Pilot privacy notice
Your data supports your account—not an advertising profile.
Effective August 21, 2026. This notice describes the Voscale pilot. It does not replace the final policy and legal review required before a public launch.
What we collect
We keep the account details, legal acceptances, storefront content, purchase and payment status, course progress, support actions, security records, and email-delivery status needed to run the service. Payment card details stay with Stripe. Video delivery is handled by Bunny Stream.
Referral cookies
Visiting a HiMyBio storefront creates signed, first-party referral and return cookies. The referral lasts up to 30 days so the correct reseller can receive credit if you buy. The cookies contain random identifiers and signed references—not your email, IP address, or a raw browser fingerprint. We do not use third-party advertising cookies in this MVP.
How data is used and shared
Data is used for authentication, attribution, payments and refunds, course delivery, progress, support, fraud prevention, and compliance. We share only what is necessary with the identified reseller seller and service providers such as Stripe, Cloudflare R2, Bunny Stream, Amazon SES, and our hosting provider.
Access, export, correction, and deletion
Contact [email protected] to request a copy, correction, or deletion of personal data. We verify the request through the account email. Required payment, tax, dispute, fraud, and audit records may be retained or de-identified when deletion is not legally or operationally available.
Retention and security
Referral records expire after their attribution purpose; abuse counters expire within a day after their short control window. Other records are retained only for account operation, support, legal, accounting, and security needs. Access controls, encryption in transit, signed provider events, audit records, and restricted secrets reduce risk, but no system can promise absolute security.