ORAVYS operates on a principle of Data Minimization. We process only the data strictly necessary to generate your voice analysis. We do not sell your personal data or voice recordings. Your trust is the foundation of everything we build.
To provide our AI voice intelligence services, we collect and process the following categories of data:
Audio files you upload or record through our platform. These recordings are processed by our 3000+ AI analysis engines across multiple categories to extract acoustic features including pitch, cadence, spectral energy, amplitude stability, harmonic clarity, and other acoustic markers. We do not transcribe or store the semantic content of your speech.
Email address, name, and authentication credentials provided during registration or Google OAuth sign-in. This data is used for account management, report delivery, and service communication.
All payment transactions are processed securely through Stripe. ORAVYS does not store your full credit card number, CVV, or banking details. We retain only transaction identifiers and purchase history necessary for order fulfillment and refund processing.
IP address, browser type, device information, operating system, session identifiers, and interaction timestamps collected automatically when you use the platform. This data supports security, performance monitoring, and abuse prevention.
Pages visited, analysis requests submitted, features used, and interaction patterns. Collected via anonymized Google Analytics (with IP anonymization enabled) for platform improvement.
When you use the analysis flow accessible from oravys.com (the public Audit Yourself and deepfake detection pages), the following fields about your request reach our application logs and observability systems. This list is exhaustive for that flow:
Fields not listed here are not logged for analysis requests on this flow.
Your information is used exclusively for the following purposes:
ORAVYS does not sell, rent, or trade your personal data or voice recordings to third parties for advertising, marketing, or any other purpose. This applies to all service tiers without exception.
To maintain platform stability, enforce fair use policies, and protect the Service for all users, ORAVYS collects and processes the following additional categories of data:
ORAVYS monitors and records metrics related to your use of computational resources, including but not limited to:
Compute and resource usage data is processed for the following purposes:
ORAVYS employs automated systems to enforce fair use policies and protect platform stability. These systems may automatically:
Automated enforcement actions are not considered "automated decision-making producing legal effects" under GDPR Article 22, as they are technical measures necessary for contract performance and do not produce legal effects beyond temporary service management. If you believe an automated enforcement action was applied in error, you may contact for human review.
Compute and resource usage data is retained as follows:
Voice data is uniquely sensitive. ORAVYS implements specific protections for audio recordings:
When using WebSocket-based real-time analysis, your audio is streamed and processed as a continuous signal. During real-time sessions:
When two voice samples are submitted for comparative analysis:
For enterprise customers using forensic or insurance-related analysis:
By default, no audio retention is performed without explicit opt-in. Audio submitted to the analysis flow accessible from oravys.com is processed in memory and the buffer is freed at the end of the call. See Section 1.6 for the fields logged during analysis and Section 3 for the broader processing posture. Training-data sources and methodology are described separately on the How ORAVYS trains its detection models page.
If you choose to enable the Research Contribution opt-in, your sample may be retained under the conditions described in Section 5.1 and may be used to improve detection accuracy. The opt-in is unchecked by default, separate from your general terms acceptance, and revocable at any time. The following posture applies across tiers:
If you provide feedback (such as rating a report or flagging a false positive/negative in deepfake detection), that specific interaction may be used to improve detection accuracy and service quality, with notice at the time of feedback. Feedback and content submitted through safety reporting mechanisms may also be used to maintain and improve the safety and reliability of the Service, so that critical signals (such as detection errors that could affect platform integrity) can be addressed.
We retain personal data only for as long as necessary to fulfill the purposes described in this policy. The following granular retention schedule applies:
Upon expiration of any retention period, data is permanently and irreversibly deleted from all primary storage, backup systems, and disaster recovery archives within thirty (30) days. Enterprise customers may request a written certification of destruction upon completion of the deletion process.
| Data Category | Retention Period | Legal Basis |
|---|---|---|
| Voice recordings (free, default) | In-memory only, freed at end of call | Consent (Art. 6(1)(a)) |
| Voice recordings (paid) | 90 days | Contract (Art. 6(1)(b)) |
| Biometric features (default) | In-memory only, freed at end of call | Explicit consent (Art. 9(2)(a)) |
| Analysis reports | Account duration + 1 year | Contract (Art. 6(1)(b)) |
| Account data | Account duration + 12 months | Contract (Art. 6(1)(b)) |
| Billing records | 5 years | Legal obligation (Art. 6(1)(c)) |
| Technical/security logs | 90 days | Legitimate interest (Art. 6(1)(f)) |
| Voice Heritage capsules | 10 / 50 / perpetual years | Contract (Art. 6(1)(b)) |
You may request early deletion of your data at any time by contacting . Deletion requests are processed within 30 days.
