Privacy notice.

The controller for this website is Timi Vovk s.p., trading as Tivio IT, in Slovenia. VocaGuide is made by Tivio IT, founded by Timi Vovk.

How to make a privacy request: use the privacy request form at the end of this page. It asks only for your email address, what you would like (to see, correct or delete your data, or something else) and an optional message. You don't need a website.

When you ask for a demo, we store exactly this: your email address, your website address, your name and your message where the form asks for them, the page and section you sent it from, the time, and the country your request came from (Cloudflare works it out from your IP address; we don't store the IP address).

We use this to build your demo, to email you about it and to answer you. The legal basis is the steps you ask us to take before a possible contract (Article 6(1)(b) GDPR).

We keep demo requests for 12 months, then they are deleted automatically.

To block abuse, the form counts requests per network for one hour. For that it keeps a scrambled code made from your IP address (a salted hash, not the address itself) for about an hour. If the same request is sent twice within an hour, we keep one copy. We don't sell your data, use it for advertising or pass it on to anyone else.

Folio, the paper guide on this site, is an AI guide. It says so in its first line, and its bubble is labelled AI guide.

Tapping its questions sends nothing about you. By default the guide answers with pre-written text when you tap a question. All that leaves your browser is an anonymous count on our own server (for example, that a question was answered on a page), with no cookies and nothing that identifies you.

Typing your own question or talking to it goes to our AI provider. Where a live conversation is offered and you start it, the text you type, or your voice while you talk, is sent to ElevenLabs, our AI and voice provider, so the guide can answer (details below). The legal basis is your consent, which you give by starting the conversation (Article 6(1)(a) GDPR), and you can stop at any time.

Nothing starts by itself. Sound plays only after you turn it on, and the microphone is used only after you press talk.

Live conversations, by voice or text, are processed for us by ElevenLabs, Inc., a US-based provider. ElevenLabs acts as our processor for speech recognition, the conversation and speech synthesis, under its Data Processing Addendum. What it receives: the text you type, your microphone audio while you talk, the conversation transcript, which page of this site you are on, and which of the guide's questions you tapped before the conversation.

ElevenLabs hosts data in the United States, so a live conversation involves a transfer of data to the US. These transfers are covered by the EU–US Data Privacy Framework, under which ElevenLabs is certified, and, where needed, by the EU Standard Contractual Clauses.

We have set our ElevenLabs account not to keep recordings of your voice. Conversation transcripts are kept for 30 days, then deleted.

This site sets no cookies. The guide keeps two small notes in your browser's session storage, for this visit only: that you have already seen its opening, and whether you turned its sound on. They never leave your browser and are gone when you close the tab. They are needed for the guide to work the way you chose, so they don't need consent.

This website, its forms and its counters run on Cloudflare, our hosting provider, which processes data on our behalf. Like any web host, Cloudflare processes your IP address and basic request data to deliver the pages and to block abuse.

Cloudflare, Inc. is a US company, so this can involve a transfer of data to the US. It is covered by the EU–US Data Privacy Framework, under which Cloudflare is certified, and by the EU Standard Contractual Clauses.

If a form shows a bot check (Cloudflare Turnstile), Cloudflare uses signals from your browser and connection to tell people from bots, for that check only.

We count visits and clicks with simple counters on our own server: one number per day, per event and per page (for example, a view of the pricing page). They set no cookies, store nothing on your device, keep no IP address and don't identify you. We don't use cookies for analytics or advertising.

Under the GDPR you have the right to:

• access your data;
• have inaccurate data corrected;
• have your data erased;
• restrict processing;
• object to processing;
• data portability;
• withdraw consent at any time, without affecting processing that happened before.

To use any of these rights, send the privacy request form below. We answer by email within one month. When you send a privacy request, we store your email address, the type of request, your message, a website address if you add one, the page and the time, and keep it for 12 months to answer it and to show that we did.

You can also complain to the supervisory authority in Slovenia, the Information Commissioner (Informacijski pooblaščenec, ip-rs.si).

We update this notice when the site or the guide changes. The date at the top shows the current version.