Data processing (DPA)

1. Subject matter and roles

Vocloner provides voice cloning, text-to-speech, and multi-voice dialogue. The customer (controller) decides which recordings, texts, and voices to upload; Vocloner (processor) handles them only to provide the requested service, keep it secure, prevent abuse, and comply with law, following the customer’s documented instructions as expressed in product settings and these Terms.

We do not process data for incompatible own purposes: we do not sell recordings, models, or voice profiles for advertising, nor train general models on customer content without a lawful basis. Optional PostHog measurement only runs with visitor consent.

2. Data and data subjects

Categories: account data (email, display name, language, country), submitted content (reference recordings, consent audio, texts, scripts, voice names), consent and security data (accepted text version, timestamp, IP, verification challenge, moderation status), usage and device data (quotas, events, errors, browser, IP), and limited billing data (provider, transaction identifiers, plan, amount, currency). Vocloner does not store full card numbers.

Subjects: customer users, voice rights holders, and reporters where relevant. The customer represents it holds a sufficient legal basis and authorization for every third-party voice, including where a voice may count as biometric or sensitive data.

3. Current subprocessors

Supabase (authentication, database, private storage). Vercel (hosting and execution). Fish Audio / voice synthesis and processing provider (receives files, text, or identifiers needed for the operation and may retain data under its contract). Creem (new subscriptions) and Mercado Pago (earlier transactions). Cloudflare Turnstile (human verification and security). PostHog (optional measurement, consent-gated, via our own /ingest proxy). Transactional email, monitoring, and support as configured.

We may add or replace subprocessors for technical or legal reasons. We will publish the updated list on this page with the date above and, for material changes, notify in-app or by email before it affects processing. Customers may object on reasonable grounds at support@vocloner.org; if no alternative is available, they may cancel under the Terms.

4. Security and confidentiality

We apply role-based access, separation between public and private data, short-lived signed links, file validation, rate limits, AES-256-GCM encryption for provider credentials, audit records, and abuse review. Staff and subprocessors access data only as needed and under confidentiality duties.

No system is completely secure. Customers who find a vulnerability should report it to support@vocloner.org without exploiting it or exposing third-party data, to allow timely remediation.

5. International transfers

Vocloner and subprocessors may operate outside the customer’s country. Where applicable law requires, transfers rely on adequacy decisions, standard contractual clauses, valid consent, or another permitted basis. On request we share applicable safeguards per subprocessor, subject to security and secrecy limits.

6. Breaches and cooperation

For a security breach affecting customer data, we will notify the account contact without undue delay with the nature, approximate categories, likely consequences, and measures taken, so the customer can meet its own duties (including 72-hour authority notification where the GDPR applies).

We reasonably assist with impact assessments, prior consultation, rights requests, and valid orders, with minimum necessary access and preserving other customers’ confidentiality.

7. Rights, retention, and return

Customers can manage voices, audio, and accounts in-product. At termination, data is deleted or anonymized under the Privacy Policy, with indicative periods: operational content until user deletion or 30 days after account closure; security and consent records 12 to 24 months; billing and accounting records for the legally required term (commonly 5 to 10 years by jurisdiction); backups with delayed propagation and restricted use.

We may keep a minimal suppression record and records needed for security, fraud prevention, claim defense, and legal compliance. Consumed quotas are not money: technical restoration for service failures is governed by the Cancellation and Refund Policy.

8. Audit and liability

Once a year, with 30 days’ notice and bounded scope, customers may request a security questionnaire or available report. On-site audits only where required by law and under confidentiality, cost, and scheduling agreement.

Liability under this addendum follows the Terms cap (twelve months before the event, or the legal minimum if higher) and does not exclude willful misconduct, fraud, or non-waivable rights. Nothing here limits consumer rights or mandatory data-protection duties.

9. How to request a signed DPA and contact

For a signed version with full legal identity, address, and representative, paying customers may email support@vocloner.org with company name, country, privacy contact, and estimated volume. We will reply with the applicable text and signing flow.

Legal identity, address, jurisdiction, and market-specific mandatory periods must be completed per operating entity and reviewed by counsel before publishing a final version for any market. This addendum is not legal advice.