PACES Voice — Privacy Policy

1. Who we are

PACES Voice (pacesvoice.com) is the data controller for the personal data described in this policy. Contact us at info@pacesvoice.com.

2. What we collect

• Account details - your name and email address, via Clerk.
• Subscription and payment status via Stripe - we do not store your card details directly.
• Practice transcripts, audio and feedback from your stations.
• Usage data - cases attempted, timestamps, and IP address/browser information for security purposes.

3. How we use it

• To provide the service - running stations, generating feedback, and your dashboard history.
• To process payments and manage your subscription.
• To keep the service secure and prevent abuse.
• To improve the platform, using aggregated and anonymised data.

4. Legal basis

We process your data on the basis of performance of a contract with you, our legitimate interests (such as security and service improvement), and consent where we separately ask for it (for example, marketing).

5. Third parties who process data

We use Clerk (authentication), Stripe (payments), and Anthropic and OpenAI (to power the simulated patients, examiners and voice features). Some of these providers may process data outside the UK/EEA, under appropriate safeguards such as Standard Contractual Clauses.

6. Retention

Practice transcripts and feedback are kept while your account is active and deleted within 30 days of account closure, except billing records, which we keep for 6 years for tax purposes. Account and billing data is kept for the life of your account plus any legal minimum retention period.

7. Your rights

You have the right to access, correct or erase your data (subject to our legal retention obligations), object to or restrict certain processing, and request data portability. You can also complain to the ICO. To exercise any of these rights, contact info@pacesvoice.com.

8. Security

We use industry-standard measures to protect your data, including encryption in transit and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

9. Children

PACES Voice is not intended for anyone under 18, and we do not knowingly collect data from anyone under 18.

10. Changes to this policy

We may update this policy from time to time. The updated version will be posted here with a new "last updated" date. We will notify you by email of any significant changes.