Effective Date: July 28, 2026
PEN Connect Inc., a Delaware corporation — governing the ProfileVoice platform (app.profilevoice.io)
This Privacy Policy (“Policy”) describes how PEN Connect Inc., a Delaware corporation (“PEN Connect,” “we,” “us,” or “our”), collects, uses, discloses, retains, and protects information in connection with the ProfileVoice platform available at app.profilevoice.io, together with any related applications, dashboards, APIs, or services we operate (collectively, the “Services”).
This Policy applies to every visitor, registered user, and subscriber of the Services. It explains how PEN Connect collects, uses, discloses, stores, transfers, and otherwise processes Personal Information when you use the Services. PEN Connect is committed to protecting Personal Information and complying with applicable privacy laws.
Where users upload photographs or images containing identifiable individuals, PEN Connect and its AI service providers may process those images solely to provide the requested Services and generate the outputs requested by the user. PEN Connect does not intentionally use uploaded images for facial recognition, identity verification, or authentication unless separately disclosed and, where required by law, separately consented to.
This Policy does not itself constitute a Data Processing Agreement with any vendor. It should be read together with our Terms of Service, which govern your use of the Services and control in the event of any conflict regarding matters other than the processing of Personal Information.
PEN Connect Inc. determines the purposes and means of processing Personal Information collected through the Services, and functions as the “business,” “controller,” or equivalent role under the statutes referenced in this Policy.
Legal name: PEN Connect Inc., a corporation organized under the laws of the State of Delaware.
Registered office or principal place of business: 8 The Green, Ste R, Dover, DE 19901
Privacy contact: support@profilevoice.com
“Personal Information” or “Personal Data” means information that identifies, relates to, or could reasonably be linked, directly or indirectly, with a particular individual or household.
“Biometric Information” means biometric identifiers or biometric information as defined under applicable law, where such laws apply. PEN Connect does not intentionally collect or use biometric identifiers for facial recognition or identity verification unless expressly disclosed in this Policy and, where required by law, separately consented to.
“Sensitive Personal Information” means biometric information and other categories classified as sensitive under the CPRA, VCDPA, CPA, CTDPA, MODPA, and comparable statutes.
“AI Vendor” means a third-party artificial intelligence service provider engaged by PEN Connect to generate written content, images, or video on a user’s behalf.
“Sale” and “Share” have the meanings in Cal. Civ. Code §1798.140, extending beyond a conventional sale to include certain transfers for cross-context behavioral advertising.
Full name and business or organization name.
Email address and, optionally, phone number.
Password, stored only in salted, hashed form.
Billing name, address, and email.
Text prompts, brand names, product descriptions, and marketing objectives.
Photographs or images you upload, which may depict human faces, products, or locations.
Generated outputs and related metadata.
Users may upload photographs or images containing identifiable individuals, including faces, for the purpose of generating images, videos, advertisements, branding materials, or other creative content. Such images are processed solely to provide the requested Services and generate the requested output. PEN Connect does not intentionally use such images for facial recognition, identity verification, authentication, or any unrelated purpose unless separately disclosed and, where required by law, separately consented to.
Billing is processed by Stripe, Inc., a third-party payment processor. PEN Connect does not store full payment card numbers on its own systems and receives only transaction confirmation, an abbreviated payment method reference, and billing history necessary for invoicing and account administration.
IP address, browser type, operating system, device identifiers.
Pages visited, features used, referring/exit pages, diagnostic logs.
Cookie data, described in Section 10.
If you connect a third-party service to your account, such as a calendar, social media platform, cloud storage provider, or other supported integration, we receive only the information necessary to provide the requested integration and functionality. If you connect a third-party service, the data we receive from that service depends on the permissions you grant and the settings of that service.
PEN Connect uses Personal Information only for the specific purposes described below, and does not process it in a manner materially incompatible with these purposes without providing notice and, where legally required, obtaining renewed consent.
We use account and User Content information to authenticate your account, generate the specific written content, images, or video you request, deliver outputs to your dashboard, and maintain the general functionality of the platform, including saving your generation history and preferences.
We use information about your prior generations, brand assets, and stated preferences to tailor suggested templates, tone, and creative direction, and to maintain visual and messaging consistency across the content you generate.
We use billing and contact information to process payments, issue invoices and receipts, manage subscription tiers and credit balances, and respond to billing disputes.
We use account, billing, and technical information to diagnose and resolve support requests, including reviewing your generation history where necessary to troubleshoot a specific reported issue.
We use technical and account information to detect and prevent fraudulent transactions, unauthorized account access, credential-stuffing attempts, automated scraping, and misuse of the Services in violation of our Terms of Service, including generation of content that violates our acceptable use policy.
We analyze aggregated or de-identified usage data, for example which features are most used, typical generation volumes, and common failure points, to improve the reliability, performance, and design of the Services. Aggregated or de-identified data used for this purpose does not identify any individual.
