Privacy Policy
Last updated: January 2026 July 2025
1. Introduction
Text2Voca (operated by 226datafab) is committed to protecting your personal data. This Privacy Policy explains what data we collect, how we use it, what rights you have, and how you can exercise them.
2. Who We Are
226datafab Representative: Sung Hwan Shin, Kyunghee Moon Address: Gyeongin-ro 579, Ansung Bldg A-226, Guro-gu, 08217 Seoul, South Korea Email: 226datafab [at] gmail [dot] com
3. What Data We Collect
We collect your email address upon registration, track usage data and IP addresses via Google Analytics, and process text inputs and YouTube URLs using AI models (Google Gemini, spaCy) and transcript services (TranscriptAPI, Supadata). Payment data is handled by Paddle. To measure marketing success, we also record anonymized click counts from promotional links. Text inputs are not stored permanently.
4. How We Use Your Data
We use your data to operate and improve the service, authenticate users, handle payments, analyze usage behavior, and ensure security.
5. Legal Basis for Processing
We process your data based on the following legal grounds under the EU General Data Protection Regulation (GDPR):
• Art. 6(1)(a) GDPR (Consent): for Google Analytics, Google AdSense, and marketing cookies
• Art. 6(1)(b) GDPR (Contract performance): for registration, subscription management, and AI-based text analysis
• Art. 6(1)(f) GDPR (Legitimate interest): for security monitoring, error analysis, and service optimization
6. Third-Party Services & Data Transfers
We use the following third-party services to provide our services:
• Paddle (Payment processing): https://www.paddle.com/legal/privacy
• Google Analytics (Usage analysis): Collects anonymized usage data. IP anonymization is enabled. Data transfer to the USA based on EU Standard Contractual Clauses. Opt-out: https://tools.google.com/dlpage/gaoptout
• Google AdSense (Advertising): To finance the free service for guest users and Lite users, we use Google AdSense. AdSense uses cookies to display personalized advertising. Data transfer to the USA based on EU Standard Contractual Clauses. You can disable personalized advertising at: https://adssettings.google.com. AdSense works with numerous advertising partners (list: https://support.google.com/adsense/answer/9012903).
• Google Gemini API (AI text analysis): Processes your text inputs for analysis. Inputs are not used for training Google models. Privacy: https://ai.google.dev/gemini-api/terms
• TranscriptAPI, Supadata (Transcription services): Extract subtitles from YouTube videos for analysis.
• Firebase Authentication (Google): Manages user accounts and logins.
Your data may be processed outside your country, particularly in the USA. We never sell or rent your data.
7. Cookies and Tracking Technologies
We use cookies and similar technologies. Cookies are small text files stored on your device.
Necessary Cookies (no consent required):
• Session cookies for login and user account management
• Language settings (ui_lang)
Duration: Session or up to 1 year
Analytics Cookies (consent required):
• Google Analytics (_ga, _gid): Collect anonymized usage data
Duration: _ga (2 years), _gid (24 hours)
Purpose: Improving user experience, error analysis
Marketing Cookies (consent required):
• Google AdSense (IDE, DSID, FLC, NID): Enable personalized advertising
Duration: 90 days to 2 years
Purpose: Financing the free service
You can disable cookies in your browser settings. Please note that this may limit the functionality of the service. You can withdraw your consent for analytics and marketing cookies at any time via our cookie banner.
8. Retention Periods
• Account data (email, username): As long as your account is active
• Payment data: 10 years (tax retention requirement)
• Analytics data (Google Analytics): Maximum 14 months
• Cookie data: See Section 7
• Text inputs: Not stored permanently, only temporarily for processing
9. Your Rights Under GDPR
As a data subject, you have the following rights:
• Right of access (Art. 15 GDPR): You can request information about your stored data
• Right to rectification (Art. 16 GDPR): You can request correction of inaccurate data
• Right to erasure (Art. 17 GDPR): You can request deletion of your data ('right to be forgotten')
• Right to restriction (Art. 18 GDPR): You can request restriction of processing
• Right to data portability (Art. 20 GDPR): You can receive your data in a structured format
• Right to object (Art. 21 GDPR): You can object to processing based on legitimate interest, particularly for Google Analytics and AdSense
• Right to withdraw consent (Art. 7(3) GDPR): You can withdraw your consent at any time with effect for the future. This does not affect the lawfulness of processing based on consent before its withdrawal
• Right to lodge a complaint: You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your data is unlawful
Competent supervisory authorities:
• Germany: Federal Commissioner for Data Protection (https://www.bfdi.bund.de)
• Austria: Data Protection Authority (https://www.dsb.gv.at)
• EU-wide: https://edpb.europa.eu/about-edpb/board/members_en
To exercise your rights, please contact us at: 226datafab [at] gmail [dot] com
10. Data Security
We implement technical and organizational measures to protect your data:
• Encryption: All data transfers are via HTTPS (TLS encryption)
• Access control: Only authorized personnel have access to personal data
• Server hardening: Regular security updates and firewall protection
• Backup strategy: Regular, encrypted backups for data recovery
Despite these measures, we cannot guarantee absolute security. Data transmission over the internet always carries risks.
11. Sample Withdrawal Form
If you wish to withdraw your consent to data processing, you can use the following template:
To: 226datafab, 226datafab [at] gmail [dot] com
I hereby withdraw my consent to the processing of my personal data.
Name: _____________________
Email address: _____________________
Date: _____________________
Signature: _____________________
12. Contact
For questions about privacy or to exercise your rights, please contact us at:
Email: 226datafab [at] gmail [dot] com
Address: Gyeongin-ro 579, Ansung Bldg A-226, Guro-gu, 08217 Seoul, South Korea
13. Changes to this Privacy Policy
This Privacy Policy may change to reflect new legal requirements or changes to our services. The current version is always available on our website. We will inform you by email of any significant changes.