Privacy Policy

1. Information we collect

We collect only the information needed to provide the Service:

• Account information: email, password (hashed), name, profile settings.
• Content you submit ("Inputs"): scripts, prompts, descriptions, and voice samples.
• Generated outputs: audio files, voice clones, and music we generate for you, stored in your account.
• Payment information: handled by our payment processor (Stripe). We never see or store full card numbers.
• Usage data: feature usage, crash logs, device type, app version. Used to improve the Service.

2. Biometric data — voice samples

Voice samples you upload for voice cloning are biometric data. We treat them as the most sensitive category of information we hold.

Specifically:

• Voice samples are encrypted at rest and in transit.
• They are scoped to your account only — no other user can access them.
• They are never used to train shared AI models. Your voice does not become part of any model that benefits other users.
• You can delete voice samples at any time from your account settings. Deletion is permanent and immediate.
• If you delete your account, all voice samples are deleted within 30 days.

By submitting a voice sample, you confirm that the voice is your own OR that you have written consent from the person whose voice it is (see our Acceptable Use Policy).

3. How we use your information

We use your information to:

• Deliver the Service — generate audio, voices, and music in response to your requests;
• Process payments and manage subscriptions;
• Communicate with you about account, billing, and product updates;
• Protect against fraud, abuse, and violations of our Terms or AUP;
• Improve the Service (using aggregated, anonymized data — not your voice samples or specific prompts).

4. We do NOT sell your data

We do not sell, rent, or trade your personal information to third parties for their marketing purposes. Full stop.

5. AI model training

We do not use your Inputs (prompts, voice samples, descriptions) or Outputs (generated audio) to train shared AI models that benefit other users. Your data is yours.

For voice cloning specifically, the voice model we create from your samples is private to your account and is not shared, sold, or used to enhance models offered to other users.

6. Third-party processors

We use the following third-party services to deliver the Service. Each is bound by confidentiality and data-protection obligations:

• Google Firebase (authentication, database, file storage, hosting);
• OpenAI (text generation for lyrics, scripts, descriptions). Submitted text is processed under OpenAI's API terms — not used to train OpenAI's models;
• ElevenLabs (voice synthesis and music generation);
• Stripe (payment processing);
• Apple App Store / Google Play (mobile distribution and in-app purchases).

7. Data retention

We retain your information for as long as your account is active. When you delete your account:

• Personal information (email, name, settings) is deleted within 30 days;
• Voice samples and generated voice clones are deleted within 30 days;
• Generated audio Outputs are deleted within 30 days unless you've downloaded them;
• Billing records are retained for 7 years as required by tax law;
• Aggregated, anonymized analytics data may be retained indefinitely.

8. Your rights

Depending on your jurisdiction, you have the right to:

• Access the personal information we hold about you;
• Correct inaccurate information;
• Delete your account and personal information;
• Export your data in a portable format;
• Object to processing or withdraw consent;
• File a complaint with your local data protection authority.

EU residents have additional rights under the GDPR. California residents have additional rights under the CCPA/CPRA. To exercise any of these rights, contact us at contact@voxiostudio.com. We respond within 30 days.

9. Children

The Service is not intended for children under 18 (or the age of majority in your jurisdiction). We do not knowingly collect information from children under 18. If we learn we have collected such information, we will delete it promptly. Parents who believe their child has provided information should contact us.

10. International data transfers

Noremyah Productions LLC is based in the United States. If you use the Service from outside the U.S., your information will be transferred to and processed in the U.S. We rely on appropriate safeguards (e.g., Standard Contractual Clauses where required) for such transfers.

11. Security

We use industry-standard security practices: encryption in transit (HTTPS/TLS) and at rest, principle of least privilege for internal access, secure cloud infrastructure (Google Firebase), and ongoing monitoring. No system is 100% secure — if a breach occurs, we will notify affected users within 72 hours as required by applicable law.

12. Changes to this Policy

We may update this Policy as our practices and applicable laws evolve. Material changes will be communicated by email or in-app notice at least 14 days before they take effect.

13. Contact

For privacy questions, data requests, or to exercise your rights, contact contact@voxiostudio.com.

Voxio Studio is a service of Noremyah Productions LLC, a Indiana limited liability company. Data controller: Noremyah Productions LLC. Registered address: 9100 Purdue Rd. Data-controller contact: contact@voxiostudio.com.