razen

Last updated June 2026

Privacy Policy

This policy explains what personal data Razen ("we") collects, why we collect it, how we use it, and what rights you have.

1. Who is responsible for your data

Razen is the data controller for the personal data we process about you. Our Data Protection Officer is contactable at razenai@outlook.com.

2. What we collect

  • Account data. Email address, display name, hashed password, sign-in timestamps, IP address, user agent.
  • Service data. Scenarios you save, character profiles you create or edit, session transcripts, scores, debrief content.
  • Voice audio. Audio captured during voice sessions, encrypted at rest, retained for the period you choose in Settings → Memory (default 30 days; options: 7 days, forever, delete-on-end).
  • Voice Studio settings. If you design a synthetic voice, we store the pitch, pace, and tone values you choose. This is not a recording of your real voice: Razen does not offer voice cloning and collects no voice samples or biometric voice data.
  • Billing data. Subscription tier, billing history, payment-method tokens (held by Stripe, not us), subscription status.
  • Usage data. Anonymised event analytics (session start, duration, scenario category) for product improvement.

3. Why we process it

  • To provide the Service to you (Article 6(1)(b) — contract).
  • To prevent fraud and abuse, and to keep the Service secure (Article 6(1)(f) — legitimate interest).
  • To comply with our legal obligations (Article 6(1)(c)).

4. Sub-processors

We use a small list of carefully chosen sub-processors. The full list with regions and data flows is published at /legal/sub-processors and updated whenever it changes.

5. Data residency

EU and UK users are processed in EU regions where possible. Where a sub-processor is US-based, we rely on Standard Contractual Clauses and the UK addendum.

6. Retention

We retain account data while your account is active and for up to 30 days after deletion (we then erase from active systems within 24 hours of your deletion request and from backups within 30 days). Voice audio retention is controlled by you.

7. Your rights

Under UK / EU GDPR you can access, rectify, erase, restrict, object to, or port your data. You can also lodge a complaint with the ICO (UK) or your local supervisory authority. Use Settings → Memory to download your data as JSON, and Settings → Danger to delete your account.

8. Children

Razen is not for under-16s. We do not knowingly process children's data and will delete any such data brought to our attention.

9. Changes

Material changes to this policy are announced by email at least 30 days before taking effect.

10. Contact

razenai@outlook.com