Vord Privacy Policy

Effective October 14, 2026. Previous versions: none.

Vord is a Mac app made by Dotcom Services Inc., doing business as Vord, Los Angeles, California, United States (“we”, “us”). This policy says what Vord does with your audio, your text and your account, in plain words. If anything here is unclear, write to [email protected].

The short version

Your recordings, transcripts and summaries live on your Mac, in Documents › Vord. Not on our servers. If your Mac syncs Documents to iCloud, they sync there too.
Audio is captured only while you are dictating (holding the key, or between the presses that start and stop it) or a meeting is recording. Vord does not read the contents of your screen. It does read the name of the app in front and its window title; while meeting detection is on, the window titles of your web browsers, to spot a meeting; whether the field you are typing in is a password field; and the text you select for Read Aloud. None of that leaves your Mac.
To transcribe, summarize or read aloud, Vord sends the audio or text through our relay to the service doing the work. Our relay does not save recordings or transcripts. It keeps a record of what was used (seconds, characters, cost, time); its request logs, kept 7 days, can hold your custom vocabulary.
We never sell your data, show ads, or use your audio or text to train models. The services that process your audio or text are not allowed to train on it either; the table below says how, service by service.
You can delete what Vord stores on your Mac from Settings, and delete your account from Settings. The account is deleted after a 7-day hold; a few records remain, listed below. Deleting the account does not delete the recordings on your Macs.

What happens to one dictation

You hold the key and speak. Vord captures the microphone. No audio is written to disk.
The audio streams, encrypted, through our relay to the speech service for your engine (Deepgram, or Soniox for multi-language). The relay checks your plan, counts the seconds, and passes the audio through.
The text comes back and is pasted at your cursor. If you turned on “Clean up dictation output”, the text first goes to OpenAI for cleanup. Cleanup is skipped for takes under 10 words and in code editors, password managers and password fields.
The audio is discarded as soon as it is transcribed. Deepgram and Soniox keep no audio or transcript beyond processing. OpenAI keeps the text of a cleanup, and the audio of a fallback transcription, in its abuse log for up to 30 days (the table below). The text stays in your Mac’s dictation history until you clear it.

What happens to one meeting

Vord records your microphone and the sound playing on your Mac: the meeting app’s sound when Vord can single it out, otherwise all of the Mac’s sound, so other apps’ audio can be recorded too. Both are saved on your Mac, in Documents › Vord › meetings, with the transcript as it arrives. No bot joins the call. Giving any notice and getting any consent the law requires from the other people is your responsibility (the terms, section 5).
The live transcript comes from the speech service, the same way as dictation.
When the meeting ends, Vord sends the transcript to OpenAI for a summary and a title. If the automatic polish is on, Vord first uploads the recording to AssemblyAI for a more accurate transcript with speakers, and OpenAI also suggests the speakers’ names. As soon as the polished transcript is saved on your Mac, Vord tells AssemblyAI to delete the recording and the transcript. If that request fails, or a polish is interrupted, AssemblyAI deletes the audio within about two days and the transcript within 30 days on its own schedule. Both the summary and the automatic polish can be turned off in Settings › Meetings.
Deleting the meeting in Vord deletes the audio, the transcript and the summary from your Mac.

Read aloud

The selected text goes through our relay to the voice service (Inworld, or OpenAI) and the audio plays on your Mac. Vord saves nothing. Inworld keeps the text and the generated audio in its logs for a limited time under its own policy.

The Vord Recorder

If you pair a Vord Recorder, it records to its own memory and sends the recordings to your Mac over Bluetooth. Vord uploads each one to Soniox for transcription and asks Soniox to delete it once the transcript is saved on your Mac.

The services that do the work

Service	What it does for you	What it receives	What it keeps
Deepgram	dictation; live transcript of English meetings	the audio, your custom vocabulary	no audio or transcript beyond processing, no training: Vord sends Deepgram’s training opt-out on every request
Soniox	multi-language dictation; live transcript of Hebrew meetings; recorder files	the audio, your custom vocabulary	real-time audio is not stored; a recorder file is deleted at Vord’s request after transcription; no training
AssemblyAI	the polished meeting transcript with speakers	the meeting recording	Vord asks for deletion when the polish is saved, and at the next launch for an interrupted one; otherwise AssemblyAI deletes the audio within about two days and the transcript within 30 days; no training (we opted out of its model-improvement program)
OpenAI	dictation cleanup, meeting summaries, speaker names, translation, the OpenAI read-aloud voices, a transcription fallback	the text, or the audio for the fallback	up to 30 days for abuse monitoring, longer only where OpenAI’s policy says; not used for training
Inworld	the read-aloud voices	the selected text	its logs, for a limited time, under its policy; no training on customer inputs or outputs, by its terms
Cloudflare	runs our relay and hosts the website	every request’s metadata; the audio and text pass through	request logs for 7 days, which can hold your custom vocabulary; no recordings or transcripts are saved
Supabase	sign-in and the account database (United States)	your account record and its sign-in logs	while the account exists (what remains after deletion is listed below); backups expire after 7 days
Google, Apple	sign-in	your sign-in with them	under their policies
Polar	payments, as the merchant of record	your name, email and card	its own records; we never see your card
Sentry	error and crash reports	what went wrong, the app’s recent technical events, an id for the installation, the app and macOS versions	up to 90 days
TelemetryDeck	usage counts, not linked to your name or email	event names, a hashed install id, the app version, the macOS version	under its policy; no IP addresses are stored
GitHub	update checks	the request for the update list	under its policy

Each service has its own privacy policy. None of them may train on your audio or text: Deepgram by the opt-out Vord sends on every request, Soniox and OpenAI by their terms for API customers, AssemblyAI by the opt-out set on our account, Inworld by its terms.