ORAVYS employs industry-standard and enhanced security measures to protect your data:
While we implement commercially reasonable measures to protect your data, no internet transmission or electronic storage method is 100% secure. We cannot guarantee absolute security against unauthorized intrusion.
We may share data only with trusted service providers necessary to operate the platform:
All third-party providers are bound by confidentiality and data processing agreements compliant with GDPR Article 28. We do not share data with third parties for their independent marketing purposes.
No third-party AI processing: ORAVYS does not use third-party AI services, external large language models, or cloud-based machine learning APIs to process your voice recordings. All voice analysis is performed exclusively by ORAVYS's proprietary engine pipeline. No audio data is transmitted to any external AI provider.
Sub-processor transparency: The complete list of sub-processors, their purposes, and processing locations is maintained at oravys.com/legal-notices. ORAVYS will provide at least 30 days' written notice before engaging any new sub-processor that processes personal data. Enterprise customers with active DPAs may object to a new sub-processor within 15 business days of notification.
ORAVYS implements a layered consent framework designed to comply with the most stringent data protection requirements across all jurisdictions in which it operates.
Before submitting any audio recording for the first time, you must provide explicit, affirmative consent acknowledging that: (a) your audio will be processed by AI-powered analysis engines; (b) biometric features will be extracted from your voice; (c) a forensic and/or psychological profile will be generated; and (d) you have read and understood the data processing described in this Privacy Policy. This consent is captured via an in-application consent mechanism and recorded with a timestamp, IP address, and consent version identifier.
Because voice data constitutes biometric data under GDPR Article 9, the Illinois Biometric Information Privacy Act (BIPA), and equivalent biometric privacy laws, ORAVYS obtains a separate, specific consent for biometric processing that is distinct from the general terms of service acceptance. This biometric consent: (a) specifically identifies that biometric identifiers will be collected and processed; (b) describes the purpose of biometric data collection; (c) states the retention schedule for biometric data; and (d) may be withdrawn at any time without affecting other Service features.
For users located in the European Economic Area, biometric data processing is authorized exclusively under GDPR Article 9(2)(a) (explicit consent). ORAVYS does not rely on any other Article 9 exception for biometric voice processing. EU users receive an enhanced consent flow that: (a) provides granular, purpose-specific consent options; (b) clearly separates biometric consent from general service consent; (c) uses plain language to describe data processing activities; and (d) provides a one-click consent withdrawal mechanism.
By submitting any audio recording, you warrant and represent that: (a) you have obtained all required consents from every individual whose voice appears in the recording; (b) in jurisdictions requiring two-party or all-party consent for audio recording (including but not limited to California, Illinois, Florida, Washington, Pennsylvania, and equivalent jurisdictions globally), you have complied with all applicable consent requirements; and (c) the recording was not obtained through illegal wiretapping, covert surveillance, or any other unlawful means. ORAVYS is not responsible for verifying the consent status of submitted recordings and relies entirely on your representation.
The human voice may constitute a "biometric identifier" under the Illinois Biometric Information Privacy Act (740 ILCS 14). ORAVYS provides the following disclosures and commitments in compliance with BIPA:
Before collecting any biometric identifier or biometric information from an Illinois resident, ORAVYS provides written notice (via the in-application consent mechanism) that biometric identifiers are being collected and stored, and the specific purpose and duration of such collection and storage. ORAVYS obtains a written release (electronic signature or affirmative click-through consent) from each individual whose biometric identifier is collected.
Biometric identifiers and biometric information derived from voice recordings of Illinois residents are retained in accordance with the following schedule:
ORAVYS does not sell, lease, trade, or otherwise profit from biometric identifiers or biometric information. Biometric data is used solely for the purpose of providing the Service as described in this Privacy Policy.
Biometric identifiers and biometric information are stored, transmitted, and protected using a standard of care that is at least as protective as the standard used for other confidential and sensitive information, including encryption in transit (TLS 1.3) and at rest (AES-256), access controls, and audit logging.
Per-scan consent log. ORAVYS records a timestamped, hash-verified consent log for each biometric collection event (each upload or live capture). Each entry captures the action element, the SHA-256 hash of the exact consent text shown to the user, the prior consent state, the detected jurisdiction, and a truncated IP. Consent logs are retained for the duration of the limitation period applicable to BIPA claims (five (5) years under Tims v. Black Horse, 2023) plus a two-year buffer, after which they are destroyed alongside the underlying biometric data.
