Privacy policy

1. Who processes data and how to contact us

Vocloner operates a web platform for voice cloning, text-to-speech, and dialogue. The contact for privacy, deletion, access, reports, and provider questions is support@vocloner.org. The legal entity, registered address, and local representative should be completed according to the entity operating the service and the applicable jurisdiction.

This Policy applies to the site, application, accounts, checkout, abuse forms, communications, and features that link to it. A feature may show a specific notice when it processes data differently.

2. Information we collect

Account and authentication data: email address, display name, avatar when you choose a social provider, language, country, technical account identifiers, access dates, and account status. We do not store a third-party provider password; authentication is handled by the relevant system.

Content you submit: reference recordings, consent or evidence audio, text, scripts, emotion tags, voice names, categories, public or private voices, settings, and generated audio. Each item is handled according to the visibility and feature you select.

Consent and security data: the exact consent text and version, verification challenge, timestamp, IP address, technical review results, moderation status, reports, evidence, and audit records. These data help investigate authorization, fraud, and abuse.

Usage and device data: characters consumed, generations, quotas, product events, errors, browser, operating system, device, language, IP address, user agent, referrer URL, and data needed for sessions, security, rate limits, and fraud prevention. Some analytics tools may receive pseudonymous events when enabled.

Payments and subscriptions: provider, transaction and subscription identifiers, plan, amount, currency, renewal and cancellation dates, and status. The payment provider processes full card data and may send billing or verification details, but Vocloner does not store a full card number or security code.

3. Voice data and consent

A recording can identify a person through its content or characteristics. Depending on applicable law, a voice model, reference recording, or consent evidence may be biometric or sensitive data. Do not upload a third party’s voice without a sufficient legal basis and authorization.

We use reference recordings and related data to create or recover the model you requested, generate audio, validate consent flows, handle reports, maintain security, and comply with law. We do not sell recordings, models, or voice profiles for advertising.

A consent statement is not universal identity verification and does not guarantee that a person is who they claim to be. We may use transcription, speaker comparison, and human review as supporting signals, but an automated score is not the sole reason to remove an account or approve a report.

4. Purposes and legal bases

Contract performance: create your account, run clones, generate audio, apply quotas, save projects, manage voices, activate plans, process cancellations, and provide support.

Consent and authorization: record acceptance of the consent text, verify that you understood the conditions, publish a voice when authorized, and process evidence submitted for a report or review.

Legitimate interests and security: prevent fraud, abuse, impersonation, quota evasion, unauthorized access, attacks, spam, and illegal use; investigate incidents; moderate content; protect people; and maintain service integrity. We balance these interests against your rights and apply minimization.

Legal obligation and defense: comply with valid orders and requests, retain accounting records, resolve disputes, detect unauthorized payments, and establish or defend legal claims. If a purpose relies on consent, you can withdraw it, although withdrawal does not make prior processing unlawful or always allow continued use of the feature.

5. Providers and recipients

Supabase provides authentication, database, and private storage. Vercel hosts and runs the application. The voice synthesis and processing provider receives files, text, or identifiers needed to perform the requested operation and may retain data under its own contract or policy.

Audio Lab noise reduction and voice/music separation may temporarily send the selected file to an external processing provider. The integration remains disabled until its terms and privacy practices are reviewed; when enabled, it will be used only to complete the requested operation, returned technical tokens will be discarded, and Vocloner will store only the private output according to the retention shown by the product.

Payments are processed by Creem for new subscriptions; Mercado Pago is retained for earlier transactions. We receive signed payment, subscription, and webhook confirmations, not full card details. Cloudflare may provide captcha and security controls; PostHog or another analytics tool may receive usage events when enabled.

We may use transactional email, evidence storage, monitoring, support, professional advisers, and anti-fraud services. Each provider receives only what is needed, subject to instructions, confidentiality, and reasonable security measures, unless it acts as an independent controller under law.

6. International transfers

Vocloner and its providers may operate in countries other than yours. When transferring data internationally, we seek to use recognized mechanisms under applicable law, contractual clauses, adequacy decisions, valid consent, or another permitted basis. Specific safeguards may depend on the provider and your country.

We cannot promise that every country offers the same level of protection. You may ask for provider and safeguard information at support@vocloner.org, subject to security, trade-secret, and other-person privacy limits.

7. Visibility, publication, and sharing

Private voices, reference recordings, consent audio, and evidence stay outside public pages and are served through access controls or short-lived signed links when the feature requires them. Authorized staff and providers may access them only when needed to operate, support, review abuse, or comply with law.

