Privacy Policy
Last updated
This policy explains what Omnivox collects, what it does not collect, how the content you dictate is handled, and who it is disclosed to. What applies to you depends on your plan. On the free plan, the text produced from your speech is uploaded to our servers whenever your device has a working internet connection, is retained in your account, and from 1 December 2026 is disclosed to third parties, including data brokers and advertising companies, in exchange for payment. That is how the free plan is paid for. On Pro and on Corporate, no transcription content is collected, retained or disclosed at all. With the network disabled, nothing leaves your device on any plan. Audio is not recorded or retained on any plan, at any time.
Summary
Audio is never recorded or retained, on any plan. On the free plan, transcription text is uploaded whenever your device is online, retained for 12 months, and from 1 December 2026 sold to data brokers, advertising networks and marketing analytics providers; this is what funds the free plan and there is no setting that switches it off while you remain on that plan. On Pro and Corporate, nothing you dictate is collected, retained or sold. With the network disabled, nothing is uploaded on any plan. Special category data, the data of children, and content dictated before 1 December 2026 are never sold. This summary is for orientation only; the sections below govern.
Who we are
Omnivox is produced by PT Orico Teknologi Cerdas, a company registered in Indonesia, of Voffice Gold Coast PIK, Gold Coast Office Eiffel Tower, Pantai Indah Kapuk, Level 12, Jakarta 14470, Indonesia. For the purposes of the GDPR and the other laws named in this policy, we are the controller of the personal data described here. For any matter arising under this policy, including a request to access, correct or delete the data we hold, or to opt out of disclosure, contact hello@omnivox.tw. We respond in English and Traditional Chinese.
Definitions used in this policy
“Personal information” and “personal data” mean information relating to an identified or identifiable person. “Local Mode” means operation in which recognition and task planning run entirely on your own device. “Cloud Mode” means operation in which speech is transmitted to our servers or our processors. “Transcription Text” means the text produced from your speech in Cloud Mode. “Sale” means disclosure to a third party in exchange for money or other valuable consideration. “Sharing” means disclosure for cross-context behavioural advertising. “Processor” means a party that processes data only on our instructions; “third party” means a party that determines its own purposes.
What this policy covers
This policy covers the Omnivox desktop application for macOS and Windows, the services it connects to, this website, and the emails we send you. It does not cover a self-hosted or on-premise deployment within your own organisation: in that case your organisation determines what is collected and is the controller of it, and this policy describes only the capabilities of the software. It does not cover a third-party application that Omnivox is directed to interact with at your instruction.
Local and cloud modes
Omnivox performs recognition in two ways. In Local Mode, recognition and task planning run on your own device rather than on our servers. In Cloud Mode, speech is transmitted to models we operate or license, and the result is returned to you. Local Mode describes where the work is done; it does not by itself mean that nothing is transmitted. On the free plan, the text produced in Local Mode is uploaded to our servers whenever your device has a working internet connection, and from that point is treated exactly like Cloud Mode text under this policy. If the device has no internet connection, or you disable its connection, nothing is uploaded and the text remains on your disk until a connection is next available, at which point it is uploaded unless you have deleted it. On Pro and Corporate, nothing produced in either mode is uploaded or retained.
What applies to each plan
On the free plan we collect and retain transcription text, we use it as described in this policy, and from 1 December 2026 we sell it. On Pro we collect no transcription content of any kind: where you use Cloud Mode your speech is transmitted, transcribed, the result is returned to you and the text is discarded as it is delivered, and nothing you dictated is written to our storage or held in your account. Your history on Pro is kept in a file on your own device instead, where it remains yours to open, export or delete. What we hold for a Pro account is your email address, your name if you have given one, and the operational records described below, being your plan and subscription state, the devices that have signed in, and diagnostics and crash reports, none of which contain anything you dictated. Payment is taken by Stripe, which holds your card details; we never receive or store them. On Corporate the same applies, and in an on-premise deployment nothing reaches us at any point. None of this data is sold on any plan.
Categories of personal information we collect
On every plan we collect: identity data, being your email address and your name if you give one; account data, being the date the account was created, the age confirmation given at sign-up and the devices that have signed in, identified by model and operating system version; commercial data, being your plan and subscription state together with a billing reference issued by Stripe, but never your card number, which Stripe holds and we never receive; technical and diagnostic data, being the measurements described below, crash reports and the application and operating system versions, none of which contain anything you dictated; and support data, being anything you write to us or submit through a form. On the free plan only, we additionally collect transcription text, Autopilot context as described below, and inferences drawn from that content, including inferred interests and commercial preferences. On Pro and Corporate we collect none of those three, and no transcription content of any kind.