What our relay records

For every request: the feature (dictation, meeting, read aloud, cleanup, summary), the service, the units (seconds, characters or tokens), the cost, the time, your plan, an id for the app installation and the app version. This is how we count your use against your plan and pay the services. It holds no audio and no transcript.

Cloudflare handles your IP address for our relay, uses it to limit abuse, and keeps it in request logs for 7 days. Our sign-in service, Supabase, records the IP address and browser of each sign-in in its own logs. We store it nowhere else.

Other things to know:

Your custom vocabulary rides in the request to the speech service, so those words appear in our request logs for 7 days. Keep names and emails out of your vocabulary if that matters to you.
An error report may carry a meeting’s title (which Vord writes from the transcript), never audio or transcript text. Turn crash reports off in Settings › General › Privacy.
The audio of a dictation that failed and shows “Retry last take” stays in the app’s memory for 10 minutes, then is dropped.
Vord writes a technical log on your Mac (events and timings, no audio or transcript text). The Support button can attach it to an email you send; nothing sends it by itself.

Your account

When you sign in with Google or Apple we receive your email, your name and the provider’s id for you. We store them with your plan, the Macs you signed in on (each Mac’s name as set in System Settings, and a fingerprint of the secret it holds), and your use. We keep a one-way fingerprint of your sign-in identity so one person gets one free trial. There is no password.

Your plan and payment history live at Polar. Vord shows them; it does not store your card. Polar’s checkout and billing pages are Polar’s and follow Polar’s privacy policy.

We email you only about your account: receipts and billing from Polar; from us, notices such as a deletion hold or a price change. No marketing email.

What we do not do

No recordings or transcripts saved on our servers.
No selling or sharing of your data for advertising. No ads.
No training on your data. We never train models on it, and the services we use do not either, under the terms and opt-outs described above.
No reading of the contents of your screen beyond what the short version lists: the front app’s name and window title, your browsers’ window titles while meeting detection is on, the password-field check, and the text you select. The system-audio permission is used for sound only.
No cookies of our own and no analytics on the website.
No tracking in the app beyond the usage counts you can turn off and the records that count your plan.

What you control

Clean up dictation output (Settings › Dictation): off by default. Off means no dictation is sent to OpenAI on its own; the Clean up button on a dictation in Recent still sends that one when you click it.
Improve the transcript after each meeting (Settings › Meetings): off means no automatic upload to AssemblyAI; the Polish button still uploads a meeting when you click it.
Generate AI summary after meeting (Settings › Meetings): off means no meeting transcript goes to OpenAI unless you ask for a summary or a translation.
Send crash reports and Send anonymous usage data (Settings › General › Privacy). Turning usage data off does not stop the records that count your plan’s use.
Delete All Meetings & Dictation History… (Settings › General › Your Data): removes recordings, transcripts, summaries, dictation history and stats from this Mac. It does not delete exported files, Time Machine backups, or copies synced to iCloud or another Mac.
Delete account… (Settings › Account › Your plan): every Mac is signed out, your subscription is cancelled (no further charges; nothing is refunded by itself, the 14-day refund rule in the terms still applies), and the account is deleted after 7 days. Sign in within the 7 days to keep the account; write to [email protected] to restart a cancelled plan.

Deleting your account: what remains

After the 7 days we delete your sign-in record, your account, its Macs, sessions and plan. We keep: the accounting records of payments and use, for as long as tax and accounting law requires, under an id that no longer points to your name or email (pseudonymous, not anonymous); the one-way fingerprint of your sign-in identity, for as long as we offer a free trial, so a new account cannot start a second one; a record of the account’s actions, kept with the accounting records; the sign-in service’s own logs of past sign-ins, under its policy; an entry on our friends list, if you were on it, until we remove it; and logs and backups until they expire (7 days; crash reports up to 90). Polar removes your name and email from its customer record and keeps the orders under its own retention rules. Recordings on your Macs are untouched.

How long we keep things

What	How long
audio and text sent for processing	not kept by us; the services as in the table above
relay request logs	7 days
usage and payment records	as long as tax and accounting law requires; pseudonymous once the account is deleted
database backups	7 days
crash reports	up to 90 days
usage counts	under TelemetryDeck’s policy

Security

Everything travels over TLS. The services’ keys never leave our servers; the app holds its own per-Mac secret and your sign-in session. Our relay handles audio and text only while passing them on and does not save them. The database is in the United States. No system is perfectly secure; if something goes wrong we tell the people affected.

Your rights

Write to [email protected] to see, correct or delete what we hold about you, to get a copy of it, or to object to a use based on our legitimate interest. Someone may ask on your behalf; we may check who is asking. If you are in the EU, the UK or Switzerland: we process your data to provide the service you asked for (contract) and to run and protect it (legitimate interest); you may complain to your data protection authority; the services above process data in the United States, and we tell you on request which safeguard each transfer relies on. If you are in California: we do not sell personal information or share it for advertising, we do not track you across other sites, the website does not respond to Do Not Track signals, and the rights the CCPA gives you are exercised by the same email.

Children

Vord is for adults. You must be 18 or older to create an account. If you believe someone under 18 has created an account, write to [email protected] and we delete it.

If Vord changes hands, or the authorities ask

If another company takes over Vord, your account data moves to it under this policy, and we tell you by email. We give data to authorities only when the law requires it; we hold no recordings or transcripts to give. We answer requests about your data within 30 days.

Changes

We will post changes here with a new date and link to previous versions. For a change that reduces your rights we give 30 days’ notice by email. Changes never apply backwards.

Contact

[email protected]. Dotcom Services Inc., doing business as Vord, Los Angeles, California.