A public voice, its name, category, sample, and selected metadata may be visible to other users. Publication requires additional consent. If you report a public voice, we may hide it and remove its sample from the catalogue during review.

Do not publish names, images, text, or audio revealing health, orientation, beliefs, location, minors, or other sensitive information unless you have a sufficient legal basis. A public setting does not replace consent from people who appear or speak.

8. Retention and deletion

We retain data while needed to provide the service, maintain the account, perform the contract, prevent abuse, resolve disputes, and comply with law. Source recordings and models are deleted when the feature permits, when you delete the voice or account, or when no longer needed, subject to processing queues, backups, and legal retention.

Payment records, invoices, security events, consent records, and reports may be retained for the period required or needed to prove a transaction, investigate a claim, or protect another person. At the end of that period they are deleted, anonymized, or securely aggregated.

Deletion may take time to propagate to backups and providers. During that period we restrict use and do not reuse the material for new functions. We may keep a minimal suppression record, such as an identifier, to prevent deleted content from reappearing by mistake.

9. Your rights and how to exercise them

Depending on your jurisdiction, you may request access, a copy, correction, portability, deletion, restriction, objection, withdrawal of consent, or information about an automated decision. You may also complain to your applicable data-protection authority and, where the law provides, appeal a denial.

Write from your account email to support@vocloner.org and state the right you are exercising and the data involved. We may request reasonable identity verification to avoid giving data to an impersonator and may limit a request that risks another person, reveals secrets, or is prohibited by law. You may act through an authorized agent with a valid power of attorney or signed permission plus verification of your identity.

We honor Global Privacy Control as a rejection of optional purposes and as a request not to sell or share identifiers for behavioral advertising where enforceable. We do not sell recordings, models, or voice profiles for advertising. We will try to respond within the applicable legal deadline. If we cannot fulfill everything, we will explain the limited part and why. Account deletion does not necessarily remove records we must retain for taxes, fraud prevention, security, or legal defense.

10. Cookies and similar technologies

We use cookies and local storage strictly needed for sessions, language preferences, security, CSRF protection, authentication, and checkout operation. Optional PostHog measurement, including masked session replay, only loads after you accept analytics in the banner. Without opt-in, no analytics identifiers are set. Full detail, including duration and controls, is in the Cookie Policy (/cookies).

You can accept or reject analytics in the banner, change your choice by clearing site storage or emailing support@vocloner.org, and block or delete cookies in your browser. Some features may stop working or require authentication again if you block necessary cookies.

11. Security

We use access controls, separation between public and private data, signed links, file validation, rate limits, protected routes, encryption for provider credentials, audit records, and abuse review. Secret keys must not be exposed to browsers, and payment providers receive card data directly.

No system is completely secure. If you find a vulnerability, contact support@vocloner.org without accessing accounts, downloading data, destroying evidence, or publicly disclosing the issue before giving us a reasonable opportunity to fix it.

12. Children and third-party voices

Vocloner is not designed for minors to create voice models or for users to upload children’s voices. Do not upload another person’s voice unless you have sufficient, verifiable authorization. If you believe a minor or vulnerable person was recorded or cloned without permission, report it immediately at /report.

If we learn that we collected a child’s data without a valid basis, we will try to delete it and restrict the account as required by applicable law.

13. Reports, requests, and disclosure

A report may include an email, details, a voice identifier, IP address, and evidence audio. We keep that information private for investigation. We may tell the reporter the general status without disclosing the reported user’s personal data, confidential material, or anti-fraud signals.

We may disclose information when needed to comply with a valid order, protect a person’s life or safety, investigate fraud, respond to a payment dispute, enforce our Terms, or protect rights and property. We will try to limit disclosure to what is necessary.

14. Changes to this Policy

We may update this Policy because of legal, technical, provider, or product changes. We will publish the new version and update the date. If consent is required, we will request it; if an essential operation is affected, we may notify you by email or in the application.

The current version explains current processing. Older versions may be retained when needed to show what information was communicated at a particular time.

15. Privacy contact

For questions, rights requests, security incidents, data deletion, or provider information, email support@vocloner.org from the email associated with your account. Do not include passwords, another person’s full consent phrase, or full card numbers.

This Policy describes Vocloner’s current operation and should be completed with the legal entity, address, privacy representative, and local mechanisms required before adopting a final jurisdiction-specific notice.