Audio is not recorded or retained
This commitment applies in both modes, at every plan level, and irrespective of anything else in this policy. Microphone audio is streamed only for the period required to convert it into text and is then discarded. It is not written to disk, not placed in storage, and not transmitted to any third party for storage. It is never sold, shared or otherwise disclosed, because no recording exists to disclose. No setting, plan, support process or commercial arrangement alters this.
Transcribed text in cloud mode
On the free plan, text produced from your speech is retained in your account on our servers from the moment it is uploaded. It is retained so that your history is available to you across your devices, so that an interrupted or failed dictation can be recovered, so that we can investigate a problem you report in relation to a specific result, so that we can measure and improve recognition quality, and, from 1 December 2026, so that it can be sold as described below. Text alone is retained. Audio is not. On Pro and Corporate nothing is retained on our servers. History on those plans is written to a file on your own device and stays there: it is available to you, you can open, export or delete it yourself, and it does not follow you between machines.
Sale and sharing of personal information
From 1 December 2026, we disclose the transcription text of free-plan accounts, and the associated commercial and inferred data described above, to third parties in exchange for money or other valuable consideration. Under the California Consumer Privacy Act this is a “sale”, and where the disclosure is for cross-context behavioural advertising it is also a “share”. Under the GDPR and the other laws named in this policy it is a disclosure to a third party acting as a controller in its own right. The categories of recipient are: data brokers; advertising networks and advertising technology providers; marketing analytics and audience measurement providers; and commercial research providers. The purposes are advertising, audience segmentation, market research and the recipients’ own commercial purposes, which we do not control once the disclosure is made. We do not disclose your email address, your password, your card details, any government identifier, or any audio. Nothing belonging to a Pro or Corporate account is ever disclosed under this section, because nothing is collected from those accounts.
What is never sold or shared
The following are excluded from any disclosure under the section above, in every jurisdiction and irrespective of consent: anything dictated on a Pro or Corporate account, which is not collected at all; anything dictated while the device has no internet connection, which is never uploaded; audio, which does not exist; the content of any account held by a person under 18, which we do not knowingly sell or share; special category data within the meaning of Article 9 of the GDPR, and equivalent sensitive data under the other laws named in this policy, except with your separate explicit consent obtained for that purpose; transcription text dictated before 1 December 2026, which was collected under a policy stating that it would not be sold and which is not disclosed under this section unless you separately consent; the content of a self-hosted or on-premise deployment, which never reaches us; your account, billing and card data; and the contents of a bug report or support message you send us.
Consent, where your jurisdiction requires it
If you are on the free plan and in the European Economic Area, the United Kingdom, Indonesia, Taiwan, or any other jurisdiction whose law requires consent before personal data is disclosed to a third party for its own commercial purposes, we make no disclosure under the sale and sharing section unless you have given prior, specific, informed and freely given opt-in consent. Consent is requested separately from acceptance of the Terms, is not bundled with any other permission, and is refused by default. If you refuse, you may continue to use the free plan and we will not sell your information; refusal does not reduce the features available to you. You may withdraw consent at any time, with the effect described in the next section.
How to stop your information being sold
There is no setting that switches the sale off while you remain on the free plan. The free plan is provided at no charge, and the sale of the data it produces is what pays for it; the two are not offered separately. If you do not want your information sold, any of the following stops it, and each takes effect immediately: move to Pro or Corporate, from which nothing is collected and nothing is sold; use Omnivox with the device’s internet connection disabled, in which case nothing is uploaded; or close your account, which deletes what we hold within 30 days and which we will do for you on request. Moving to a paid plan stops future collection but does not by itself delete what was collected while you were on the free plan; ask us and we will delete that too.
Rights that cannot be waived by agreement
Some jurisdictions give you a right to stop the sale of your personal information without moving to a paid plan and without closing your account, and provide that the right cannot be given up by agreeing to a policy such as this one. California is one: the California Consumer Privacy Act grants a right to opt out of sale and sharing, requires us to honour a recognised opt-out preference signal such as Global Privacy Control, and makes void any term purporting to waive it. Where we rely on your consent, the GDPR, Indonesian Law No. 27 of 2022 and the Taiwan Personal Data Protection Act each allow you to withdraw that consent at any time. Where such a right applies to you, it applies despite anything else in this policy, we honour a request to exercise it on receipt without requiring you to close your account or to change plan, and we do not charge you or degrade your service for making one. Write to hello@omnivox.tw.
