Privacy Policy

Paul Daudin Muñoz is the data controller for Eloq AI.

For any question about this policy or your data, write to paulmunozdaudin@gmail.com.

Account data (only if you sign up): name, email and password. We never see your password in plain text — it's handled encrypted by Supabase, our authentication provider.

Practice content: the title and topic you enter, the mode you choose, duration, the text transcript of what you said, and the AI-generated report (scores, summary, recommendations). We do not store your voice audio — it's processed into text and discarded.

If you practice without logging in, your history is stored only in your own browser's local storage. It never reaches our servers permanently.

Billing data (only if you subscribe to Pro): your email and subscription status. Payment data itself (card number, etc.) is collected and stored directly by Stripe, not by us.

Basic technical data: IP address and standard access logs generated by our hosting provider (Vercel) while serving the site, for security and availability purposes.

Live transcription is performed by your browser itself (Chrome/Edge's speech recognition API), not our servers. Depending on the browser, this may mean your audio is sent to that browser vendor's own speech-recognition service (for example, Google in Chrome's case) to convert it to text. That processing is governed by that vendor's own privacy policy, not ours.

We never receive or store the raw audio — only the resulting text, which you can review before it's analyzed.

Supabase (database and authentication hosting): if you have an account, it stores your profile and practice history.

Stripe: if you subscribe to the Pro plan, it processes your payment. Stripe receives your email and card details directly — we never see or store your full card number. From Stripe we only receive a customer identifier and your subscription status (active, cancelled, etc.).

OpenAI: only if the operator of this site has enabled this option, your transcript text is sent to the OpenAI API to generate feedback. Under OpenAI's API data policy, this data is not used to train their models. When this option isn't enabled, analysis runs on our own engine without leaving our infrastructure.

Vercel: our hosting provider, which processes the technical requests needed to serve the site.

We do not sell your data to third parties. We do not share your content for advertising purposes.

To provide the service you requested (legal basis: performance of a contract/usage relationship).

To improve the product and fix bugs (legal basis: legitimate interest).

To comply with legal obligations where applicable.

Your account data and saved sessions are kept while your account is active. You can delete any individual practice at any time from your history.

To delete your account entirely, email us at paulmunozdaudin@gmail.com — there is no self-service button for this today, but we'll handle the request within a reasonable time.

If you're in the European Economic Area, you have the right to access, rectify, erase, restrict processing of, object to, and request portability of your data. You may also lodge a complaint with your local data protection authority.

To exercise any of these rights, write to paulmunozdaudin@gmail.com.

This service is not directed at children under 16. If you are under that age, you need your legal guardian's consent to create an account.

We use browser local storage to remember your language, your theme (light/dark) and, if you practice without an account, your session history. If you're logged in, Supabase uses necessary technical cookies to keep you signed in. We don't use advertising or third-party tracking cookies.

We apply reasonable technical measures to protect your data, but no system is 100% secure. If we detect a breach affecting you, we'll notify you as required by applicable law.

If we make material updates to this policy, we'll change the date above and, where appropriate, notify you through other means.