What this page adds
The privacy policy explains what the site and app do with data. This page is the reference for retention, deletion and processors. If they ever disagree, the stricter rule applies.
What we hold, and for how long
| Data | Why | Kept |
|---|---|---|
| Local app audio, voices, transcripts | Not received by us | On your device only |
| Pro account profile: email, name, avatar, language | Sign-in and your account | Until account deletion, when the user record is anonymised |
| Sign-in events and session IP address, country and browser | Security | 90 days |
| Device records: hashed installation ID, device name, platform, app and OS version, last IP address and country, last seen | Licensing and your device list | IP address and country are replaced at each licence check. Records are kept after a device is released and after account deletion |
| Trial record: account, dates, hashed installation ID and device key | One trial per account and device | Indefinitely, including after account deletion |
| App Store and Google Play purchase records | Verifying purchases, refunds | Indefinitely, including after account deletion |
| Settings sync data, when you turn sync on | Keeping your devices in step | Until you remove it from the cloud or delete your account. Deletion markers are kept for 180 days |
| Pro usage analytics: allowlisted events, random installation ID, hashed account ID | Product improvement and diagnostics | To be published before payments go live. |
| Phone content reports | Reviewing reported output | 180 days |
| Text-to-speech preview text | Synthesising the preview | Not stored |
| Early-access and enquiry forms | Receipt, one launch notice, reply | At most two years, then deleted |
| Order record: email, plan, seats, country (for India, state and optional GSTIN), amounts, coupon code, payment provider and reference, payment status including failed attempts and the provider's failure reason, IP address and the country it resolves to (we send only the IP address to an IP-geolocation service to determine it), browser user agent | Fraud prevention and abuse limits, licence verification, order support, refunds, tax and invoicing records, investigating payment problems | Indefinitely, including the IP address, its country, and browser; seen only by VoiceStudio platform administrators, and every view is logged |
| Card or bank details | Paying | Never received by us |
| Abuse-limit digests | Blocking automated abuse | Expire within an hour; one-way, not raw IP |
| Backups of the above | Recovery | Up to 35 days after live deletion |
Who processes it
- Cloudflare delivers the site and processes request metadata.
- Our payment provider and the payment processors it works with handle your payment under their own notices. They may process it outside your country.
- An IP-geolocation service receives only the IP address of a checkout request and returns the country it is in.
- Email and notification providers receive only the fields needed to send a receipt or reply.
- GitHub serves downloads and release metadata.
- Apple and Google handle purchases made through their stores.
- Cloudflare R2 stores and serves app installers.
Your choices
You can request account deletion yourself in the dashboard, which you can open from Settings → Account in VoiceStudio Pro. You can ask to see, correct, export, or delete what we hold, or withdraw consent, by writing to privacy@voicestudio.sh from the address concerned. We verify the request, act on it, and confirm.
Deletion clears contact fields and cancels pending deliveries. Order records, including the IP address and browser recorded at checkout, are kept indefinitely, as the table above says. We also keep a one-way suppression digest so a deleted address is not silently re-added.
Security
Traffic uses HTTPS. Payment details go to the provider's hosted checkout and never touch our systems. Secrets are kept server-side, access is limited to maintainers who need it, and personal data is kept out of application logs. If a breach affects your data we notify you and the authorities as the law requires.
Children
The website and purchases are not for children under 18. We do not knowingly collect their data; if we learn we have, we delete it.
Complaints
Grievance officer: To be published before payments go live., privacy@voicestudio.sh. Details of the escalation path are on the contact page.