SoulBox Privacy Policy

SoulBox is designed to collect as little personal information as practical while still operating accounts, subscriptions, AI generation, media storage, social features, and connected devices. We do not sell your personal information. We are not interested in saving your voice, training models on your voice, or storing voice recordings when avoidable.

This policy explains what we process, why we process it, and where third parties such as Stripe and AI providers fit into the service.

We may process information you provide directly, such as email address, display name, account profile fields, invite codes, bot names, bot personalities, prompts, memories, chat messages, generated media choices, voice samples, sounds, images, device names, support messages, and public-sharing settings.

You control what optional profile information you add. Avoid submitting sensitive personal information unless you intentionally want it processed for the feature you are using.

SoulBox uses Stripe for billing. Stripe manages payment methods, card data, billing addresses, payment authentication, invoices, tax handling, refunds, disputes, and related payment workflows. Full payment-card information and raw billing credentials do not sync back to SoulBox.

SoulBox receives limited billing status data needed to operate the service, such as plan, subscription status, customer identifier, invoice state, checkout state, usage period, and whether a payment succeeded, failed, was cancelled, or disputed.

On the web, PWA, iOS, and Android experiences, SoulBox uses keyboard dictation or operating-system/browser dictation for speech-to-text when available. In that mode, your speech is turned into text by the device, browser, keyboard, or operating system path you choose, and SoulBox receives the resulting text you send into the conversation.

External ESP32 or similar devices you flash with SoulBox firmware do not have the onboard capability to perform high-quality transcription locally. When you use those devices for voice input, audio may be sent to SoulBox servers or a configured transcription provider solely to convert speech into text for the requested interaction.

SoulBox does not want to retain your raw voice for transcription, train models on it, or build voice profiles from it. Temporary processing, logs, error traces, queue state, or provider-side handling may occur when needed to operate or troubleshoot the feature.

When you ask SoulBox to generate text, speech, images, video, sounds, summaries, names, profiles, voice samples, or other AI output, we may send the relevant prompt, context, settings, files, or generated media to internal services and third-party providers. Providers may process requests under their own terms, privacy practices, retention periods, and safety systems.

SoulBox may log operational details such as provider name, model, status, latency, token counts, file identifiers, queue identifiers, and error messages to operate billing, debugging, reliability, quotas, and abuse prevention. We avoid logging secrets and aim to avoid unnecessary sensitive payloads.

Connected devices may send identifiers, firmware versions, network status, audio routing status, selected bot IDs, command status, and health information so the service can route audio, manage settings, and diagnose problems. We may also process IP address, user agent, session state, crash information, performance data, queue state, and security logs.

Usage accounting may include counts and durations for TTS, audio generation, image generation, video generation, inference, storage, devices, bots, voices, and other plan-limited resources. This data is used to enforce limits, show usage, bill accurately, troubleshoot failures, and protect shared infrastructure.

If you mark a bot, profile, voice, image, sound, conversation, or other item public, other users may be able to view or interact with it according to the feature. Direct messages, friend requests, follows, notifications, and public profiles require storing and displaying the information needed to make those features work.

Private content is not intended to be public, but no online system can promise absolute secrecy. Do not submit content you cannot tolerate being processed by SoulBox systems, infrastructure vendors, or selected providers for the feature you use.

We share information with service providers only as needed to operate SoulBox, including hosting, databases, object storage, queues, logging, analytics, authentication, email, push notifications, payments, AI inference, TTS, image generation, video generation, transcription, and support.

We may disclose information if required by law, subpoena, court order, lawful government request, fraud investigation, safety emergency, rights enforcement, merger, financing, acquisition, asset sale, or to protect SoulBox, users, providers, infrastructure, and the public.

We retain account, content, media, billing status, usage, and operational records for as long as needed to provide the service, maintain security, enforce terms, resolve disputes, satisfy legal obligations, support backups, and preserve auditability of paid usage. Generated files and logs may have different retention windows depending on feature and infrastructure.

You may request deletion or correction by contacting us. Some information may remain in backups, logs, invoices, dispute records, security records, or provider systems for a limited period or where retention is legally or operationally necessary.

You can choose what to put in your profile, whether to make supported items public, which bots and devices to use, which providers or models to select when available, whether to upload voice or media assets, and whether to continue using paid features. Browser, device, OS, and keyboard settings may provide additional privacy controls for dictation, notifications, microphones, cameras, and installed PWA behavior.

For privacy questions, deletion requests, access requests, correction requests, or incident reports, contact privacy@soulbox.io. For billing questions, contact contact@soulbox.io or use the Stripe billing portal when available.