that we correct inaccurate or incomplete personal data.
- •Deletion: Request deletion of your account and personal data. Purchase records may be retained up to 7 years for tax and legal reasons.
- •Portability: Request a machine-readable export. Account Settings also offers Download my data at /api/account/export.
- •Objection: Object to certain processing, including marketing communications.
- •Unsubscribe: Opt out of marketing email using the link in any marketing message or at /unsubscribe.
To exercise these rights, email hello@vocalpresets.com. We will respond within 30 days. We may need to verify your identity first.
10. GDPR / UK GDPR
If you are in the EEA, UK, or a related jurisdiction, Vocal Labs LLC is the controller for personal data processed on the Platform. We have not appointed a Data Protection Officer. Contact hello@vocalpresets.com for privacy requests.
Lawful bases include: contract (account, purchases, downloads, tools, memberships, and seller or affiliate relationships); legitimate interests (security, fraud prevention, and high-level product analytics); and consent (marketing email, and analytics / ads cookies in consent regions).
Personal data is stored in the United States. You have the right to lodge a complaint with a supervisory authority in your country.
11. Data Retention & Account Deletion
You can delete your account from Account Settings. Deletion runs immediately through /api/account/delete: your display name is replaced with “Deleted User”, personal profile fields are scrubbed, and the auth record is hard-deleted so the email can be reused.
Open disputes block deletion until they are resolved. Admin accounts cannot self-delete. Settings also offers “Download my data” at /api/account/export.
- •Account profile data is scrubbed immediately on deletion. There is no 90-day hold after you delete.
- •Purchase records may be retained up to 7 years for tax and legal compliance.
- •Tool audio follows the schedule in Section 8.
- •Marketplace files stay as long as the listing or a purchase still requires them.
12. Marketing Communications
Signup includes an optional marketing checkbox that defaults to off. Free preset and bundle downloads include an optional marketing checkbox that defaults to on. Paid marketplace checkout and membership checkout do not currently show a marketing checkbox. If you opt in (or later turn promotional email on in Account Settings), we may send campaigns and automated drip sequences through our in-house email tool (Resend). Marketing HTML includes an open-tracking pixel.
Every marketing email includes an unsubscribe link. You can also unsubscribe at /unsubscribe or turn off promotional email in Account Settings. Transactional mail about your account, purchases, or tools is separate from marketing.
13. Children's Privacy
VocalPresets.com is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided personal data, contact hello@vocalpresets.com and we will delete it.
14. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date at the top of this page and notify registered accounts by email. Please review this policy periodically.
Continued use of the Platform after changes means you accept the updated policy.
15. California Privacy Rights (CCPA / CPRA)
If you are a California resident, the CCPA / CPRA grants you these rights:
- •Right to Know: You may ask what personal information we collect, how we use it, and with whom we share it. This policy describes those practices.
- •Right to Delete: You may request deletion via Account Settings → Delete Account, or by emailing hello@vocalpresets.com. Open disputes block deletion; some purchase records may be kept for tax and legal reasons.
- •Right to Correct: You may request that we correct inaccurate personal information.
- •Right to Non-Discrimination: We will not discriminate against you for exercising these rights.
We do not sell personal information for money. Some advertising cookies (GA ad_storage and the Reddit pixel) may be “sharing” under CPRA for cross-context advertising. Decline via the cookie banner or Footer “Manage Cookie Preferences”.
Voice recordings you upload for tools may be sensitive personal information. We process them only to provide the tool, then delete them on the schedule in Section 8.
California privacy requests: email hello@vocalpresets.com. We will respond within 45 days. We may need to verify your identity first.
16. Contact
For privacy-related requests, questions, or concerns, contact us at:
Vocal Labs LLC — Privacy
Email: hello@vocalpresets.com
A Delaware Limited Liability Company
AS Marina & Resort Complex, Falmouth Harbour, St. Pauls, Antigua