Privacy and data information

Controller and contact

VoxFrame is the controller for the website, customer account and licence service and is registered in the Netherlands under Chamber of Commerce (KvK) number 42116329 and VAT identification number NL005506619B33. Business address and appointment location: Marnixstraat 1 · 7553 LC Hengelo · office 13 · Netherlands. Visits are available only by appointment on Tuesday, Wednesday and Thursday from 11:00 to 16:00. Privacy and data-rights requests: support@voxframeplayer.com.

What stays local

Local video, subtitle files, playlists and settings stay on your computer unless you deliberately start an online action. LAN Watch shares playback only inside the local network session you start.

For subtitle-file translation, VoxFrame Simple sends subtitle text to the Cloud, not the video or audio file. Simple Live Subs recognises speech locally and sends the written live subtitles for Cloud translation. An OpenSubtitles search sends the video-identification fields needed for that search. Successful translated subtitle payloads are retained only for the 24-hour retry window and are then automatically removed; the technical usage audit stores neither subtitle text nor the local file name.

VoxFrame does not use public-site advertising trackers, analytics cookies or behavioural profiling.

Data, purposes and legal bases

Account e-mail, licence and device identifiers are used to deliver, activate, secure and support the product (contract and legitimate security interests). Checkout identifiers, consent evidence and transaction references are used for purchase, accounting and consumer-law duties (contract and legal obligation).

Web-server security logs can contain IP address, request time, route, browser identifier and technical status. They are used to deliver and secure the service and investigate abuse (legitimate interest). Optional Cloud actions send only the media, audio or text needed for the selected action plus account, quota and security data (contract).

Recipients and international transfers

Stripe processes payment and billing data; VoxFrame does not receive card numbers. Hosting, e-mail and selected AI or subtitle providers receive only data needed for the chosen service. Processors act under agreements and access controls.

Where data is processed outside the EEA, VoxFrame uses an applicable adequacy decision or safeguards such as EU Standard Contractual Clauses.

Cloudflare processes limited browser, network and challenge-result data only when Turnstile is loaded on a support or cancellation form for abuse prevention.

Cookies and browser storage

VoxFrame uses no analytics, advertising cookies or behavioural profiling. The informational privacy notice writes only its version and acknowledgement time to localStorage after you select Understood; the page ignores and removes that item after 180 days.

The account uses tab-scoped sessionStorage for language, a short-lived signed account session and the supplied account e-mail. Sign-out or a rejected session removes the token and e-mail; closing the tab removes the remaining session storage. Pro and Simple checkout fields are written only after the server explicitly reports that the relevant commerce route is enabled and a purchase attempt starts.

In VoxFrame 1.4.1, an online-video job can use explicitly selected cookie export, browser session, password, two-factor value, video password or job proxy in memory. These are not stored as a general platform account; thumbnails remain in memory and the instance-owned temporary workspace is removed after completion or shutdown.

Support and cancellation forms can load Cloudflare Turnstile solely to prevent automated abuse. Cloudflare receives the technical browser and network signals needed for that check; VoxFrame does not use them for analytics or advertising.

Retention and security

Licence and account records are retained while the entitlement exists and as needed for support, fraud prevention and legal claims. Payment and accounting evidence follows the statutory administration period. Content-free Simple usage events are automatically removed after 400 days and provider rate buckets after 48 hours. Security logs and closed support correspondence are kept only while needed for security, resolving the case, fraud prevention, legal claims or a legal duty, and are reviewed for deletion using those criteria.

TLS, restricted access, hashed licence material, rate limits and redacted logs reduce risk. No system is risk-free.

Your data-protection rights

Depending on the situation, you may request access and a copy, correction, deletion, restriction or portability, or object to processing. You may withdraw consent for future processing. VoxFrame does not make solely automated decisions with legal or similarly significant effects.

Send the request from the account e-mail where possible and state which right you wish to use. Do not send a full identity-document copy unless VoxFrame explains why additional identification is necessary. VoxFrame responds without undue delay and in principle within one month. A justified extension or refusal will be explained. You may complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or your local EEA authority.