Privacy Notice

1. Who we are

BOBADE LTD, trading as OwnVoice Academic, is the data controller for the personal data described in this notice. That means we decide why and how your personal data is processed. You can contact us about privacy at support@ownvoiceacademic.com.

2. Personal data we collect

• Account data — name, email address and login credentials.
• Content you create — coursework briefs, notes, personal experience entries, references and drafts you choose to store in the workspace.
• Support data — messages you send us and their attachments.
• Usage and technical data — feature usage, telemetry, device identifiers, browser type, log data and IP address.
• Order data — the fact and status of a purchase, plan and buyer email received from Paddle. Card details are collected and processed by Paddle, not by us.

3. Why we use it, and our legal basis

• Creating and administering your account — performance of our contract with you.
• Providing the writing workspace and storing your content — performance of our contract.
• Managing subscriptions, invoicing and order records — contract and legal obligation.
• Security, fraud prevention and abuse detection — legitimate interests in protecting the Service.
• Product improvement and aggregated analytics — legitimate interests in improving the Service.
• Customer support — contract and legitimate interests.
• Marketing emails, where applicable — consent, which you may withdraw at any time.

4. Who we share data with

• Service providers and subprocessors — hosting, database, analytics and support tooling providers acting on our instructions.
• Paddle.com, our Merchant of Record, for the sale of the product, subscription management, payments, tax compliance and invoicing.
• Professional advisers — legal and accounting advisers where necessary.
• Authorities — where required by law or to establish, exercise or defend legal claims.

We do not sell your personal data.

5. International transfers

Some providers process data outside the UK and EEA. Where that happens, we rely on UK/EU adequacy decisions or on Standard Contractual Clauses (with the UK Addendum where relevant), together with appropriate technical safeguards.

6. Retention

We keep account and content data for as long as your account is active, and for up to 12 months after closure so you can recover it, unless you ask us to delete it sooner. Order and tax records are kept for as long as legally required (normally six years). Log and telemetry data is kept for up to 12 months. After these periods data is deleted or anonymised.

7. Your rights

Under the UK GDPR and EU GDPR you have the right to access, rectification, erasure, restriction, portability, objection to processing based on legitimate interests, and withdrawal of consent. To exercise a right, email support@ownvoiceacademic.com; we will respond within one month. You may also complain to a supervisory authority — in the UK, the Information Commissioner’s Office (ico.org.uk).

8. Security

We use appropriate technical and organisational measures, including encryption in transit, access controls, least-privilege administration and regular review of our providers, to protect personal data.

9. Cookies

We use essential cookies and local storage to keep you signed in and to store your workspace preferences and content. Where we use analytics or marketing cookies we ask for your consent first, and you can change your choice at any time in your browser settings or through any cookie banner shown to you.

10. Changes

We may update this notice and will post the revised version here with a new “last updated” date. See also our Terms & Conditions and Refund Policy.