Third-party voices. If audio you submit contains the voice of any individual who is not you, your submission is governed by the Consent Representation and Warranty in Section 2.1 of the Terms of Service. You warrant that you have lawful authority to submit such voice for biometric analysis. ORAVYS does not independently verify the identity of voices in submitted audio. Liability for ORAVYS's own analytical outputs (deepfake scores, authenticity verdicts, engine reports) is not subject to U.S. Communications Decency Act § 230, Digital Services Act Article 6, or DMCA § 512(c) safe harbors; that liability is governed exclusively by Section 12 of the Terms of Service.
Legitimate-interest balancing for consent log retention. Retention of the per-scan consent log is necessary to discharge ORAVYS's burden of proof under GDPR Article 7(1) and BIPA § 20 for the full statutory limitation period. The log entry is pseudonymized (a one-way hash of the consent text plus a truncated IP, no voice content) and represents the minimum data required under GDPR Article 5(1)(c) (data minimization). The balancing test (controller's legitimate interest in defending against later challenge vs. the data subject's privacy interest) is documented in our Record of Processing Activities (Article 30(1)(f)).
Subprocessor chain. All subprocessors that may handle biometric data are contractually bound to equivalent collection, retention, and deletion obligations and are listed at oravys.com/subprocessors. ORAVYS provides at least ten (10) business days' notice on that page before adding or replacing any biometric subprocessor, and customers may object during the notice window by terminating their account; if no objection is received the change takes effect at the end of the notice period.
Destruction verification. Biometric data deletion events are logged with a cryptographic deletion receipt (signed hash of the deleted record, timestamp, and the policy under which deletion was triggered). You may request a deletion confirmation receipt by emailing at any time.
No sale, no profit (BIPA § 15(c)). ORAVYS does not sell, lease, trade, or otherwise profit from biometric identifiers or voiceprints. This commitment applies equally to its subprocessors. Breach of this commitment constitutes a material breach of these Terms.
If you are located in the European Economic Area (EEA), the United Kingdom, or any jurisdiction with equivalent data protection laws, the following provisions apply:
The human voice constitutes biometric data under GDPR Article 9. ORAVYS processes voice recordings exclusively for the declared analysis purposes under the following framework:
Data minimization and purpose limitation principles are strictly applied: voice data is used solely for generating your analysis report and is never used for speaker identification or surveillance.
You have the right to:
GET /api/account/export endpoint.To exercise any of these rights, contact our Data Protection Officer at . We will respond within 30 days as required by law.
For the analysis flow accessible from oravys.com, audio is processed in memory inside our EU compute region (Google Cloud, europe-west1, Belgium) and the buffer is freed at the end of the call (see Sections 3 and 5.1). Where retention is engaged through the Research Contribution opt-in or an enterprise contract, the retained sample is stored in the same EU region. Analysis results delivered as reports remain in the EU region for the retention durations described in Section 5.
Account data (name, email) may be processed by our sub-processors (Stripe for payments, Google for authentication) in jurisdictions outside the EEA. Where such transfers occur, they are governed by:
Enterprise customers may request copies of the applicable SCCs and Transfer Impact Assessments by contacting .
ORAVYS provides programmatic API endpoints for exercising your GDPR rights:
These endpoints require authenticated access: GET /api/account/export for export, POST /api/account/delete for erasure. If an endpoint is unavailable to you for any reason, you may exercise every right listed above by contacting our Data Protection Officer directly, and we will act on it within the statutory deadline.
For all GDPR-related inquiries, you may contact our Data Protection Officer at . If you believe your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority in your country of residence (GDPR Art. 77).
ORAVYS acknowledges the European Union Artificial Intelligence Act (Regulation (EU) 2024/1689) and its risk-based classification framework.
This Service uses artificial intelligence to process biometric data. Voice recordings submitted to ORAVYS are analyzed by AI-powered engines that extract biometric features (acoustic biomarkers) and generate automated assessments. Users interacting with this system are hereby informed that they are interacting with an AI system, not a human analyst, and that all outputs are AI-generated.
Under the EU AI Act risk-based framework, ORAVYS has assessed its AI system as follows:
ORAVYS is committed to meeting all applicable requirements including technical documentation, human oversight mechanisms, accuracy monitoring, bias testing, and transparency obligations. Enterprise customers deploying ORAVYS in high-risk contexts receive compliance guidance, risk assessment documentation, and may request conformity documentation.
