Privacy Notice

1. Who is responsible for your data

VioCheck is a trading name of A.J. Simpson. For the personal data described in this notice, VioCheck acts as the data controller unless another role is stated.

2. Information we collect

Depending on how you use VioCheck, we may process:

• account information such as your email address and account identifiers, together with your recorded confirmation that you are 18 or over and the version/date of the Terms you accepted;
• videos, audio, captions, product details and other content you choose to upload for a VioCheck;
• audit outputs such as findings, timestamps, scores, suggested corrections and VioFix job information;
• optional creator-voice samples, consent records and the private provider reference used for VioFix speech correction;
• usage and entitlement information such as plan type and available checks;
• technical, security and diagnostic information needed to operate, protect and troubleshoot the service;
• records of authorised administrative access to retained customer media, including the reason, time and media type;
• support correspondence you send to us.

We do not ask you to upload more personal information than is needed for the feature you are using.

3. Why we use it

We use personal data to provide and secure VioCheck, authenticate accounts, process uploaded content, generate compliance-risk analysis, prepare user-approved VioFix corrections, maintain usage entitlements, respond to support requests, prevent misuse and improve service reliability.

Our principal lawful bases are performance of our contract with you, our legitimate interests in operating and securing VioCheck, compliance with legal obligations, and consent where a feature specifically relies on consent. Creator-voice enrolment is optional and is only initiated after an explicit consent action.

4. Creator voice and VioFix

VioFix Voice is opt-in. A sample is processed to validate the recording and create a private provider voice for the account. A separate setup recording uploaded or recorded in Account is removed from VioCheck's active Storage after the enrolment attempt. If an existing VioCheck video is used as the source, that video follows the normal 14-day active-media retention rule.

VioCheck stores the provider voice reference and consent record needed to operate the feature. The voice is not published as a public voice and is not used by VioCheck for identity verification.

Using a saved voice for a correction requires separate approval of the proposed speech replacements for that render. You can delete the saved creator voice from your account; VioCheck then requests deletion of the corresponding provider voice and deactivates the saved profile.

Read the Creator Voice Notice.

5. Service providers

VioCheck uses carefully selected service providers to operate the product. These include Supabase for authentication/database/private storage, Vercel for hosting and AI Gateway routing, ElevenLabs for optional creator-voice generation, and model providers used through the server-side AI processing stack, including Google for multimodal analysis and OpenAI for speech transcription where those configured models are used.

Providers only receive the information needed for the task they perform. VioCheck API credentials and provider secrets are kept server-side and are not intentionally exposed to the browser.

6. International processing

Some service providers may process information outside the United Kingdom. Where international transfers are involved, we use providers and contractual or other safeguards intended to protect personal data in accordance with applicable UK data-protection law.

7. How long we keep information

Active creator media: original VioCheck uploads and VioFix corrected or verification media are automatically removed from active VioCheck Storage after 14 days from the relevant completed processing or render event. You can permanently delete an individual VioCheck and its retained media sooner from My Checks.

Voice setup recordings: a separate recording uploaded or made specifically in Account for creator-voice enrolment is removed from VioCheck Storage after the enrolment attempt. The provider voice remains available only while you keep the VioFix Voice feature active and is requested for deletion when you delete or replace the voice or delete the account.

Account and audit records: account information, audit findings, usage records, VioFix metadata and consent records may remain while your account is active so that you can use your history and the service can operate securely. Deleting an individual check removes its associated database records; deleting your account removes the remaining user-linked VioCheck records after private media and any active provider voice have been handled.

Administrative access/security records: the minimal record of authorised access to customer media is retained for up to 12 months for accountability and security, unless a specific incident, legal requirement or claim requires longer handling.

Some limited information may also need to be retained where required by law, fraud prevention, security or the establishment or defence of legal claims.

8. Security, account isolation and administrative access

Creator uploads are held in private storage with account-level access controls. We use authentication, row-level database controls, private signed media links, server-side provider credentials, file limits and operational monitoring to reduce the risk of unauthorised access.

Normal users can only access media within their own account folder. Where VioCheck's authorised owner needs to view retained customer media for a genuine support, security or user-request purpose, the system requires a written reason, issues a short-lived signed link valid for five minutes and records the access in an audit log. The retained-media index does not expose permanent public links.

No online service can guarantee absolute security, so you should also protect your login credentials and contact us promptly if you believe your account has been compromised.

9. Your controls and rights

Account includes a self-service export of your structured VioCheck account data and a permanent account-deletion control. Retained videos can be downloaded through the product while they remain within the active-media period. You can also delete individual VioChecks and a saved creator voice independently.

Depending on the circumstances, UK data-protection law may give you rights to access, correct or erase personal data, restrict or object to processing, obtain certain data in a portable form and withdraw consent where processing is based on consent. Withdrawing consent does not affect processing that was lawful before withdrawal.

To exercise a privacy right that is not covered by the self-service controls, email support@viocheck.co.uk. We may need to verify your identity before acting on a request.

10. Complaints

Please contact VioCheck first if you have a privacy concern so we can try to resolve it. You also have the right to complain to the UK Information Commissioner's Office (ICO).

ICO complaint information

11. Cookies and similar technologies

VioCheck uses essential session, authentication and security technologies needed to provide the service. We do not currently use advertising cookies. If we introduce non-essential analytics or marketing technologies, this notice and any required consent controls will be updated before they are used.

12. Changes to this notice

We may update this notice when the product, providers or legal requirements change. The latest version will always show its update date on this page.