TomeVox is operated by Daniel Shilansky, Kastanienallee 16, 12627 Berlin, Germany ("we", "us", "our"). This policy explains what data we collect about users of tomevox.com and app.tomevox.com, how we use it, and your rights under applicable law including the EU General Data Protection Regulation (GDPR/DSGVO).
Account data: When you create an account, we collect your email address. Sign-in is handled by Clerk (see Section 4), and TomeVox never stores your password.
How you heard about us (optional): Right after you create an account, we ask how you heard about TomeVox. Answering is optional and you can skip it. If you answer, we store your choice (and any text you add under "Other") on your account record, to understand how authors find us. It is not sent to our analytics providers, and it is kept until you close your account.
Uploaded files: Manuscripts you upload (EPUB, PDF, DOCX, TXT) are stored to process your audiobook order. Files are deleted from our servers within 14 days of delivery. In this policy, "delivery" means your purchase of the full audiobook (payment confirmed).
Generated audio: Audio files we produce for you are stored for 90 days after delivery. You can download and delete them at any time from your account.
Payment data: We use Stripe for payments. We never see or store your full card number. Stripe's privacy policy governs payment data.
Usage data: Our analytics provider, PostHog, follows your analytics preference in our cookie preference center. Where opt-in consent is required (for example the EU/EEA, the UK and Canada), analytics stays off until you accept it. In regions with a notice-and-opt-out model (the United States, Australia and New Zealand), optional analytics is enabled by default for first-time visitors and you can turn it off at any time. Where analytics is enabled, PostHog (our analytics/product-improvement provider) captures pageviews, our fixed product events, click/scroll heatmap data, and session recordings on both tomevox.com and app.tomevox.com. On app.tomevox.com, session recordings mask typed input and on-screen text, since the app displays your account details and manuscript information. On tomevox.com, our public marketing site, recordings are unmasked — its only inputs are non-personal word-count calculator fields, and there is no account data to display. When you are signed in, this activity is linked to your account profile (including your email address) so we can understand product usage.
Cookie preferences: Your browser stores your cookie choices. For signed-in users, we also keep the current analytics-consent state so server-side analytics can respect it.
Newsletter subscription: If you subscribe to our newsletter, we collect your email address and record your consent via Brevo, our email marketing platform. A double opt-in confirmation email is sent to verify your address before any marketing emails are delivered.
Rights declaration log: When you upload a manuscript, you are required to confirm that you hold the rights to create an audiobook from it. We log this declaration — including your user ID, the manuscript identifier, the exact text of the declaration you confirmed, your IP address at the time, your browser type, and the UTC timestamp. This log is retained for 10 years (see Section 5). See Section 7 for the legal basis.
Server logs: Standard server logs (anonymised IP address, browser type, pages visited, timestamps) are retained for up to 30 days for security and operational purposes.
We do not sell your data. We do not use your manuscript content to train AI models. You can unsubscribe from marketing emails at any time using the link in every email.
Strictly necessary: We use a single session cookie to keep you logged in to your account. This cookie is exempt from consent requirements under GDPR, UK GDPR, and CCPA as it is essential to service operation.
Analytics: We use PostHog, our optional analytics/product-improvement provider, to understand product and marketing-site usage. PostHog's code loads when a page loads, but it starts with event capture and browser storage switched off, and is switched on only according to your analytics preference (see above). PostHog events do not use ad click identifiers and are not shared with advertising networks.
Cookie preferences: We use the cookie preference center to control PostHog. Where opt-in is required, no analytics events are captured and PostHog stores nothing in your browser until you accept; where analytics is enabled by default, you can opt out. You can change your choice at any time via the "Cookie settings" link in the footer of every page.
We use the following third-party services to operate TomeVox:
International transfers. Some of the providers above process data outside the EU/EEA, notably in the United States (for example Google, Clerk, Stripe and Cloudflare). Where a provider is certified under the EU–U.S. Data Privacy Framework, transfers rely on that adequacy decision; otherwise they rely on safeguards such as the European Commission's Standard Contractual Clauses (Art. 46(2)(c) GDPR). You can request a copy of the relevant safeguards at [email protected].
In this section, "delivery" means your purchase of the full audiobook (payment confirmed).
Rights declaration logs are retained for 10 years from the date of upload. This period reflects the applicable limitation period for copyright infringement claims under German law (§ 102 UrhG in conjunction with §§ 195, 199 BGB). Rights declaration logs are exempt from deletion requests under GDPR Article 17(3)(e) (processing necessary for the establishment, exercise, or defence of legal claims).
Depending on your location, you may have the following rights regarding your personal data:
For users in the EU/EEA and UK, we process personal data under the following legal bases:
All data is transmitted over HTTPS. Files are stored encrypted at rest on Cloudflare R2. We use industry-standard security practices and conduct regular reviews.
If we make material changes to this policy, we will notify registered users by email and update the "last updated" date above. Continued use of the service after changes constitutes acceptance.
The data controller responsible for your personal data is:
Daniel Shilansky
Kastanienallee 16
12627 Berlin
Deutschland
E-Mail: [email protected]
You have the right to lodge a complaint with the Berlin data protection authority: Berliner Beauftragte für Datenschutz und Informationsfreiheit, Friedrichstr. 219, 10969 Berlin, datenschutz-berlin.de.
Questions about this policy? Email [email protected].