Privacy Policy

Last updated: October 20, 2026

This Privacy Policy explains how we collect, use, disclose, and protect information when you use the SecretVoice text-to-speech platform, including our website, our application programming interfaces (the "API"), and related services (collectively, the "Service"). It also explains the choices you have regarding your information.

1.Information We Collect

We collect information in three ways: information you provide, information we generate to operate the Service, and information collected automatically through your use of the Service.

• Account information. When you create an account, we collect your email address, a password (stored securely in hashed form), your name if you provide it, your chosen language and preferences, and the API keys assigned to your account.
• Billing information. When you purchase credits or a plan, our payment processor collects your name, billing address, and payment method details (such as card number or payment service token). We receive limited confirmation data from the processor — such as the last four digits, expiry, and whether a payment succeeded — but we do not store full payment card numbers on our servers.
• Content you submit. The text, scripts, prompts, and other material you send to the API ("Content"), and the audio and related output the Service generates ("Output"). This may include information you choose to include in the text, such as names, descriptions, or other details you provide.
• Technical and usage data. When you use the Service, we automatically collect: your IP address; the type of device, browser, and operating system; pages and endpoints accessed; timestamps; request identifiers; error logs; and metadata about API usage such as volume, voice used, language, duration, and response times. This information helps us operate, secure, and improve the Service.
• Communications. If you contact us for support, we collect the contents of your messages and any information you choose to share with us.
• Cookies and similar technologies. We use cookies, local storage, and similar technologies to keep you signed in, remember preferences, and understand how the Service is used. See Section 10 below.

2.How We Use Your Information

We use the information we collect for the following purposes:

• To provide and operate the Service — creating and managing accounts, authenticating you, processing API requests, generating audio Output, delivering results, and providing customer support;
• To bill and manage accounts — processing payments, tracking credits and usage, sending invoices and receipts, and managing renewals and refunds;
• To maintain security and integrity — detecting, investigating, and preventing fraud, abuse, unauthorized access, and violations of our Terms of Service or applicable law;
• To comply with legal obligations — responding to lawful requests, enforcing our rights, and meeting regulatory requirements;
• To improve the Service — analyzing usage patterns, diagnosing errors, and developing features, generally on an aggregated or anonymized basis;
• To communicate with you — sending service notices, security alerts, billing messages, and, where you have opted in, product updates.

We do not sell your personal information, and we do not use your Content to train or improve models for third parties, or to advertise to you.

3.Legal Bases for Processing (GDPR)

If you are located in the European Economic Area, the United Kingdom, or Switzerland, our legal bases for processing your personal data are:

• Performance of a contract — processing needed to provide the Service you requested, including account management, authentication, and generating Output;
• Legitimate interests — operating and securing the Service, preventing fraud and abuse, improving our products, and enforcing our Terms, balanced against your interests and rights;
• Legal obligation — processing required to comply with applicable law, such as tax and accounting obligations or lawful requests;
• Consent — where we rely on consent, for example for optional marketing communications or certain cookies, you may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

4.Sharing and Disclosure

We share information only in the circumstances described below, and only to the extent necessary:

• Service providers. We engage trusted third parties to help run the Service, including: cloud infrastructure and hosting providers; content delivery networks; object storage and CDN providers used to store and serve audio; payment processors; analytics providers; and providers of machine-learning inference used to generate speech. These providers process data on our behalf, under contractual obligations of confidentiality and security, and only as needed to perform their functions.
• Legal and regulatory authorities. We may disclose information where we believe in good faith that disclosure is required by law, regulation, legal process, or governmental request, or where necessary to protect our rights, the safety of any person, or the public interest — for example, in connection with reports of illegal content or suspected unlawful activity.
• Business transfers. If we are involved in a merger, acquisition, reorganization, bankruptcy, or sale of all or part of our assets, your information may be transferred as part of that transaction, subject to commitments that it will be treated consistently with this Policy.
• With your consent. We share information when you direct us to do so.
• Aggregated or anonymized data. We may share aggregate, de-identified, or anonymized information that cannot reasonably be used to identify you, for analytics, benchmarking, or product development.

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes.