ORAVYS no longer offers voice-based personality or emotion profiling. The feature is switched off for every plan, free and paid. No personality trait assessment, Big Five, DISC, HEXACO, MBTI or emotion profile is produced, displayed, stored or sold. The engines remain in the codebase but are not exposed; re-enabling them would require an explicit configuration change and a new consent flow.
The sections below describe how the feature worked while it was offered. They are kept because they document processing that took place before that date, and because they would apply again if the feature were ever re-enabled.
ORAVYS offered an optional personality profiling feature that generated behavioral and personality trait assessments from acoustic biomarkers. This feature involved automated processing as defined by GDPR Article 22.
Until 14 September 2026, personality profiling was processed exclusively under explicit, separate consent (GDPR Art. 9.2.a combined with Art. 22.4). That consent was distinct from the general bio-acoustic analysis consent and could be granted or withdrawn independently. All other ORAVYS features were usable without consenting to personality profiling. No such consent is requested or acted upon today.
Personality assessments were derived exclusively from acoustic signal features: pitch variability, speech rhythm, spectral energy distribution, vocal intensity patterns, pause dynamics, and respiratory markers. The semantic content (words, language, meaning) of your speech was never analyzed for personality profiling.
Acoustic features extracted by our engine pipeline were mapped against established vocal-behavioral correlation models to generate personality trait indicators across multiple dimensions (communication style, stress resilience, leadership patterns, emotional expressiveness, and others). These indicators were probabilistic and represented tendencies, not definitive characterizations. Confidence levels were displayed alongside each indicator. No such indicator has been produced since 14 September 2026.
In accordance with GDPR Recital 63 and the EU Trade Secrets Directive (2016/943), ORAVYS provided meaningful information about the logic, significance, and consequences of profiling without disclosing proprietary algorithms, model weights, or mapping databases. This balance between transparency and trade secret protection is recognized by EU data protection authorities.
POST /api/v1/user/request-human-review, or by writing to our Data Protection Officer at . You may also submit your perspective on why you disagree with the assessment. Human reviews are conducted by a qualified reviewer with access to the raw data and the authority to modify or delete the automated profile. Reviews are completed within 30 days.POST /api/v1/user/profiling-opt-out, or by writing to . Opting out does not affect other analysis features.Each right above lists an email address alongside its API endpoint on purpose: an endpoint that moves or breaks must never make a right unexercisable. The email is the path of record.
Personality deduction texts were generated client-side in your browser and were not transmitted to or stored on ORAVYS servers unless you explicitly chose to save or share your report. No such text is generated today, in the browser or on our servers.
In compliance with the EU AI Act Article 5(1)(f), ORAVYS infers no emotional state and no personality trait in any context, workplace and educational contexts included, since 14 September 2026. Enterprise customers deploying ORAVYS for employment decisions (recruitment, evaluation, promotion) remain subject to enhanced compliance requirements including mandatory fundamental rights impact assessments, formal human oversight protocols, and enhanced logging, which apply to the acoustic authenticity outputs that are still offered.
ORAVYS analysis results are provided as informational and decision-support tools. No decision producing legal effects or significantly affecting any data subject is made solely on the basis of automated processing by the Service. The user is solely responsible for any decisions taken based on analysis results and must exercise their own professional judgment. ORAVYS does not engage in decision-making based solely on automated processing or profiling in a manner that produces legal effects concerning the data subject.
ORAVYS provides reversible consent controls. The analysis flow accessible from oravys.com surfaces a consent gate at the point of upload that maps to the following form fields, all enforced server-side:
consent_data_processing): Default OFF. Required to run any analysis. Without it, the request is rejected.consent_voice_processing): Default OFF. Required to run any analysis. Without it, the request is rejected.consent_research_optin, alias voice_optin): Default OFF. Opt-in is what engages the retention path described in Sections 5.1 and 5.4. Revocable at any time.Required consents must be granted at the point of upload. The Research Contribution opt-in is unchecked by default; without it, the audio buffer is freed at the end of the analysis call.
The default in-memory posture described in Section 3 applies across all tiers for the analysis flow accessible from oravys.com. Tier differences relate to retention scope, the consent surface, and contractual coverage:
When ORAVYS modifies its pricing, subscription plans, service features, or fair use policies (as described in our Terms of Service, Sections 8, 9, and 10), we may process the following data:
Data processed in connection with pricing and service changes is retained in accordance with the retention periods specified in Section 5 of this Privacy Policy and applicable tax/accounting retention requirements.
