Privacy

Effective 27 September 2026.

This page says what we hold about you, why, and how to get rid of it.

What we hold

Your email address. It is the account. We use it to sign you in and to answer when you write to us. If you sign in with Google, Google tells us your email address — nothing else.

Your slides, and what we make from them. The uploaded file, page thumbnails, the generated script, the audio, and the exported PowerPoint files — kept so we can deliver them and keep your delivery link working.

Payment records, without the payment. Checkout runs through Paddle as merchant of record; your card number never reaches us. We keep the transaction reference so we can find your order. Paddle's own checkout code runs in your browser on the pages where you can buy, so that the payment window can open there instead of sending you away; it is theirs, it may store things of its own, and it is covered by Paddle's terms as well as ours. It is the only code on this site that is not ours.

An email address, only if you type one in. Buying is not open to everyone yet. If you ask us to tell you when it opens, we keep the address you typed and the time you typed it — nothing else, not which presentation you were looking at. We use it once, to write to you when buying opens, and we delete it once we have. Delete your account and it goes with it; ask us and it goes sooner.

Your own voice, only if you make one. To make it, you record a short paragraph and one consent sentence. The recordings are used once, to make your voice, and then deleted — we do not keep the recordings. What we keep is a key that lets us speak your scripts in that voice, and when it stops working: your voice expires after 7 days, and after that you record again if you want it back. Delete your account and we erase the key at once, so your voice can no longer be used; at Google's end it lapses within those 7 days.

A short-lived network address. When a free presentation is claimed we note which network it came from, to stop one person opening endless accounts. It is stored apart from your account and deleted within days.

Sixteen counters a day. Page visits, arrivals on the public time-split page, checkouts, times we ran out of capacity, refunds, finished time splits, taps on the price, plays of the sample audio on the time-split report, sample scripts written on that report, times that sample script was read aloud, the upload form coming into view, taps on “choose file”, file pickers closed without a file, and taps on “send this page to my computer”, accounts created, and free presentations claimed — each one a single number a day, counted on our own servers. Page visits, arrivals, finished time splits, accounts created and free presentations claimed are also broken down by which link brought the visitor, read from the utm tag on the link you arrived by — the same counters, split by source, never who you are. Alongside them, one running total: what those sample scripts and their voice cost us in model fees, one number a day, so we can stop at a daily limit. They load nothing from anyone else and they identify nobody. One of them does use a cookie of ours — see below.

Advertising

We are not running any advertising script right now. Nothing here measures our ads, profiles you, or tells an advertising company that you came — and there is nothing of theirs stored in your browser. We have bought ads before, and we may again.

If that changes, we will ask you before anything of theirs loads. Measuring an ad needs a script from the advertising company. We will ask on your first visit, and until you answer, nothing of theirs runs; say no and nothing of theirs ever loads. We will keep your answer in your browser so that we do not ask every time — it is not a cookie, and it never reaches us. Everything here works the same either way: the choice changes what we learn about our own advertising, not what you can do on this site and not what we hold for you.

What we don't do

We do not sell or share your data for marketing.

We do not use your slides to train models or to build datasets. They are processed to produce your script and audio, and to check that audio — by us and the subprocessors listed — and for nothing else.

Checking the audio means this: to catch a recording that skips part of its script or adds words of its own, we may send the recording and its script to Google's Gemini API to compare the two. We keep the result of that comparison, not a copy of the audio or the script.

Your own voice is made through the paid Gemini API, whose data is not used to improve Google's models — never through a free tier.

Cookies we set: five, all our own. Four are for getting you in and out — your sign-in session, the access gate for buying, and two that live for a few minutes while you sign in with Google: one proves the sign-in started here, the other remembers which page to return you to. The fifth exists only if you arrived by a link carrying one of our campaign codes, and it holds that code for thirty days. The code is a short label we wrote ourselves; it says which of our own links you came by and nothing about you, and we keep it so that if you sign in later we can still count that visit against the right link. None of them follows you anywhere, and none is shared with anyone.

Where it lives

Files and records are stored with Cloudflare. Generation runs on Google Cloud: your slides are sent there to write the script and speak it, and the results come back. A presentation made with one of our earlier voices — Sal, Rex, Ara or Eve — is spoken through OpenRouter instead: its script goes to OpenRouter, which passes it to xAI, the company that runs those voices. To check the audio, a recording and its script may be sent to Google's Gemini API to be compared. To make your own voice, your two recordings are sent to Google's Gemini API, which checks that they are the same person and makes the voice; nothing else is sent with them. The full list of companies involved is on the subprocessors page.

How long we keep it

Uploads that never become an order are deleted after 35 days, thumbnails included.

Delivered scripts, audio and files are kept, because your delivery link is a permanent promise.

You can delete any presentation yourself, from its page. The files are erased immediately: the page stops existing and shared links stop working. Order records remain for accounting, but they no longer point at any content.

You can delete your whole account yourself, from the account menu: every presentation is erased the same way, your sign-in identities are removed, and your email leaves our records. Prefer a human? Email hello@prevoca.app and we'll do it for you.

Your rights

If you are in the EU/EEA, the UK, or anywhere with similar rules: you can ask for a copy of your data, have it corrected, have it deleted, or object to how it's used — and you can complain to your local data-protection authority. Our legal bases are performing our contract with you — which includes checking that the audio we deliver actually reads your script — and a legitimate interest in preventing abuse.

Write to hello@prevoca.app. We answer within 30 days, usually much sooner.

Questions about any of this: hello@prevoca.app. Prevoca is operated by KumoAlpha AI Technologies Co., Ltd. (酷摩智能科技有限公司), Taiwan.