5.Data Retention

We retain information only as long as necessary for the purposes described in this Policy, or as required by law. Specific retention practices include:

• Account information — retained for as long as your account is active, plus a reasonable period afterward to comply with legal and accounting obligations;
• Content and Output — retained as needed to provide the Service, deliver results, and address support or quality issues. Content and Output tied to your account are deleted or anonymized within a reasonable time after you delete them, or within a reasonable time after your account is closed, except where retention is required by law or our security obligations;
• Usage and technical logs — retained for limited periods (typically no more than a few months, and often less) for security, diagnostics, and billing reconciliation;
• Payment records — retained for the period required by tax and accounting law, typically several years.

When we no longer need information, we delete it or render it anonymous in a manner designed to prevent identification.

6.Data Security

We take reasonable and appropriate technical and organizational measures to protect your information, including: encryption of data in transit (TLS/HTTPS); encryption of data at rest; access controls and least-privilege principles for our personnel; logging and monitoring of the Service; and secure handling of credentials, API keys, and secrets. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for protecting your own credentials and for the security of the devices and networks through which you access the Service.

7.Your Rights and Choices

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Access — to request a copy of the personal information we hold about you;
• Correction — to ask us to correct inaccurate or incomplete information;
• Deletion — to ask us to delete your personal information, subject to legal retention requirements;
• Portability — to request a machine-readable copy of personal information you provided, in certain circumstances;
• Restriction or objection — to ask us to restrict or stop processing in certain circumstances, including for direct marketing;
• Withdrawal of consent — where processing is based on consent, to withdraw it at any time;
• Not to be discriminated against — for exercising your privacy rights;
• Complaints — to lodge a complaint with a supervisory authority (in the EEA/UK/Switzerland) or other regulator in your jurisdiction.

To exercise any of these rights, contact us at support@secretvoice.dev. We will respond within the timeframe required by applicable law (generally 30 days, extendable in some circumstances). We may need to verify your identity before acting on a request, and we may decline requests that are manifestly unfounded, excessive, or where we are legally required to retain the information. You may also close your account or delete your API keys at any time from your account settings.

8.International Data Transfers

We operate globally, and information we collect may be stored and processed in countries other than the one in which you reside, including through our cloud infrastructure and service providers. Where personal data is transferred from the EEA, the United Kingdom, or Switzerland to a country outside those regions, we rely on appropriate safeguards, including Standard Contractual Clauses or equivalent mechanisms, to ensure an adequate level of protection. By using the Service, you acknowledge that your information may be transferred and processed in this manner.

9.Children's Privacy

The Service is not directed to children, and we do not knowingly collect personal information from anyone under the age of 18. If you are under 18, you may not create an account or use the Service. If we learn that we have collected personal information from a person under 18, we will take reasonable steps to delete it promptly. If you believe we have collected information from a minor, please contact us at support@secretvoice.dev.

10.Cookies and Similar Technologies

We use cookies and similar technologies to: keep you signed in to your account; remember preferences and settings; protect against abuse and fraud; and understand how visitors use the Service so we can improve it. The categories we use include:

• Strictly necessary cookies — required for authentication and core functionality;
• Functional cookies — to remember your preferences;
• Analytics cookies — to measure usage and performance, where used;
• Security cookies — to detect and prevent fraud and abuse.

You can control or delete cookies through your browser settings, but disabling certain cookies may affect the functionality of the Service. We currently do not process or respond to browser "Do Not Track" signals, but we provide the controls described in this Section and Section 7.

11.Third-Party Websites and Services

The Service may contain links to third-party websites, applications, or services, including payment pages, documentation, and developer resources. This Privacy Policy does not apply to those third parties, and we are not responsible for their practices. We encourage you to review the privacy policies of any third-party service you use.

12.Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, where appropriate, notify you through the Service or by email. Material changes take effect on the date stated in the notice. Your continued use of the Service after changes take effect constitutes acceptance of the revised Policy. If you do not agree, you should stop using the Service and close your account.

13.Contact

If you have questions about this Privacy Policy or about your information, please contact us at support@secretvoice.dev. We will respond as promptly as we reasonably can, and will address privacy requests in accordance with applicable law.