Where you have provided consent, or as otherwise permitted by law, we use your contact information to send product updates, promotional offers, and newsletters. You may opt out of marketing communications at any time using the unsubscribe mechanism included in each communication, without affecting your ability to use the Services.
We use Personal Information as necessary to comply with applicable law, respond to lawful requests from courts or government authorities, enforce our Terms of Service and this Policy, and establish, exercise, or defend legal claims.
PEN Connect does not use your uploaded prompts, images, videos, or generated outputs to train its own artificial intelligence or machine learning models. Third-party AI providers process your content solely to generate the requested output in accordance with their applicable contractual obligations and privacy commitments. Where supported by the applicable provider, PEN Connect configures its integrations so that customer content is not used to train generalized AI models.
Users may upload photographs containing identifiable individuals for the purpose of generating images, videos, advertisements, branding materials, and other creative assets.
Such images are processed solely to generate the output requested by the user.
PEN Connect does not:
perform facial recognition;
verify personal identity;
authenticate individuals;
create biometric templates;
build facial recognition databases; or
sell biometric information.
Images may be securely transmitted to trusted third-party AI providers solely for processing the requested generation and are handled in accordance with applicable contractual and legal obligations.
If PEN Connect ever collects, stores, or uses biometric identifiers or biometric information as defined by applicable law, PEN Connect will provide the notice, retention policy, and written release required by law before such collection, and will comply with applicable retention and destruction requirements.
To provide the Services, PEN Connect may transmit User Content to third-party AI vendors engaged for specific functions, including content and copy generation, branding and creative assistance, product and lifestyle image generation, and avatar-based or user-generated-content-style video production.
PEN Connect currently uses the following third-party service providers to provide the Services:
Anthropic – AI text generation
Google LLC (Gemini) – branding and creative assistance
Recraft AI – AI image generation
HeyGen Inc. – AI video generation
Stripe, Inc. – payment processing
PEN Connect may change or add service providers from time to time as necessary to provide the Services.
Each service provider is required, by contract where applicable, to process User Content solely to provide the requested Services, implement security measures reasonably designed to protect User Content, and notify PEN Connect promptly of any suspected data breach involving User Content.
Where required, PEN Connect enters into written data processing or service-provider agreements with vendors governing processing of User Content and Personal Information.
All billing and payment card data is handled directly by our third-party payment processor under its own PCI-DSS certification or other applicable security obligations. PEN Connect does not receive or store your full payment card number, and receives only transaction confirmation, an abbreviated payment method reference, and billing history necessary for invoicing and account administration.
Depending on your place of residence and applicable law, you may have the right to:
access your Personal Information;
correct inaccurate information;
delete your Personal Information;
withdraw consent where processing is based on consent;
receive a portable copy of your Personal Information where required by law;
object to certain processing activities;
opt out of the sale or sharing of Personal Information, where applicable; and
limit the use and disclosure of sensitive personal information, where applicable.
To exercise these rights, please contact us at support@profilevoice.com. We may need to verify your identity before processing your request. We will respond within the time required by applicable law and may deny requests to the extent permitted by law. If your request is denied, you may submit an appeal where required by law.
If we collect sensitive personal information subject to California law and use it for purposes other than those permitted without limitation, California residents may have the right to direct us to limit the use and disclosure of such information. To submit a request, contact us at support@profilevoice.com or use support@profilevoice.com.
We may ask for information necessary to verify your request and, where permitted by law, may deny or limit a request if an exception applies.
PEN Connect and its service providers use cookies, web beacons, pixels, and local storage to operate, secure, remember your preferences on, and improve the Services.
Strictly necessary cookies: required for authentication, session management, and security; cannot be disabled without impairing core functionality.
Functional cookies: remember your preferences, such as saved brand assets, display settings, and dashboard layout.
Analytics and performance cookies: help us understand feature usage, error rates, and overall platform performance.
Advertising and marketing cookies: used only where applicable; applicable privacy rights and opt-out mechanisms are described in Section 9 of this Policy.
Some cookies are set directly by PEN Connect (first-party); others are set by analytics or advertising partners operating on our behalf (third-party), and are additionally governed by that partner’s own privacy practices.
Session cookies expire when you close your browser. Persistent cookies remain on your device for a defined period determined by the specific cookie or similar technology, unless deleted earlier by you.
Most browsers allow you to block or delete cookies through their settings menu, and to be notified before a cookie is set. Blocking strictly necessary cookies may prevent you from logging in or using core features of the Services.
There is no universally accepted industry standard for how websites should respond to a browser “Do Not Track” signal, and PEN Connect does not currently respond differently to that signal. Where required by applicable law, PEN Connect will treat a Global Privacy Control signal as a valid opt-out request.
PEN Connect is based in, and primarily operates for users located in, the United States. Certain of our AI vendors, cloud infrastructure providers, or other service providers may store or process Personal Information on servers located outside the United States in the course of providing the Services.
