Speechkin Privacy Notice

Version privacy-v2.0 · Effective 2026-10-04 · Operator: Back and There LLC · Privacy contact: support@speechkin.com

1. Scope

This notice explains how Speechkin handles personal information. An adult participant answers questions about a wedding speech, vows, or a ceremony script in Speechkin, and Speechkin uses an AI service to help structure and draft the text. Speechkin is open to residents of any U.S. state.

This notice does not authorize Speechkin to publish a participant's stories, use them in advertising, or use story text to train a model. Those uses require separate, specific permission.

2. Information we collect

If you sign in with Google, Speechkin receives the name and email that Google shares, for sign-in only.

• participant name and contact information;
• names, relationships, memories, quotes, and other information the participant submits about themselves or other people;
• requested tone, topics marked off-limits, story cards, drafts, edits, and feedback;
• consent records, including notice version, date, time, and the participant's acceptance;
• limited technical information required for hosting, security, and AI requests;
• payment and transaction identifiers and the email address used at checkout if the participant purchases a draft. Card details are collected by Stripe, not by Speechkin, and payment and entitlement records are held in Supabase.

Do not submit another person's sensitive information, including health, therapy, addiction, sexual or reproductive, genetic or biometric, financial, immigration, government identifiers, or anything similar. An uploader cannot provide every statutory consent that may belong to the person the information concerns. For topics the speech must avoid, give only a short neutral label, such as a first name or a one-word tag, and do not explain the private fact.

3. How we use the information

• conduct the interview and create story cards and draft text;
• communicate with the participant, provide support, and honor off-limits topics;
• process payment and restore a purchase, including email sign-in links that restore access;
• secure and troubleshoot the service;
• evaluate Speechkin using participant feedback and aggregated operational results.

We do not use submitted story text to train a model. We do not publish it or use it in testimonials, examples, or marketing without separate, specific permission.

4. Human access

Participants enter their own answers in Speechkin. The Speechkin team does not routinely read story answers. A team member may see them when fixing a problem with the service or answering a support request, and uses them only for that purpose.

5. AI processing

Speechkin sends the text needed for interviewing and drafting through OpenRouter using zero-data-retention routing, with provider training and data collection denied. OpenRouter says it does not store prompt or response content unless account logging is enabled; Speechkin verifies that logging is off. OpenRouter may retain non-content request metadata and use transient in-memory caching.

Speechkin verifies and documents that OpenRouter account prompt logging is off. Speechkin will not enable a direct AI-provider route that bypasses these controls without updating this notice. Reference: OpenRouter zero-data-retention.

6. Storage and retention

• Messages a participant sends to the Speechkin team and any working copy Speechkin holds: deleted within 30 days after the last activity on the message or copy, or earlier on verified request, except for the minimal consent record and legally required transaction records.
• Browser session: Speechkin automatically saves the session in this browser (the names, answers, story cards, transcript, and draft) for no more than 30 days, or until the participant selects Clear my data or clears the browser's site data. This copy lives in the browser and cannot be deleted remotely by Speechkin.
• AI content: handled under the OpenRouter controls in section 5.
• Consent receipt: stored as part of this browser session and removed when the session expires or you choose Clear my data.
• Aggregated metrics: retained only when they do not identify a participant or reveal story content.
• Payment, entitlement, tax, fraud, and dispute records: retained for the period required by law, typically up to seven years for tax records.

A participant who wants Speechkin to keep raw story text beyond 30 days for future reuse must choose a separate optional retention permission that states the period and the deletion method.

7. Consumer health data

Speechkin is for wedding speeches, not health information, and we ask you not to include health, medical, mental-health, or other sensitive details. If you include such details, Speechkin handles them as described in sections 3 through 8. The text is routed through a zero-data-retention AI routing service that does not retain or train on it (see section 5). Speechkin deletes any working copy it holds within 30 days after the last activity on that copy, or sooner after a verified request (see section 6). The copy saved in your own browser expires 30 days after the session was first saved, and you can delete it sooner with Clear my data (see section 6). We do not sell your information, share it for advertising, or use it to train models.

