Privacy Policy

Last updated: 15 May 2026

Who we are

Echobound (“we”, “us”) is operated from the United Kingdom. We are the data controller for personal data you provide while using echobound.co.uk. For privacy questions, contact hello@echobound.co.uk.

What we collect

  • Account data: name, email, and authentication identifier (e.g. Google ID).
  • Story content: voice recordings, transcripts, AI-polished chapters, photos, captions and dates you upload.
  • Order data: tier purchased, shipping address (for printed books), and payment confirmation. Card details are processed by Stripe and never stored by us.
  • Technical data: basic logs (IP, user-agent, timestamps) to keep the service secure and reliable.

Why we use it (lawful bases)

  • Contract: to deliver the interview, transcription, AI polish, PDF and printed book you have purchased.
  • Legitimate interests: security, fraud prevention, and improving the product.
  • Consent: optional marketing emails (you can withdraw at any time).
  • Legal obligation: tax, accounting and responding to lawful requests.

Where your data is stored

Recordings, transcripts, photos and account data are stored on EU-based encrypted infrastructure. Sub-processors we rely on:

  • Supabase (database, authentication, storage) — EU region
  • Cloudflare (hosting, edge runtime) — EU/UK
  • OpenAI & Google (AI interview & chapter writing)
  • ElevenLabs (voice synthesis & transcription)
  • Stripe (payments)
  • Resend (transactional email)

Some sub-processors transfer data outside the UK/EEA. Where they do, we rely on the UK International Data Transfer Agreement or Standard Contractual Clauses.

How long we keep it

We keep your story content for as long as your account is active. You can delete individual stories at any time, or delete your entire account from the Account page — this permanently removes your recordings, transcripts and photos within 30 days. Order records are retained for 6 years for tax purposes.

Your rights (UK GDPR)

You have the right to access, correct, delete, port or restrict processing of your personal data, and to object to processing based on legitimate interests. Email hello@echobound.co.uk and we will respond within 30 days. You may also complain to the UK Information Commissioner's Office at ico.org.uk.

Cookies

We use a small number of strictly-necessary cookies for authentication and security. We do not use advertising cookies or third-party trackers.

Children

Echobound is intended for adults (18+). If you believe a child has provided us with personal data, contact us and we will delete it.

Changes

We will post material changes to this policy on this page and, for significant changes, notify registered users by email.

See also: Terms · Refunds