What this page adds
The privacy policy explains what the site and app do with data. This page is the reference for retention, deletion and processors. If they ever disagree, the stricter rule applies.
What we hold, and for how long
| Data | Why | Kept |
|---|---|---|
| Local app audio, voices, transcripts | Not received by us | On your device only |
| Text-to-speech preview text | Synthesising the preview | Not stored |
| Early-access and enquiry forms | Receipt, one launch notice, reply | At most two years, then deleted |
| Order record: email, plan, seats, country (for India, state and optional GSTIN), amounts, coupon code, payment provider and reference, payment status including failed attempts and the provider's failure reason, IP address and the country it resolves to (we send only the IP address to an IP-geolocation service to determine it), browser user agent | Fraud prevention and abuse limits, licence verification, order support, refunds, tax and invoicing records, investigating payment problems | Indefinitely, including the IP address, its country, and browser; seen only by VoiceStudio platform administrators, and every view is logged |
| Card or bank details | Paying | Never received by us |
| Abuse-limit digests | Blocking automated abuse | Expire within an hour; one-way, not raw IP |
| Backups of the above | Recovery | Up to 35 days after live deletion |
Who processes it
- Cloudflare delivers the site and processes request metadata.
- Payment providers: Razorpay (India), Zoho Payments (elsewhere) and PayU (where offered) take your payment under their own notices. They may process it outside your country.
- An IP-geolocation service receives only the IP address of a checkout request and returns the country it is in.
- Email and notification providers receive only the fields needed to send a receipt or reply.
- GitHub serves downloads and release metadata.
Your choices
You can ask to see, correct, export, or delete what we hold, or withdraw consent, by writing to privacy@voicestudio.sh from the address concerned. We verify the request, act on it, and confirm.
Deletion clears contact fields and cancels pending deliveries. Order records, including the IP address and browser recorded at checkout, are kept indefinitely, as the table above says. We also keep a one-way suppression digest so a deleted address is not silently re-added.
Security
Traffic uses HTTPS. Payment details go to the provider's hosted checkout and never touch our systems. Secrets are kept server-side, access is limited to maintainers who need it, and personal data is kept out of application logs. If a breach affects your data we notify you and the authorities as the law requires.
Children
The website and purchases are not for children under 18. We do not knowingly collect their data; if we learn we have, we delete it.
Complaints
Grievance officer: To be published before payments go live., privacy@voicestudio.sh. Details of the escalation path are on the contact page.