Privacy Policy
Last updated: 2026-07-06
This Privacy Policy explains how JSIP Co. Ltd.(“Voloto,” “we,” “us”) collects, uses, and protects your information when you use Voloto (the “Service”). We keep this simple on purpose: we collect what the Service needs to work, we do not sell your personal information, and we do not use your audio to train AI models.
Information we collect
- Account information— your email address, used to authenticate you (via email & password or Google sign-in), and your consent records (which versions of the Terms and this Policy you accepted, and when).
- Your audio — the vocal and instrumental recordings you upload, and the processed versions Voloto produces.
- Usage data — your chat messages with the producer, edit history, credit balance and transactions, and basic technical logs needed to operate and secure the Service. Page analytics are aggregate and cookie-free.
How we use it
We use your information to provide and operate the Service: to process your audio, run the conversational producer, maintain your session history and credit balance, secure the Service, and communicate with you about your account. We send marketing email only if you separately opted in, and every such email includes an unsubscribe link. We do not sell your personal information, and we do not use your audio or outputs to train, fine-tune, or improve any AI model.
Service providers and international transfers
We rely on a small number of processors to run the Service. Because they operate outside Korea (and possibly outside your country), your data is transferred internationally as described below. Each provider processes data on our behalf, only to provide its function, under its own security commitments.
| Provider | What it does | Where |
|---|---|---|
| Supabase | Authentication, database, file storage for your audio | United States |
| Anthropic | AI model that powers the conversational producer | United States |
| Vercel | Web hosting and privacy-friendly page analytics | United States (global CDN) |
| Resend | Transactional email (sign-in codes, account notices) | United States |
| Hostinger | Dedicated server we operate that renders your mixes and masters | United States |
Audio files handled by the rendering server are used only for the duration of active processing and are not retained there after your render completes; durable copies live only in your project storage until you delete them.
Data retention and deletion
We retain Your Content and account data for as long as your account is active. When you delete a session, its audio files are removed from storage; automated cleanup also removes expired working files. You may request deletion of your account and associated data at hello@volotoai.com. We respond to deletion and other rights requests without undue delay — within 30 days at the latest, and for requests under Korean PIPA we aim for 10 business days — except where law requires longer retention.
Security and breach notice
Access to your data is restricted and encrypted in transit. If a breach affecting your personal information occurs, we will notify you and the competent authority without undue delay, consistent with applicable law (including Korea’s PIPA and the GDPR’s 72-hour standard).
Your rights
Depending on your location (including under the GDPR, UK GDPR, CCPA/CPRA, PIPA, and APPI), you may have rights to access, correct, export, restrict, or delete your personal information, and to withdraw consent — including marketing consent — at any time. To exercise them, contact us at hello@volotoai.com. We do not discriminate against you for exercising these rights.
Changes and contact
We may update this Policy; material changes will be notified by email or in-app and reflected by the “Last updated” date. Data controller: JSIP Co. Ltd., 183-40 Jeongmunhoehwa-ro, Yanggam-myeon, Manse-gu, Hwaseong-si, Gyeonggi-do, Republic of Korea. Questions or requests: hello@volotoai.com.