# Nik Voice Cloud Privacy Policy & PIPEDA Compliance **Last Updated:** October 2026 **Governing Jurisdiction:** Canada (Federal PIPEDA & Provincial Privacy Statutes) ### 1. Architectural Privacy Commitment: Zero Persistent Audio Retention Nik Voice Cloud is engineered under the principle of **Zero Local Data Retention (ZLDR)**: - Incoming voice and audio files submitted to our endpoints ('/v1/audio/transcriptions') are processed strictly as ephemeral in-memory streams ('io.Pipe'). - **No audio payload is ever saved, cached, or written to persistent disk storage** on Nik Voice Cloud servers. - As soon as the speech recognition inference cycle completes, the stream buffers are released and cleared from memory immediately. ### 2. PIPEDA 10 Fair Information Principles Compliance In full adherence to the Canadian *Personal Information Protection and Electronic Documents Act* (PIPEDA): 1. **Accountability:** Nik Neural AI Inc. maintains strict architectural separation and cryptographic domain isolation. 2. **Identifying Purposes:** Voice streams are processed exclusively for real-time speech-to-text conversion requested by your authenticated WordPress site. 3. **Consent:** Voice submissions originate through explicit user recording actions in the WordPress plugin with visible status indicators. 4. **Limiting Collection:** Only the audio stream and metadata necessary for authentication (timestamp, domain, HMAC signature) are collected. 5. **Limiting Use, Disclosure, and Retention:** No audio data is retained after the transcription response is delivered to the client. Audio is never used to train public machine learning models. 6. **Accuracy:** Transcriptions are delivered verbatim as generated by Groq Whisper-Large-v3. 7. **Safeguards:** Transport Layer Security (TLS 1.3), HMAC-SHA256 anti-replay validation, and Argon2id password hashing protect all administrative and API channels. 8. **Openness:** This document transparently outlines all data flows and architectural retention policies. 9. **Individual Access:** WordPress site owners have full control over their account data and API keys via the Nik Voice Cloud Dashboard. 10. **Challenging Compliance:** Questions or inquiries regarding PIPEDA compliance may be addressed directly to our Canadian Privacy Officer at **privacy@nikneural.ca**. ### 3. Account & Telemetry Data We store only: - Account identification (admin email, Argon2id password hash). - Domain binding metadata (authorized WordPress site URL and issued API key identifier). - Aggregated usage counters (request timestamps, audio duration in seconds, status code) solely for quota tracking and billing.