1. OVERVIEW & ROLES (CONTROLLER VS. PROCESSOR)
7 ENTERPRISES, LLC (“Company”, “we”, “us”, or “our”) respects the privacy and confidentiality of organizations, faith communities, event organizers, pastoral speakers, lecturers, and individual listeners. This Privacy Policy describes how we handle information in connection with our real-time live speech translation, captioning, and audio delivery platform (“AdventVoice” or “Service”).
1.1. Customer as Data Controller: Under data protection regulations (including the EU General Data Protection Regulation / UK GDPR and applicable state privacy laws), the Customer (such as a church, parish, ministry, educational institution, conference organizer, or corporate entity) acts as the Data Controller of spoken audio, speaker recordings, event transcripts, and administrative member assignments.
1.2. Company as Data Processor: Company acts solely as a Data Processor (or Service Provider), processing live audio streams and operational metrics strictly on behalf of and according to the verified instructions of the Customer.
1.3. Account Administrators: For customer account administrators, sound technicians, and billing contacts, Company acts as a Data Controller regarding their direct account registration, payment, and support interactions.
2. CORE ARCHITECTURAL COMMITMENTS: ANONYMOUS AUDIENCE & WORSHIP
2.1. No Audience Tracking or Profiling:
AdventVoice is deliberately architected so that church congregants, conference attendees, seminar participants, visitors, and remote listeners access translated live audio anonymously:
- No Listener Accounts: Audience members and congregants are never required to register, download apps, or create accounts.
- No Cookie Profiling or Advertising: Listener web interfaces contain zero third-party advertising cookies, zero behavioral tracking pixels, and zero marketing beacons.
- No Device Fingerprinting: Listener IP addresses are hashed using a salted cryptographic HMAC-SHA256 protocol; raw IP addresses are never persisted in databases or application logs.
2.2. Ephemeral Real-Time Audio Pipeline:
- Raw live microphone audio captured from sanctuary pulpits, conference stages, podiums, and microphones is streamed over encrypted WebSockets directly into active memory buffers.
- Once speech chunks are transcribed into text and synthesized into the requested target language, the audio stream is discarded from memory.
- In normal operational mode, raw live microphone audio is never written to persistent disk storage.
3. DATA WE COLLECT AND PROCESS
| Category | Specific Data Elements | Processing Purpose | Legal Basis / Authority |
|---|---|---|---|
| Customer Admin Data | Name, organizational email address, encrypted password hash, tenant affiliation, role. | Authentication, access control, account management. | Contract performance (Terms of Service). |
| Live Speech Audio | Spoken audio streams from designated stage, podium, or sanctuary microphones. | Real-time speech-to-text transcription and translation. | Performance of Contract; Customer (Data Controller) instructions. |
| Event Transcripts | Verbatim textual transcripts and AI-generated session summaries. | Displaying live captions, archival review, and translation. | Customer (Data Controller) instructions. |
| Voice Cloning Attestations | Speaker name, consenting authority basis, adult age (18+) verification certification, cryptographic policy hash, timestamp, IP hash. | Auditable compliance certification and customer legal warranty for custom neural voice synthesis. | Legal obligation; compliance verification; contract warranty. |
| Usage & Metrics | Audio minutes streamed, target language codes, segment counts, session timestamps. | Usage quota metering, billing reconciliations, and capacity planning. | Contract performance; legitimate business operations. |
| Billing & Invoicing | Stripe Customer ID, Subscription ID, billing address, last 4 digits of payment card. | Processing subscription payments and statutory tax compliance. | Legal obligation; contract fulfillment. |
4. SPECIAL CATEGORY DATA: FAITH, RELIGIOUS & SENSITIVE SPEECH (GDPR ART. 9)
4.1. Spiritual and Sensitive Content Safeguards: Sermons, prayers, scripture readings, and theological discourse inherently reflect religious beliefs and special category data under Article 9 of the GDPR. While AdventVoice provides real-time translation for a wide variety of live spoken events, assemblies, and conferences, we maintain strict technical and organizational safeguards across all speech data.
4.2. Data Controller Responsibility & Legal Authority: Customer, as Data Controller, represents and warrants that it possesses lawful legal authority under applicable law (such as explicit speaker consent under GDPR Art. 9(2)(a) or processing relating to data manifestly made public by the speaker under GDPR Art. 9(2)(e)) to broadcast and transcribe spoken presentations.
4.3. Appropriate Technical Safeguards: Company maintains robust safeguards:
- All transmissions are encrypted in-transit via TLS 1.3.
- Database records are encrypted at-rest using AES-256.
- Third-party API keys are envelope-encrypted using tenant-isolated keys.
- Verbatim transcripts are restricted to authenticated customer operators and are never published to public directories without administrative action.