Effect of refusing, withdrawing consent or moving to a paid plan
Each takes effect prospectively. We stop disclosing your personal information from the date it takes effect, and we notify every recipient to which we disclosed it in the preceding 12 months, instructing them to cease processing it for their own purposes and to delete it. We cannot compel a recipient to undo processing already carried out, and we do not represent that we can. Your access to Omnivox and the features available to you on your plan are unaffected, and we do not offer any financial incentive beyond the free plan itself in exchange for permitting disclosure.
What we do not do with your transcribed text
We do not use Transcription Text to train or fine-tune any model, our own or a third party’s, and our processors are engaged on terms prohibiting them from doing so. We do not access it as a matter of routine: staff access is limited to the personnel who operate the service, requires a stated reason, and is recorded in an audit log that cannot be edited or deleted. We do not disclose it to any government or law enforcement body except where compelled by a valid legal process, and where we are permitted to notify you of such a demand we will do so.
Local mode
Local Mode means that recognition runs on your device. On Pro and Corporate, nothing produced in Local Mode is uploaded or retained, and local history is written to a file on your own disk which you may open, export or delete and which no part of this service reads. On the free plan, local history is written to that same file and is also uploaded to your account whenever the device has a working internet connection, after which this policy applies to it in full. If you want nothing to leave the device on the free plan, disable the device’s internet connection, or move to a paid plan.
Retention of transcribed text
On the free plan, transcription text is retained for 12 months from the time it is created and is then deleted automatically. You may delete any of it sooner, individually or in full, from the application. If you close your account, all data attached to it, including all transcription text, is deleted within 30 days. Backups are overwritten on a rolling 35-day cycle, after which a deleted item is removed from those also. Data already disclosed to a third party before deletion is subject to that third party’s own retention, which we do not control. On Pro and Corporate there is nothing to retain and nothing to delete.
Retention of other categories
Account data is retained for as long as the account exists and for 30 days after it is closed. Billing records are retained for seven years, or such longer period as tax or accounting law requires, because we are obliged to keep them. Diagnostics and crash reports are retained for 90 days. Support correspondence and bug reports are retained for 24 months. Records of consent, refusal and opt-out are retained for as long as we rely on them and for three years afterwards, because we must be able to demonstrate them.
Disabling collection
On Pro and Corporate, collection of transcription text is off and cannot be turned on. On the free plan, the only ways to prevent collection are to use the device without an internet connection or to move to a paid plan; there is no in-application setting that disables the upload while the device is online and the account is on the free plan. This is stated plainly because a setting that appeared to disable it while it continued would be worse than not offering one.
Autopilot and the data it transmits
When you use Autopilot, the spoken command is transmitted together with a short list of the applications installed on your device to which the command may plausibly refer, the name of the application currently in focus, and, where the command concerns content you have highlighted, that highlighted text. For a complex task that you have enabled, and only where the model indicates that it cannot proceed without visual context, an image of a single window — the window in which you are working, never the entire screen and never other windows — is captured and transmitted. No image is captured other than on that request, and the application displays an on-screen indication while it occurs. Window images are processed for the task and deleted within 24 hours, and are never sold or shared.
Diagnostics
The application reports measurements describing how a command was handled: the duration of audio in milliseconds, the ambient noise level, the time a model took, the step executed, and the versions of the application and the operating system. These contain no transcribed content and no audio. They are used to investigate reported failures and to monitor the reliability of the service.
Crash reports
If the application crashes, a report is transmitted to Sentry containing the stack trace, the build identifier and your account identifier, but not your email address and not your text. Session replay is disabled, screenshots and view hierarchies are disabled, and messages are scrubbed before transmission.
Bug reports
If you submit a bug report from within the application, we store the text you entered, your email address, the application version, the operating system, and any screenshot you chose to attach. Screenshots are held in private storage and accessed through links that expire. Nothing is captured automatically, and nothing you send us in a bug report is ever sold or shared.
Account and billing
An account is required on every plan, including the free plan, and is created with an email address that you verify before the account becomes active. That verified address is what lets us attach a consent, a refusal, an opt-out or a deletion request to a particular person, and it is the address we write to. To maintain an account we store that email address, your name if you give one, the date the account was created, the age confirmation given at sign-up, and the devices that have signed in, identified by model and operating system version. Payment is processed by Stripe: your card details are provided to Stripe and held by Stripe, and we never receive or store them. We hold your plan, your subscription state and a billing reference, which are what enable us to explain a charge to you. None of this is sold or shared on any plan.
