Privacy Policy

Introduction

VarootaBay AI Labs ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website speaklingo.ai and use our services, including the SpeakLingo application and its Syping voice-to-text feature.

This policy applies globally and complies with the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and India's Information Technology Act, 2000.

Information We Collect

Information You Provide

• Email Address: When you join our waitlist or purchase a Founders Pass
• LinkedIn Profile URL: When you share our post to unlock 150-day waitlist access
• Payment Information: Processed securely by our payment provider (Dodo Payments). We do not store your card details.
• Communications: When you contact us for support or feedback

Information Collected Automatically

• Device Information: Browser type, operating system, device identifiers
• Usage Data: Pages visited, time spent, referral sources
• IP Address: For security and approximate location
• Cookies: As described in the Cookies section below

How We Use Your Information

• To process your waitlist registration and Founders Pass purchase
• To send you product updates, launch notifications, and important announcements
• To respond to your inquiries and provide customer support
• To improve our website and services
• To detect and prevent fraud or security issues
• To comply with legal obligations

Legal Basis for Processing (GDPR)

Under GDPR, we process your personal data based on the following legal grounds:

• Consent: When you join our waitlist or subscribe to marketing emails
• Contract Performance: When you purchase a Founders Pass, we process your data to fulfill the agreement
• Legitimate Interest: For website analytics, security, and fraud prevention
• Legal Obligation: When required by law (e.g., tax records, responding to legal requests)

Third-Party Services

We share your information only with trusted third parties necessary to operate our services:

• Dodo Payments: Payment processing
• SendGrid: Email delivery
• DigitalOcean: Website hosting
• Analytics providers: Website analytics (anonymized)

We do not sell your personal information to third parties.

International Data Transfers

Your data may be transferred to and processed in the United States by our service providers:

• DigitalOcean, LLC (USA) - Website hosting and deployment
• SendGrid/Twilio (USA) - Email delivery services
• Dodo Payments - Payment processing

These transfers are conducted under Standard Contractual Clauses (SCCs) approved by the European Commission, ensuring your data receives adequate protection regardless of location.

Data Retention

We retain your information for as long as necessary to provide our services and fulfill the purposes outlined in this policy. Specifically:

• Waitlist data: Until product launch or your request for deletion
• Founders Pass data: For the duration of your membership plus 7 years for tax/legal compliance
• Support communications: 3 years from last interaction

Your Rights (GDPR - EU/UK)

If you are located in the European Union or United Kingdom, you have the following rights:

• Right to Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your data ("right to be forgotten")
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a structured format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time

To exercise these rights, contact us at [email protected]. We will respond within 30 days. To request a full export of your data or permanent deletion of your account, email us with the subject line "Data Export Request" or "Data Deletion Request" and we will process your request within 7 business days.

Your Rights (CCPA - California)

If you are a California resident, you have the following rights under CCPA:

• Right to Know: What personal information we collect and how we use it
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: Opt out of the sale of personal information (we do not sell your data)
• Right to Non-Discrimination: Equal service regardless of exercising your rights

India - IT Act Compliance

In compliance with India's Information Technology Act, 2000 and associated rules:

• We implement reasonable security practices to protect your data
• We have appointed a Grievance Officer for your concerns
• We will respond to grievances within 48 hours

Data Security

We implement industry-standard security measures to protect your information:

• SSL/TLS encryption for all data in transit
• Secure payment processing (PCI-DSS compliant via Dodo Payments)
• Access controls and authentication
• Regular security assessments

Cookies & Tracking Technologies

We use cookies and similar technologies to improve your experience:

• Essential Cookies: Required for website functionality (session management, security)
• Analytics Cookies: Help us understand how visitors use our site (anonymized, no personal data)
• Preference Cookies: Remember your settings (language, theme preferences)

We do NOT use advertising or tracking cookies. You can control cookies through your browser settings. Disabling essential cookies may affect website functionality.

Email Communications (CAN-SPAM Compliance)

We comply with the CAN-SPAM Act of 2003. For commercial emails we send:

• We will not use false or misleading subjects or email addresses
• We will identify the message as an advertisement when required
• We will include our physical business address in emails
• We will honor opt-out/unsubscribe requests within 10 business days
• We will not sell or transfer your email to third parties for marketing

To unsubscribe, click the "unsubscribe" link at the bottom of any email, or email us at [email protected] with subject "Unsubscribe".

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last Updated" date. For significant changes, we will send you an email notification.