4.4. No Commercial Exploitation: Company will never sell, monetize, broker, or license spoken audio, pastoral teachings, religious transcripts, or conference data to third parties or data brokers.
5. CHILDREN’S PRIVACY & AGE RESTRICTIONS (COPPA / GDPR ARTICLE 8)
5.1. No Intentional Collection from Children: The Service is intended for adult administrative operators and general audience attendees. AdventVoice does not knowingly collect personal data directly from children under the age of 13 (or under 16 in the European Economic Area).
5.2. Youth Speakers & Minor Stage Participants (Live Ephemeral Broadcast Only): Where minors participate in live events, presentations, or worship services (e.g., student readings, youth choir, children’s sermons), Customer as Data Controller assumes sole responsibility and legal warranty for ensuring appropriate parental or legal guardian consent has been obtained prior to live audio broadcast or transcription.
5.3. Strict Prohibition of Minor Voice Cloning (Customer Age Verification Warranty):
- Company strictly prohibits custom neural voice cloning or biometric voice modeling of children under 18 years of age. Custom voice synthesis is restricted exclusively to consenting adults.
- Customer Responsibility & Legal Warranty: Company does not directly collect government identification or biometric age verification documents from voice subjects. Instead, Customer affirmatively represents, warrants, and certifies in each Voice Rights Consent Attestation that Customer has verified that the voice subject is an adult aged 18 or older.
- Customer agrees to defend, indemnify, and hold Company harmless from any failure to verify adult age or unauthorized submission of minor voice data under COPPA, BIPA, or applicable law.
6. DATA RETENTION & AUTOMATED PURGE WORKERS
We enforce automated, programmatic data retention lifecycle policies:
6.1. 90-Day Content Purge: Soft-deleted sessions, speech transcripts, summaries, and detailed segment traces are automatically hard-deleted after 90 days. Aggregated session metadata (timestamps, duration, character metrics) is preserved permanently for billing and accounting fidelity with content purge status recorded.
6.2. 30-Day Diagnostic Logs: Viewer connection and diagnostic telemetry logs capturing anonymous latency and transport status are automatically expunged after 30 days.
6.3. 48-Hour Debug Audio TTL: Diagnostic audio files captured during administrative troubleshooting are strictly capped at 50 MB and automatically purged from the filesystem within 48 hours.
6.4. Confidential Session Guarantee: When an operator selects Confidential Mode, all speech-to-text and text-to-speech audio capture is hard-disabled server-side.
7. SUBPROCESSORS & THIRD-PARTY PROVIDERS
To deliver low-latency AI transcription, translation, and neural speech synthesis, we engage verified enterprise subprocessors. All subprocessors are bound by written Data Processing Agreements guaranteeing:
- Zero model training on customer speech audio or transcripts.
- Strict data confidentiality and SOC 2 / ISO 27001 security standards.
- Appropriate data transfer safeguards (Standard Contractual Clauses).
A current, complete list of our subprocessors is maintained in our public Subprocessor Registry.
8. YOUR LEGAL RIGHTS (GDPR, CCPA/CPRA)
Depending on your jurisdiction, customer administrators and recorded individuals hold legal rights regarding their personal data:
- Right of Access & Portability: The right to inspect and export recorded transcripts and account details.
- Right to Rectification: The right to correct inaccurate account or speaker records.
- Right to Erasure (“Right to Be Forgotten”): The right to request expedited deletion of speech transcripts or custom voice models.
- Right to Revoke Voice Consent: Voice subjects may revoke cloning consent at any time, which immediately terminates and disables the synthetic voice model.
To exercise these rights, please contact the Customer Data Controller directly, or submit a request to our Data Protection Officer at: privacy@adventvoice7.com.
9. SECURITY MEASURES
Company implements state-of-the-art security controls:
- Tenant Isolation: Row-Level Security (RLS) policies enforced in PostgreSQL preventing cross-tenant access.
- Single-Use WebSocket Tickets: Connection tickets expire within 30 seconds and are single-use, eliminating long-lived credentials in network URLs.
- HttpOnly Cookies & CSRF Protection: Authentication tokens are stored in strict HttpOnly, Secure, SameSite=Lax cookies with double-submit CSRF verification.
- Fail-Open Operational Resilience: In the event of secondary monitoring blips, live translation stream continuity is preserved to protect live services and presentations.
10. REVISIONS & CONTACT
We may update this Privacy Policy periodically to reflect new legal or technical requirements. Continued use of the Service following notification constitutes acceptance.
Governing Language: This Privacy Policy is drafted and executed in English. Any translation is provided solely for convenience; in the event of any ambiguity or dispute, the English text shall strictly govern.
7 ENTERPRISES, LLC
Attention: Privacy & Compliance Officer
Email: privacy@adventvoice7.com
Postal: 7 ENTERPRISES, LLC, Florida, United States