This website
The site operates no analytics, no advertising tags, no session replay and no third-party fonts, and the pages it serves reference no external host. It sets no cookies other than those strictly necessary to serve the page and to remember your language, for which no consent is required. If you complete a form on this site, such as a cancellation reason or a payment problem, we store the information you submitted and, where you provided it, your email address, so that we can reply.
Email we send you
We send service email because you hold an account: sign-in codes, billing notices, security notices and notices of changes to this policy. You cannot opt out of these while you hold an account, because they are necessary to operate it. We send marketing email only with your consent, and every marketing message carries a means of unsubscribing that takes effect immediately.
Who processes data for us
ElevenLabs transcribes speech. Anthropic cleans up text and plans Autopilot tasks. TypeSafe, through OpenRouter, routes simple Autopilot decisions. Supabase hosts our database, authentication and storage. Stripe processes payments. Resend sends email. Vercel hosts this website. Sentry receives crash reports. Each is engaged as a processor under terms limiting it to acting on our instructions, and none is permitted to train on your content or to use it for its own purposes. A processor is not a recipient under the sale and sharing sections, and a disclosure to a processor is not a sale.
Third parties to whom we disclose for value
The recipients described in the sale and sharing sections receive data as controllers in their own right, not as our processors. We maintain a current list of those recipients, by name and category, which we provide on request to hello@omnivox.tw. Each is engaged under a contract requiring it to honour your opt-out or withdrawal of consent when we pass it on, to limit onward disclosure, and to comply with the applicable privacy laws; we are not, however, responsible for its compliance, and once data is disclosed it is processed for purposes we do not determine.
Where your data is processed
Our database and storage are hosted in Singapore. Our model providers process requests in the United States and the European Union. Recipients under the sale and sharing sections may be located in any jurisdiction, including jurisdictions that have not been found to provide an adequate level of protection.
Safeguards for international transfers
Where data is transferred out of the European Economic Area or the United Kingdom, the transfer is made under the European Commission’s standard contractual clauses, the UK International Data Transfer Addendum, or an equivalent mechanism in the recipient’s terms, together with a transfer risk assessment where one is required. Transfers from Indonesia are made in accordance with Law No. 27 of 2022, and transfers from Taiwan in accordance with the Personal Data Protection Act. You may request a copy of the relevant safeguard by writing to us.
Security
All data is transmitted over TLS. Transcription Text and screenshots are held in storage that is private by default, with access rules enforced by the database rather than by application code. Staff access to the operations console is role-based, requires separate authentication, and every change it makes is written to an append-only audit log. Access is reviewed periodically and removed when no longer required. No system is wholly secure, and we do not represent that ours is.
Breach notification
In the event of a personal data breach presenting a risk to you, we will notify the relevant supervisory authority without undue delay and, where required, within 72 hours of becoming aware of it, and will notify you without undue delay where the breach is likely to result in a high risk to your rights and freedoms. A notification will describe what happened, what data was affected, what we have done and what you can do.
Your rights
Wherever you reside, you may request a copy of the data we hold about you, request its correction, request its deletion, object to a particular use of it, request that we restrict its processing, request it in a portable machine-readable form, and withdraw any consent you have given. Where you are in a jurisdiction granting the right, you may also opt out of the sale or sharing of your personal information, and may ask us to limit the use of sensitive personal information. You may also instruct an authorised agent to exercise these rights for you.
How to exercise your rights
Write to hello@omnivox.tw, or use the controls in the application under Settings → Privacy. We respond within 30 days, and within 45 days where a jurisdiction allows a longer period and the request is complex, in which case we will tell you before the first period expires. We do not charge for a request unless it is manifestly unfounded or excessive, and we will say so before doing so. Where we cannot comply with a request, we will explain why and tell you how to complain.
Verifying a request
To protect you, we verify that a request comes from you before we act on it, ordinarily by confirming control of the email address associated with the account. We ask only for what is necessary to verify the request and do not retain the verification material afterwards. An opt-out of sale or sharing is not subject to verification and is acted on without it.
Lawful basis for processing
We process your account and subscription data because it is necessary in order to perform the contract you have entered into, on every plan. On the free plan we process transcription text to perform that contract and for our legitimate interest in a service that functions and can be supported. We process diagnostics and crash reports in our legitimate interest in reliable software. We retain billing records to comply with a legal obligation. We disclose free-plan personal information under the sale and sharing section on the basis of your consent where consent is required, and otherwise on the basis of our legitimate interest in funding a plan offered at no charge, which we have balanced against your interests and which you may object to as described in the section on rights that cannot be waived.
