API Privacy Policy

SpeechAce LLC created this privacy policy to provide You, Speechace API callers, with information on how we collect and use information, including personally identifiable information. As part of the normal operation of our services we receive information from API callers. This Privacy Policy is intended to inform You how we use and protect information that we collect. You may always opt out of any use or disclosure by contacting us and notifying us of Your choice, and by limiting what information you pass to the Speechace API.

1. Information we collect

Our API requires minimal data to successfully fulfill its services. No additional end-user Data or Personally Identifiable Information is required nor should be passed to the Speechace API. Names, emails, or any other PII are not required nor needed for processing.

Our API requires an anonymized audio recording of a user attempting a particular question and sufficient information about the question (e.g. the prompt presented to the end-user) to evaluate the audio.

When You provide information through our API, the information will be sent to one of our API Cloud Service regions based on the choice you made when you requested an API Key. All processing and storage of that information will remain within your chosen region.

2. Use of Your Information

We use the information we receive to:
a. Deliver the services and products that You have requested;
b. Manage Your account and provide You with customer support;
c. Enforce our terms and conditions;
d. Manage our business;
e. Perform functions as otherwise described to You at the time of collection;
f. Improve our software through analysis of usage patterns but not the data itself;

We do not use your audio data to train our machine learning models. Your data passed to the API belongs to you and is only used to serve your requests or support you.

3. Data retention

As a Speechace API Caller, you control the retention period for data you send to the Speechace API. You can elect that data is expired immediately after processing, or retained for a certain number of days. In the case of retention, the data is only retained to aid in any support requests received from you. Should you choose to expire data immediately, it is then the responsibility of your application or service to retain data on your end in order to aid any support queries.

4. Removing Your information

Upon Your notification, we will remove Your information from our active storage as soon as reasonably possible in accordance with our policy and applicable law. Do note that removing your information is irreversible.

5. Disclosure of Your Information

As a matter of policy, we do not sell or rent any information about You to any third party.

6. Legal Requests

We cooperate with law enforcement agencies and other third parties to enforce laws, as well as investigate and prosecute unlawful activities such as frauds and scams.

7. Security

To safeguard the confidentiality of Your personally identifiable information, SpeechAce utilizes sophisticated security techniques and procedures, including: daily security and vulnerability scans, software audits, firewalls, and data encryption (Secure Socket Layers). SpeechAce makes every effort to protect that data against loss and unauthorized access. We employ many different security techniques to protect such data from unauthorized access by others.

8. Information Security Measures

In addition to the privacy policy, our API contracts detail how our protective measures and processes to ensure the security and privacy of your data. An API Customer may request this during the contract agreement process or by emailing support@speechace.com.

9. Data Subject Rights

As the API Caller, your service or application is the one with knowledge of the end-user identity and thus implementing and enforcing data subject rights is managed within your application or service. This includes the data subject’s right to know what information is being collected, and the right of data subjects to be forgotten. We strongly recommend API Callers to choose a short data retention target such as 30 or 90 days for audio passed to the Speechace API. This ensures that the right to be forgotten is automatically built-in and no further action is needed when a user deletion request is received by your application or service.

10. Modifications to Privacy Policy

The Privacy Policy is subject to change by us at any time based on changes in the law or our need to accurately reflect our data collection and disclosure practices. Changes are effective upon posting on the website.