8. Service providers and disclosures

Speechkin shares information with OpenRouter and its allowlisted zero-data-retention model providers, currently Anthropic for interviewing, story extraction, safety checks, drafting, rehearsal notes, and grounding; Resend, to send sign-in links that restore a purchase, when you ask us to email your finished speech, and when you give us your email address to finish your keepsake with you; Vercel, to host Speechkin and count page views; Stripe, to process payments; and Supabase, to hold sign-in, payment, and entitlement records.

Vercel Web Analytics counts page views so we know how many people visit. It sets no cookie and no identifier in your browser, and it cannot follow you to another site. We strip the query string from every page address before it is recorded, keeping only campaign tags, so links containing a sign-in or unlock code never reach it.

PostHog analytics is disabled; any later activation requires an updated notice and controls. We may also disclose information when required by law, to protect rights or security, or as part of a business transaction subject to appropriate safeguards and notice. We do not sell personal information or share it for cross-context behavioral advertising.

9. Participant choices, requests, and appeals

A participant may:

• stop answering at any time;
• ask the Speechkin team to delete any working copy held by Speechkin;
• use Clear my data in the same browser to remove the Speechkin session;
• ask for a copy or correction of information held by Speechkin;
• decline optional retention, product-improvement, marketing, or testimonial uses without losing access to the core service.

Send requests to support@speechkin.com. We may verify the requester before acting. We aim to respond within 45 days. If we decline a request, we will explain why; a participant may appeal that decision by replying to support@speechkin.com with the word "appeal," and we will review the appeal and respond. This request-and-appeal process covers messages sent to us, provider requests, and payment or entitlement records. It cannot reach data already deleted, data the law requires us to keep, or a browser copy that only the participant's device holds.

10. Cookies, local storage, and analytics

Speechkin automatically saves the session in this browser using local storage for up to 30 days to preserve the session; the participant can use Clear my data sooner. PostHog analytics is disabled, and Speechkin does not intentionally use advertising or cross-site tracking technologies. Because Speechkin uses no cross-site behavioral advertising, Speechkin does not currently offer a separate Do Not Track control.

11. Children

Speechkin is for adults 18 or older. We do not knowingly collect information from children. If we learn a participant is under 18, we stop collection and delete any copy we hold unless the law requires otherwise.

12. Security

We use reasonable administrative and technical safeguards, including data minimization, limited access, provider-routing controls, and deletion procedures. No system is perfectly secure; participants should not submit information they do not want processed as described here.

13. Changes

We will provide the updated notice and obtain a new acknowledgement before materially changing how already collected raw story content is used. The effective date and version appear at the top.

14. Contact

Back and There LLC
support@speechkin.com

Changelog

• privacy-v2.0 (2026-10-04): Speechkin is now a public service, not an invite-only pilot. Participants enter their own answers, and the Speechkin team does not routinely read them. Payments are live, so section 8 no longer describes the email unlock used while payments were off. Section 8 now names the purpose of each service provider, including Resend for sign-in links. Sections 6 and 7 now count the 30-day deletion period from the last activity on a message or copy.
• pilot-privacy-v1.2 (2026-08-16): the pilot is now open to residents of any U.S. state. Following a state-law review, the earlier Connecticut, Washington, and Nevada exclusion is replaced with a prohibition on submitting health or other sensitive information, and a new consumer-health-data section (section 7) explains how any such text is handled. The provider disclosure now names Anthropic for all speech-processing tasks.
• pilot-privacy-v1.1 (2026-07-28): while payments are off, unlocking sends your email address through Resend to the Speechkin team so a person can reply to you. Adds Vercel Web Analytics for page counts.
• pilot-privacy-v1.0 (2026-07-21): initial pilot privacy notice.