The default analysis posture described in Sections 3 and 5.1 already covers the audio sample itself: the buffer is freed at the end of the call unless the Research Contribution opt-in is engaged. ZDR mode is an enterprise add-on that goes further and constrains the operational metadata layer too:
ZDR mode is designed for legal, healthcare, and government use cases. Contact to activate.
ORAVYS uses only essential cookies required for the platform to function:
We do not use advertising cookies, cross-site tracking pixels, or third-party trackers that share data with advertisers. Google Analytics (with IP anonymization) is used for basic usage statistics. You can opt out via your browser settings, an ad blocker, or the Global Privacy Control (GPC) signal.
To prevent third-party data leakage to font, script, or analytics providers, ORAVYS serves all critical web assets from its own infrastructure:
oravys.com/static/fonts/. ORAVYS does not load fonts from fonts.googleapis.com or fonts.gstatic.com, which would otherwise transmit your IP address to Google on every page load (a documented EU GDPR Art. 6 / Schrems II concern).oravys.com/static/js/vendor/. No request is made to cdn.jsdelivr.net or unpkg.com for these libraries.oravys.com are issued.The Voice DNA Profile is a visual fingerprint generated from your acoustic features (fundamental frequency, formants, jitter, shimmer, harmonic-to-noise ratio). Because these inputs constitute biometric data under GDPR Art. 9, the Voice DNA card is subject to the following safeguards:
sessionStorage for the current browsing session only; closing the tab revokes consent.ORAVYS automatically detects and honors the Global Privacy Control (GPC) signal from your browser. When GPC is enabled:
If you are a California resident, the California Consumer Privacy Act (as amended by the California Privacy Rights Act) grants you the following rights:
To exercise any of these rights, contact us at or use the automated rights endpoints described in Section 8.5. We will respond within 45 days of receiving a verifiable request. You may also designate an authorized agent to make a request on your behalf.
Categories of Personal Information Collected (preceding 12 months): Identifiers (name, email), commercial information (payment records), internet activity (usage logs), audio data (voice recordings), and inferences drawn from the above (analysis reports). See Section 1 for complete details.
ORAVYS does not knowingly collect data from children under 16 years of age (or under 13 in the United States, per the Children's Online Privacy Protection Act as updated April 2026). We do not permit analysis of voice recordings of minors. If we become aware that we have processed a minor's data, we will immediately delete it within 24 hours and notify the parent or guardian if contact information is available.
ORAVYS complies with COPPA (15 U.S.C. 6501-6506) and does not knowingly collect, use, or disclose personal information from children under 13. We do not direct the Service to children and do not knowingly accept voice recordings of children.
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms:
In compliance with Article 50 of the EU Artificial Intelligence Act (Regulation (EU) 2024/1689), ORAVYS provides transparent labeling of all AI-generated and AI-analyzed outputs:
X-Oravys-AI-Generated: true HTTP response header on all analytical endpoints, enabling automated downstream labeling by integrators.If you believe an output has been mislabeled or stripped of its AI disclosure, please report it to .
If you are a Delaware resident, the Delaware Personal Data Privacy Act (effective January 1, 2025) grants you the following rights:
Voice recordings and biometric data are classified as sensitive data under the DPDPA and require opt-in consent before processing, which ORAVYS obtains through the consent mechanisms described in Section 7b. To exercise your Delaware privacy rights, contact . We will respond within 45 days.
For users in Israel, data processing complies with the Privacy Protection Law 5741-1981 as amended by Amendment 13 (August 2025). ORAVYS implements the enhanced transparency obligations, mandatory data protection officer appointment requirements, and privacy by design principles required under the amended law. Israeli residents may exercise their rights of access, correction, and deletion by contacting . Israel maintains an EU adequacy decision (reaffirmed January 2024), facilitating lawful data transfers between the EEA and Israel.
We may update this Privacy Policy from time to time. Material changes will be communicated via email and/or a prominent notice on the platform at least 30 days before they take effect. The "Last Updated" date at the top reflects the most recent revision. Your continued use of the platform after changes take effect constitutes acceptance of the revised policy.
If ORAVYS is involved in a merger, acquisition, reorganization, bankruptcy, or sale of all or substantially all of its assets, your information and any associated consent records may be transferred to the acquiring entity, provided that:
For privacy inquiries, data access requests, or concerns:
General:
Data Protection Officer:
Enterprise / ZDR:
Oravys, Inc.
Delaware, USA
"ORAVYS" is a registered trademark (INPI No. 25 5212037, classes 9 & 42).