Privacy Policy

mazdek GmbH
Switzerland
Email: [email protected]

mazdek GmbH (“mazdek”, “we”, “us”) is the controller of your personal data under the Swiss Federal Act on Data Protection (nDSG/FADP).

You must be at least 13 years old to create an account or use mazdek services.

Account data

Email address, name (optional), profile picture (optional), authentication credentials, and account preferences.

Phone number (verification)

If account verification requires it, we collect and store your phone number to send a one-time SMS code and to check it against fraud/abuse signals. We use it only for verification and security.

Usage data

Transcription content and audio files you upload, chat conversations and messages, text-to-speech generations, documents and files you upload to projects, knowledge you create, translation requests, and project data.

Voice samples & custom voices

If you create a custom voice, we collect the voice recordings you provide and use them to build a voice model. Voice samples are stored privately, and the voice model is created with our text-to-speech provider (see International Data Transfers). Voice is sensitive data; we process it only to provide this feature to you.

Technical data

IP address, browser type, device information, and session data. We use this to operate and secure the Service and to prevent fraud and abuse.

Billing data

Subscription plan, usage statistics, payment transactions, and invoices. Payment card details are processed and stored exclusively by our PCI-compliant payment processor — we never see or store your card number.

Your data is primarily processed on servers in the European Union. To provide the Service we rely on a small number of carefully selected service providers (“sub-processors”), described below by category. Some are located outside Switzerland, including in the EU and the United States:

For transfers to the USA, we rely on the Swiss-U.S. Data Privacy Framework where applicable, or standard contractual clauses (SCCs) recognized by the FDPIC. A current list of our specific sub-processors is available on request at [email protected].

When you deactivate your account, your login is disabled but your data is preserved; you can reactivate by contacting support. When you permanently delete your data (Settings > Account > “Permanently delete my data”), your conversations, transcripts, generated audio, custom voices and personal profile are erased immediately and your profile is anonymized. Only financial records required by Swiss commercial law (OR Art. 958f, 10 years) are retained, in an anonymized form no longer linked to your identity. You can also request removal at [email protected].

Under the nDSG (Art. 25–29), you have the right to:

• Access — Request a copy of your personal data (available via Settings > Privacy > Export Data)
• Rectification — Correct inaccurate personal data (via Settings > Account)
• Deactivation — Temporarily disable your account while your data is preserved (via Settings > Account)
• Erasure — Permanently delete your conversations, media and personal profile (via Settings > Account > “Permanently delete my data”). Billing records required by law are retained in anonymized form
• Data portability — Export your data in a structured, machine-readable format (JSON)
• Objection — Object to data processing for service improvement (toggle off “Help improve mazdek” in Privacy settings)
• Withdraw consent — Revoke consent for location metadata or AI training at any time via Privacy settings

To exercise any right not available through the app, contact us at [email protected]. We will respond within 30 days.

You can manage the following in Settings > Privacy:

• Help improve mazdek — Whether your de-identified queries may be retained to analyze and improve the Service. We do not use your content to train AI models without your consent.
• Export data — Download all your data as a JSON file at any time.

Both toggles default to off. Your preferences are saved to your account.

We implement appropriate technical and organizational measures to protect your data (nDSG Art. 8), including:

• TLS encryption for all data in transit
• Encrypted database connections
• Session-based authentication with secure cookies
• Rate limiting and abuse protection
• Role-based access control for administrative functions
• Payment processing delegated to a PCI DSS-compliant payment provider

If you believe your data protection rights have been violated, you may lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC):

FDPIC — Eidgenössischer Datenschutz- und Öffentlichkeitsbeauftragter
Feldeggweg 1, CH-3003 Bern
www.edoeb.admin.ch

For privacy-related questions or to exercise your rights:

mazdek GmbH
Email: [email protected]