1. Data Controller

VoiceCraft is a service operated by RevCraft Oy (Business ID 3633703-5), Neidonkalliontie 25, 02400 Kirkkonummi, Finland. For privacy matters, contact petteri@revcraft.io.

2. What We Collect

Account data: your name, email address, company, and role.

Content data: interview answers, voice profiles, generated posts, and any notes you provide.

LinkedIn data (only if you connect your account): your LinkedIn member ID, name, profile picture, email, and an OAuth access token that allows us to publish posts you have approved to your profile.

3. How We Use LinkedIn Data

When you connect your LinkedIn account, we request the scopes openid, profile, email, and w_member_social. We use this access solely to:

identify your account, and

publish content that you have reviewed and approved to your LinkedIn profile, at the time you schedule.

We never post without your explicit approval, and we do not read your LinkedIn feed, connections, or messages. You can disconnect your LinkedIn account at any time, which deletes the stored access token.

4. Legal Basis (GDPR)

Performance of our contract with you (delivering the service).

Your consent (connecting LinkedIn and publishing on your behalf).

5. Sub-processors

We share data only with the providers needed to run the service:

Supabase — database & authentication (EU region, Ireland)

Vercel — hosting (USA)

Anthropic (Claude API) — AI content generation (USA)

Resend — transactional email (USA)

LinkedIn — publishing on your behalf

6. International Transfers

Your data is primarily stored within the EU/EEA (Supabase, Ireland). Some of our other providers (Vercel, Anthropic, Resend) are located in the United States. Where personal data is transferred outside the EU/EEA, such transfers rely on the European Commission's Standard Contractual Clauses (SCCs).

7. Retention

We retain your data for the duration of your subscription and delete or anonymise it within 90 days of account closure, unless law requires longer retention.

8. Your Rights

You have the right to access, correct, export, or delete your data, to withdraw consent, and to object to processing. To exercise these rights, contact petteri@revcraft.io. You may also lodge a complaint with the Finnish Data Protection Ombudsman (tietosuoja.fi).

9. Cookies

We use essential cookies for authentication and session management only. We do not use advertising or tracking cookies.

10. Changes

We may update this policy from time to time and will post the new date at the top of this page.