Special category and sensitive data
Speech may contain special category data within the meaning of Article 9 of the GDPR, including data about health, religious or philosophical beliefs, political opinions, trade union membership, sex life or sexual orientation, and may contain equivalent sensitive data under the other laws named in this policy. We do not seek such data and we do not knowingly process it for any purpose beyond producing the text you asked for. It is excluded from the sale and sharing sections unless you have given separate explicit consent for that specific purpose, and we do not request such consent at present.
Automated decision-making and profiling
We do not make decisions producing legal or similarly significant effects concerning you by automated means. Recognition and Autopilot planning are automated, but they carry out your instruction rather than make a decision about you. Recipients under the sale and sharing sections may use data they receive to build commercial profiles and to segment audiences for advertising; where you have consented or not opted out, that profiling takes place under their control, and you may exercise your rights against them directly as well as against us.
Children
Omnivox is not intended for children. You must be at least 16 years old to create an account, or older where the jurisdiction in which you reside sets a higher age for entering into an agreement of this kind. You are asked to confirm this when you register. If we learn that an account is held by a person below that age, we will close it and delete the data it holds. We do not knowingly sell or share the personal information of any person under 18, and where we become aware that we have done so we will notify the recipient to delete it.
If you are in the European Economic Area or the United Kingdom
Your rights arise under the GDPR and, in the United Kingdom, the UK GDPR and the Data Protection Act 2018. On the free plan we rely on your opt-in consent for any disclosure under the sale and sharing section, and you may withdraw it at any time, as easily as it was given, without affecting the lawfulness of processing before withdrawal and without closing your account or changing plan. On Pro and Corporate no such disclosure occurs. You have the right to lodge a complaint with your national supervisory authority, and in the United Kingdom with the Information Commissioner’s Office. We have no establishment in the Union and act through the contact address in this policy.
If you are in California
Your rights arise under the California Consumer Privacy Act as amended by the California Privacy Rights Act. We sell and share the personal information of free-plan accounts as those terms are defined in that Act, in the categories and for the purposes described above, and we do not sell or share the personal information of Pro or Corporate accounts. You have the right to know, to delete, to correct, to opt out of sale and sharing, to limit the use of sensitive personal information, and not to be discriminated against for exercising any of them. You may opt out without closing your account and without changing plan, by writing to hello@omnivox.tw, and we honour Global Privacy Control. We have not sold or shared the personal information of any consumer we know to be under 16 and will not do so without the opt-in consent that Act requires.
If you are in Indonesia or Taiwan
In Indonesia your rights arise under Law No. 27 of 2022 on Personal Data Protection, and we rely on your consent for any disclosure under the sale and sharing section. In Taiwan your rights arise under the Personal Data Protection Act, and we rely on your consent for any use beyond the purpose for which the data was collected, including disclosure for a commercial purpose; under Article 3 of that Act your rights may not be waived in advance by contract. In both jurisdictions you may withdraw consent at any time without closing your account, request access and correction, and require deletion where the law provides for it.
Aggregated and de-identified data
We may create aggregated or de-identified data from Transcription Text and from usage of the service, and may disclose it without restriction. Where we hold data in a de-identified form we maintain it in that form, do not attempt to re-identify it except to test the effectiveness of the de-identification, and contractually require any recipient not to re-identify it. Data that can reasonably be linked back to you is not treated as de-identified and remains subject to the whole of this policy, including your right to refuse or opt out of its disclosure.
Business transfers
If we are involved in a merger, acquisition, financing, reorganisation or sale of all or part of our business or assets, personal information we hold may be transferred as part of that transaction or disclosed during due diligence, in which case it is disclosed under confidentiality obligations and only to the extent necessary. We will notify you before your personal information becomes subject to a privacy policy materially different from this one, and your rights under this policy, including any refusal, opt-out or withdrawal of consent you have given, transfer with the data and bind the acquirer.
Complaints
If you believe we have handled your data unlawfully, write to hello@omnivox.tw and we will investigate and respond within 30 days. You may also complain to your local supervisory authority, and you are not required to contact us first.
Changes to this policy
Where we change what we collect or how we use it, we will state so on this page, update the date shown above, and notify you by email or within the application before the change takes effect. We give at least 30 days’ notice of a change that materially affects you. A change introducing a new category of disclosure to a third party for value takes effect only on the consent of a person in a jurisdiction requiring consent, and never retrospectively in respect of data collected before it. The change of 3 October 2026, being the retention of cloud Transcription Text in your account, and the change of 1 December 2026, being the disclosure of that text and associated data to third parties for value, are recorded here.
Questions
Questions about these terms may be sent to the address below.
hello@omnivox.tw