Privacy

Privacy

Last updated: 15 October 2026

This page explains which personal data AyP Sound uses, why, and what you can do about it. If anything is unclear, email [email protected].

1. Who we are

AyP Sound is an AI voice and transcreation studio in the Netherlands, run by Juan Pablo Thummler. AyP Sound decides how your data is used. In privacy law that makes us the "controller".

Business register (KvK)

84305371

VAT number

NL003945021B85

Email

[email protected]

Postal address

Sent on request. It is also listed in the Dutch business register under the KvK number above.

Juan handles every privacy question himself. Write to the email address above.

2. If we emailed you about our services

We contact businesses whose work involves voice, video or translation: agencies, brands, game studios, production companies, publishers and other organisations.

What we keep

• Company name, website, country and sector.
• The business email address we wrote to. Usually a general one, like info@.
• The names, job titles and, where published, work email addresses of people your company lists in public as its leaders or contacts, and links to their public professional profiles (for example on LinkedIn). Sometimes that is more than one person per company.
• A short note on why our work might fit yours, for example who in the company handles voice or translation work.
• When we emailed, whether you replied, and your reply.
• If you asked us to stop, or our email bounced: the address, the date and how it happened, so we never email that address again.

Where we got it

From public business sources: your company's website and news, public business directories, company pages and people's public profiles on professional networks (for example LinkedIn), and trade press. We don't buy email lists.

Why, and on what legal basis

To offer our services to businesses. The legal basis is our legitimate interest in business-to-business marketing (GDPR, Article 6(1)(f)). We weighed that interest against yours. This is how we keep it fair:

• We only use business addresses that a company publishes for contact.
• We follow the email rules of the Netherlands and of the country you are in. Where those rules require consent first, we don't email.
• Short emails, and few of them: at most three, unless you reply.
• No sensitive data. No profiles beyond "could our work be useful to this company".

Your right to object

You can object at any time, for free. Reply "stop", use the unsubscribe link in the email, or write to [email protected]. We stop right away. We keep only your address, your company's name, the date and how you asked on a do-not-contact list, so you don't hear from us again. If the request comes from a general address like info@, we block your company's whole email domain.

3. Open and click counting in our emails

Emails we send to general company addresses (like info@ or hello@) can contain two things:

• A tiny invisible image. When an email app loads it, our server notes that the email was opened.
• Links that pass through aypsound.com before they open the page. That way we see a click.

We don't use either in emails to a named person's address, or to a business we know is run by one person. Those emails contain plain links only.

What is recorded: a random code for that one email, the time, and a rough type of device or app (for example "Apple Mail" or "Gmail image proxy"). Our code does not store IP addresses and sets no cookies. Cloudflare, our web host, handles the request briefly to deliver it.

Where and how long: the events are stored with Cloudflare (Workers KV) and deleted there after 90 days. Our own records keep, for that email, when it was opened or clicked (the last 20 times at most) and the rough type of app.

Why: to see whether our emails arrive and are useful, and to know when a follow-up makes sense. Opens are unreliable, because some email apps load images by themselves. We never base anything important on them.

How to block it: turn off automatic image loading in your email app, or tell us and we'll switch counting off for your address.

Every email also has its own unsubscribe link. It carries a code so that only you can unsubscribe that address. When you use it, Cloudflare stores that code and the time for 90 days, so our records can pick it up. Your entry on our do-not-contact list stays after that (see section 7).

4. Website visitors and cookies

Hosting

Cloudflare delivers this website. To do that and to protect the site against attacks, Cloudflare processes your IP address and basic request data. Cloudflare may set a short-lived security cookie to tell people from bots. That cookie is strictly necessary, so it needs no consent.

Our fonts and videos come from our own site. We don't load Google Fonts, YouTube, social media buttons or ad trackers.

Visit statistics, without cookies

Cloudflare counts visits to this site for us with Cloudflare Web Analytics. A small script notes which page was viewed, how fast it loaded, which site sent you, and your browser, device type and country. It sets no cookies, stores nothing on your device, and doesn't recognise you on a later visit or on other sites. We only see totals. At the moment Cloudflare doesn't run it for visitors in the European Union.

The legal basis is our legitimate interest in knowing how the site is used and keeping it fast (GDPR, Article 6(1)(f)). There is no cookie banner, because there are no tracking cookies to ask about.

What your browser keeps

The site remembers one thing in your browser's local storage: the film player's volume, and whether you muted it. It stays in your browser and is never sent to us or anyone else.

If you book a call

The "Book a call" buttons open our booking page on Calendly (calendly.com/aypsound). When you book, Calendly collects your name, your email address, the time you pick, any guests you add and anything you type in the form. It adds the booking to our calendar. We use these details to prepare for the call, hold it and follow up. The legal basis is the steps you ask for before a possible agreement (GDPR, Article 6(1)(b)). Calendly's own pages and their cookies fall under Calendly's privacy notice.

If you email us

We use your message and address to answer you. If you send a script for a free sample, we use it only to make that sample, with the same tools as client work (see the next section). If it leads to work together, the next section applies too.

5. Clients and voice work

What we use

• Contact and billing details.
• Briefs, scripts, footage, audio, feedback and emails about the project.
• Voice recordings and voice models, if a project uses a real person's voice.
• Invoices and payment records.

The legal basis is our contract with you (GDPR, Article 6(1)(b)). For invoices it is a legal duty: Dutch tax law makes us keep them for seven years.

Real people's voices

A voice recording, and a voice model made from it, is personal data. We treat it with the care the law asks for biometric data:

• For client projects, we only clone a voice with written consent from the person it belongs to. That consent says what the voice may be used for.
• We use the voice only for what the consent covers. We never use it for another client.
• When the consent ends or is withdrawn, we stop making new work with that voice and delete the model and recordings, unless the agreement with the voice owner says otherwise.

When we handle personal data on a client's behalf, for example recordings of their staff, we act as that client's processor. We sign a data processing agreement on request.

AI voice generation

We make AI voices with ElevenLabs. To produce the audio, scripts and voice material for a project go to ElevenLabs. ElevenLabs has confirmed in writing that the audio we upload is not used to train their models.

To translate and adapt scripts, we use Claude, an AI assistant by Anthropic.

6. Who else handles data

We don't sell or rent data to anyone. These providers handle data for us, each for the task listed:

We keep our contact records and project files on our own computers in the Netherlands. Our own work app also notifies us when someone replies, with the company name only.

Some of these providers are based in the United States. Where data leaves the European Economic Area, it is protected by the EU-US Data Privacy Framework (for certified companies) or by the European Commission's standard contractual clauses.

We may also share data when the law requires it.

7. How long we keep data

8. Your rights

You can ask us to:

• show you the data we have about you, and give you a copy;
• correct it;
• delete it;
• limit what we do with it;
• stop using it for marketing. That is absolute: we always stop.

You can also object to other uses based on our legitimate interest, and withdraw any consent you gave. That doesn't undo what happened before.

Email [email protected]. It's free, and we answer within one month. We may ask you to confirm the request comes from you.

We don't make automated decisions about you that have legal or similar effects.

Not happy with how we handle your data? Tell us first, so we can fix it. You can also complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens, or to the authority in your own country.

9. Security

The site and our email use encrypted connections. Data sits on password-protected devices and accounts. Only Juan has access to them. If a data breach ever puts your data at risk, we tell you and the authority as the law requires.

10. Changes to this page

When our way of working changes, we update this page and the date at the top. If a change matters to clients, we also tell them by email.