Privacy notice.
What this website collects, why, and what you can ask us to do with it. Last updated 11 November 2026.
This notice covers the ECHO website. The ECHO contributor app will have its own notice, shown before anyone records anything, explaining how voice recordings are collected, licensed and paid for.
What we collect
- Contributor waitlist: first name, email, country of residence, languages you speak and your phone type.
- Enterprise inquiries: name, work email, organisation, role (optional), use case, languages, timeline and your message.
- Contact messages: name, email, topic and your message.
- Security data: a keyed, one-way hash of your IP address, used to limit abusive submissions, and your browser’s user-agent string stored with the submission.
Why we use it
To reply to you, to invite you to the contributor app when it opens in your region, and to protect our forms from spam. We rely on your consent for the waitlist and inquiries, and on our legitimate interest in keeping the site secure. We do not sell personal information or use it for advertising.
Cookies and analytics
This site sets no cookies by default. If we enable privacy-friendly analytics, it will be cookieless, or we will ask for your consent first. Your choice is remembered in your browser’s local storage.
How long we keep it
Waitlist details are kept until you join the app or ask us to remove them, and for no more than 24 months after we last contacted you. Inquiries and messages are kept as long as needed to deal with them and for our records. Security hashes used for rate limiting are deleted within 24 hours.
Who else processes it
Our hosting and infrastructure providers process this data on our behalf under contract. If you are outside the country where data is hosted, it may be transferred there with appropriate safeguards.
Your rights
You can ask to access, correct, export or delete your information, or withdraw consent at any time. Use the contact form and choose “Privacy or data request”. You may also complain to your local data protection authority.