By using the Services, you acknowledge and agree that PEN Connect may transfer, store, and process your Personal Information in the United States and in other countries where PEN Connect or its service providers maintain facilities. These locations may have data protection laws different from, and potentially less protective than, those of your jurisdiction. PEN Connect requires its service providers, through contract where applicable, to implement safeguards reasonably designed to protect Personal Information consistent with this Policy regardless of where processing occurs.
Cross-border transfers will be made only as necessary to provide the Services and subject to contractual and operational safeguards intended to protect Personal Information.
Account data: retained while your account remains active, and for ninety (90) days following account closure to permit reactivation and satisfy legal holds.
Uploaded content: retained only for as long as reasonably necessary to provide the Services, comply with legal obligations, resolve disputes, enforce our agreements, or protect the security and integrity of the Services.
Billing and tax records: retained for seven (7) years.
Support communications: retained for two (2) years following resolution.
Technical and security logs: retained for twelve (12) months, or longer to investigate a specific incident.
When data is no longer needed, it will be deleted or anonymized, subject to applicable legal obligations and legitimate business needs.
If PEN Connect ever possesses biometric identifiers or biometric information as defined by applicable law, PEN Connect will maintain a written public retention schedule and guidelines for permanently destroying such information when the initial purpose for collecting or obtaining it has been satisfied or within three (3) years of the individual’s last interaction with PEN Connect, whichever occurs first, and will comply with applicable notice, release, and destruction requirements.
Encryption of data in transit using TLS 1.2 or higher.
Encryption of data at rest using AES-256 or an equivalent industry standard.
Role-based access controls limiting internal access to Personal Information to personnel with a legitimate need.
Multi-factor authentication required for administrative access to production systems.
Routine access-log review and periodic security testing.
No method of transmission over the internet or electronic storage is completely secure, and PEN Connect cannot guarantee absolute security. In the event of a data breach affecting Personal Information, PEN Connect will notify affected individuals and, where required, state regulators, consistent with applicable law.
You must be at least 18 years of age, or the age of legal majority in your jurisdiction, to create an account and use the Services independently. The Services are not directed to children under 13, and PEN Connect does not knowingly collect Personal Information from children under 13, consistent with the Children’s Online Privacy Protection Act (COPPA). If PEN Connect learns it has inadvertently collected Personal Information from a child under 13, it will delete that information promptly. PEN Connect does not knowingly direct targeted advertising toward known minors.
The Services may contain links to third-party websites, plugins, or services that are not operated or controlled by PEN Connect, including social media platforms to which you may choose to publish generated content. This Policy does not apply to, and PEN Connect is not responsible for, the privacy practices or content of any third-party site or service. We encourage you to review the privacy policy of any third-party site before providing it with your information.
THE SERVICES, AND ANY INFORMATION PROVIDED THROUGH THEM, ARE PROVIDED ON AN “AS IS” AND “AS AVAILABLE” BASIS. TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, PEN CONNECT DISCLAIMS ALL WARRANTIES OF ANY KIND, WHETHER EXPRESS OR IMPLIED, REGARDING THE ACCURACY, COMPLETENESS, OR SECURITY OF ANY DATA PROCESSING DESCRIBED IN THIS POLICY.
To the maximum extent permitted by applicable law, PEN Connect’s aggregate liability for any claim arising from or relating to this Policy or the processing of Personal Information described herein is limited as set forth in our Terms of Service. Nothing in this Policy is intended to, or does, limit any right or remedy that cannot lawfully be limited or waived by agreement.
Your use of the Services, including any breach of this Policy, is subject to the indemnification obligations set forth in our Terms of Service, which are incorporated here by reference. This Policy does not itself create additional indemnification obligations beyond those set forth in the Terms of Service.
This Policy is governed by the laws of the State of Delaware, without regard to its conflict-of-laws principles, except to the extent that mandatory consumer protection, biometric privacy, or other non-waivable laws of your state of residence apply notwithstanding this choice of law. Any dispute relating to this Policy is subject to the dispute resolution provisions, including any arbitration or forum-selection terms, set forth in our Terms of Service.
If PEN Connect is involved in a merger, acquisition, financing, or sale of all or a portion of its assets, Personal Information may be transferred as part of that transaction. PEN Connect will provide notice, by email and/or prominent notice on the Services, of any change in ownership or in the uses of your Personal Information resulting from such a transaction, prior to your Personal Information becoming subject to a different privacy policy.
PEN Connect may update this Policy periodically to reflect changes in its practices or in applicable law. Material changes will be communicated by email and/or a prominent notice on the Services prior to the change taking effect. Continued use of the Services after a change becomes effective constitutes acceptance of the revised Policy.
PEN Connect Inc.
8 The Green, Ste R, Dover, DE 19901
Email: support@profilevoice.com