Privacy Policy

Last updated: 4 June 2026

This Privacy Policy explains how VoyaBud ("we", "us", "our") collects, uses, and protects your personal data in connection with the VoyaBud website at voyabud.com, including the pre-launch waitlist. We process personal data in accordance with the EU General Data Protection Regulation (GDPR), the Swiss Federal Act on Data Protection (nFADP), the UK GDPR & Data Protection Act 2018, and applicable US state privacy laws. This policy will be updated when the VoyaBud app launches.

1. Who We Are

VoyaBud is the data controller for the personal data described here. You can reach us at privacy@voyabud.com for any privacy matter, or hello@voyabud.com for general questions.

2. Data We Collect

On the website (waitlist)

Email address — provided when you join the waitlist, used to notify you at launch and, if you opt in, to send marketing.
Consent record — what you agreed to, the date/time, and the IP address you signed up from, kept as proof of consent. If you confirm marketing, we also store that confirmation timestamp.
Marketing preference — whether you opted in to product updates and offers (double opt-in, confirmed by email).
Analytics data (opt-in only) — if you accept cookies, Google Analytics 4 collects anonymised data (pages visited, session length, browser, country). Your IP is anonymised.
Cookie preference — stored in your browser's localStorage under voyabud_cookie_consent; never sent to our servers.

3. Legal Bases (GDPR Art. 6)

Waitlist email & marketing — Art. 6(1)(a): consent. You can withdraw at any time.
Analytics — Art. 6(1)(a): consent. Analytics only loads after you accept cookies.
Security, fraud prevention & service integrity — Art. 6(1)(f): our legitimate interest in keeping the service safe.
Legal obligations — Art. 6(1)(c): where we must retain or disclose data to comply with the law.

4. How We Use Your Data

To send a launch-notification email and, with consent, marketing updates and offers.
To understand how the website is used so we can improve it.
To keep the service secure and to comply with legal obligations.
We do not sell or rent your personal data, and we do not share it with third parties for their own marketing.

5. Who Can See What

Your email and consent record are accessible only to authorised VoyaBud staff for operational and legal purposes.
If you accept analytics cookies, anonymised usage data is shared with Google Analytics as described in section 6.

6. Third-Party Processors

We rely on a small set of providers who process data on our behalf under data-processing agreements:

Brevo (Sendinblue SAS) — email & waitlist platform; stores your email and consent records and sends our emails. EU-based, EU servers. Privacy Policy.
Cloudflare, Inc. — hosting and form/edge processing; briefly handles your email and IP in transit. Privacy Policy.
Cloudflare Turnstile — bot-detection widget on the waitlist form; processes browser signals and IP address solely to verify you are human. No personal data is retained beyond the verification check. Privacy Policy.
Google LLC — Google Analytics 4 on the website (opt-in only, anonymised). Privacy Policy.

7. Data Retention

Waitlist email & launch consent — kept until the launch email is sent, then up to 6 months, or until you unsubscribe or ask for deletion.
Marketing consent records — kept for your subscription plus up to 3 years afterwards as proof of consent.
Unconfirmed marketing opt-ins — deleted after 30 days.
Signup IP (consent proof) — deleted after 12 months.
Analytics data — Google Analytics default retention (14 months), then deleted.

8. Your Rights

Subject to applicable law, you have the right to: access your data · correct inaccurate data · request erasure · restrict or object to processing · receive your data in a portable format · and withdraw consent at any time without affecting prior processing.

To exercise any right, contact privacy@voyabud.com. We respond within 30 days. For analytics consent on the website you can also withdraw by clearing this site's localStorage; for marketing, use the unsubscribe link in any email.

9. Cookies & Local Storage (website)

voyabud_cookie_consent (essential) — records your Accept/Decline choice; never sent to a server.
voyabud_lang (essential) — remembers your language choice.
_ga, _ga_* (analytics, opt-in only) — distinguish users/sessions; _ga expires after 2 years.

10. International Transfers

Waitlist and consent data is stored in the EU by Brevo. Cloudflare and Google may process data outside the EEA; both rely on EU–US data-transfer mechanisms (and the UK/Swiss extensions) and provide appropriate safeguards under GDPR Chapter V, the UK GDPR, and the nFADP.

11. Security

We use industry-standard measures to protect your data, including encrypted connections and access controls. No system is perfectly secure, but we work to keep your data safe and will notify you and the relevant authority of a personal-data breach where the law requires it (within 72 hours in the EU/UK).

12. Children

VoyaBud is not intended for children. You must be at least 16 to join the waitlist (or the minimum digital-consent age in your country; at least 13 where local law allows with appropriate consent). We do not knowingly collect data from children below the applicable age. In the US, we comply with COPPA and do not knowingly collect data from children under 13.

13. Regional Information

🇨🇭 Switzerland

If you are in Switzerland, processing also follows the revised Federal Act on Data Protection (nFADP). The supervisory authority is the Federal Data Protection and Information Commissioner (FDPIC). You have equivalent access, correction, and deletion rights — contact privacy@voyabud.com.

🇬🇧 United Kingdom

If you are in the UK, processing follows the UK GDPR and the Data Protection Act 2018. The supervisory authority is the Information Commissioner's Office (ICO). International transfers from the UK rely on the UK Extension to the EU–US Data Privacy Framework or the IDTA.

🇺🇸 United States — California (CCPA/CPRA)

We collect the categories described in section 2 (identifiers such as email address, consent records, and internet/usage data if you accept analytics). We use them for the purposes in section 4. We do not sell or share your personal information as those terms are defined under the CCPA/CPRA, and we do not engage in cross-context behavioural advertising. California residents may request access, deletion, and correction, and may exercise the "Do Not Sell or Share My Personal Information" right, free from discrimination — contact privacy@voyabud.com. Other US state laws (VA, CO, CT, TX, OR, and others) provide comparable rights, which we honour.

14. Data Controller

VoyaBud · privacy@voyabud.com

15. Changes to This Policy

We may update this policy as the service evolves. Significant changes will be communicated by email to waitlist subscribers. The "Last updated" date above always reflects the current version.

16. Right to Complain

If you believe we are not handling your data correctly, you may lodge a complaint with your local supervisory authority — e.g. the Garante per la protezione dei dati personali (Italy), the ICO (UK), the FDPIC (Switzerland), or your US state attorney general.