The data controller for personal data collected through the VeraVox website (veravox.audio) and the VeraVox macOS application is:
This policy applies to all personal data processed in connection with the purchase, download, and use of VeraVox, and to visits to the VeraVox website. It is issued in compliance with EU Regulation 2016/679 (GDPR) and applicable Italian data protection law.
VeraVox is designed to minimise data collection. The table below describes every category of personal data processed, its source, and the legal basis under Article 6 GDPR.
| Category | Source | Purpose | Legal basis (Art. 6 GDPR) |
|---|---|---|---|
| Name, email address, payment data (card details, billing address) | Lemon Squeezy checkout | Processing your purchase and issuing a licence | 6(1)(b) — performance of a contract |
| Email address | Support contact form | Responding to technical support requests | 6(1)(f) — legitimate interest (providing support) |
| IP address, browser / OS user agent, referrer URL | Register.it web hosting (server logs) | Security, abuse prevention, service operation | 6(1)(f) — legitimate interest (operating the website securely) |
| App version, macOS version | VeraVox app (Sparkle update framework) | Delivering software updates | 6(1)(b) — performance of a contract |
| Licence key, device name (your Mac's host name), activation identifier | VeraVox app (licence activation & validation) | Activating your licence and periodically confirming it is valid | 6(1)(b) — performance of a contract |
All purchases are processed by Lemon Squeezy, the trading name of Sold Through Link, LLC (formerly Lemon Squeezy, LLC), a limited liability company established in Utah, USA and part of the Stripe group, acting as the Merchant of Record for VeraVox. This means Lemon Squeezy is the seller of record for your purchase: it collects your payment details, issues the invoice, and calculates, collects and remits any applicable sales tax or VAT on our behalf.
VeraVox never receives or stores your card number or other payment-sensitive data. Lemon Squeezy processes your data under its own privacy policy, available at lemonsqueezy.com/privacy, and under a data processing agreement entered into with us.
To activate your licence, the VeraVox app contacts Lemon Squeezy's licence API (api.lemonsqueezy.com) and transmits your licence key together with a device name (your Mac's host name), so the activation can be counted against your allowance of three devices. The app then re-validates the licence silently in the background, roughly every seven days while online. No audio, library, or listening data is ever transmitted.
The VeraVox website is hosted by Register.it S.p.A., Via Fiume Bianco 22, 00144 Rome, Italy. As part of normal web server operation, Register.it's infrastructure logs each HTTP request, which may include your IP address, the URL requested, timestamp, HTTP status code, and browser user agent.
These logs are retained for a maximum of 30 days for security and abuse-prevention purposes, and are not used for profiling or marketing. Register.it's privacy policy is available at register.it/legal/privacy.
VeraVox uses the open-source Sparkle framework to deliver automatic updates. When checking for updates, Sparkle sends an HTTP request to a VeraVox-controlled server containing:
No personally identifiable information is transmitted. No unique device identifier or licence key is included in the update check request. Update checks occur at application launch and periodically in the background. You can disable automatic update checks in VeraVox's Settings.
When you contact us via the support form on veravox.audio/support, we collect your email address and the content of your message. This information is used solely to respond to your request and is not shared with third parties or used for marketing purposes.
Support correspondence is retained for as long as necessary to resolve your request and for a reasonable period thereafter (up to 24 months), in case of follow-up queries.
As a data subject under EU Regulation 2016/679, you have the following rights with respect to your personal data:
To exercise any of these rights, contact us at privacy@veravox.audio. We will respond within 30 days. You also have the right to lodge a complaint with the Italian data protection authority, the Garante per la Protezione dei Dati Personali, at garanteprivacy.it.
| Data category | Retention period |
|---|---|
| Purchase / transaction records (held by Lemon Squeezy) | As per Lemon Squeezy's policy and applicable tax law (up to 10 years in Italy) |
| Support correspondence | Up to 24 months after ticket closure |
| Server access logs (Register.it) | Up to 30 days |
Lemon Squeezy (Sold Through Link, LLC) is established in the United States. Transfers of personal data to Lemon Squeezy are governed by the Standard Contractual Clauses approved by the European Commission, as set out in Lemon Squeezy's data processing agreement.
All other data processing takes place within the European Economic Area.
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we do, we will update the "Last updated" date at the top of this page. For material changes, we will provide notice through the VeraVox app or on the website. Continued use of VeraVox after a policy update constitutes acceptance of the revised terms.
For any privacy-related questions, requests, or concerns, please contact: