Data Retention

Last updated September 15, 2026

1. Generation files

For signed-in users, voice recordings attached to a generation and the generated files remain available while the account is active. They become eligible for deletion after 12 consecutive months without authenticated account activity, unless the user deletes them sooner or a security or legal hold applies. Signing in and using the account resets this inactivity period. Deletion runs as a scheduled background job in batches, so removal may follow eligibility by some time.

The public microphone demo on the voice-cloning page processes a recording without an account. Its recording and result are scheduled for automatic deletion 24 hours after creation. Demo-quota records that hold only a hashed network address and a usage counter are kept for abuse prevention. A person who used the demo can request deletion without creating an account through the voice-rights report form or [email protected]. Premium test generations made from inside an account follow the signed-in retention above, not the 24-hour demo rule.

2. Saved voices and projects

Saved voices remain until you delete them or close your account. Delete voices you no longer use. Projects, scripts, selected references, and generation history may remain available while your account is active so you can return to previous work, edit scripts, and download outputs. AltVoice is not intended to be a permanent backup, so important source and output files should also be kept by the user.

3. Deleted content and provider copies

When you request account deletion, access is disabled immediately and active account content is scheduled for permanent deletion after a 7-day security period. Individual deleted content is removed from active product views immediately and from storage where reasonably possible. Provider-side voice models are not kept between generations: the model Fish Audio builds for a generation is queued for deletion the moment that generation finishes, with automatic retries until the provider confirms, and other inference providers process each request transiently without holding a named voice model for us. Their own operational logs are governed by their retention terms. Backups, logs, billing records, security records, and legal-preservation copies may remain for limited periods.

4. Billing and minute records

Payment, tax, invoice, and subscription records may be retained by us or our payment provider for accounting, compliance, fraud prevention, and dispute handling. We also keep an append-only minute ledger showing when minutes were granted, purchased, reserved, charged, restored, or adjusted, together with the resulting top-up balance where applicable.

5. Generation and error logs

Operational logs may record generation identifiers, status changes, durations, minute usage, provider references, error categories, and correlation identifiers. These logs are used to deliver the service, investigate failures, calculate usage, and resolve support or billing disputes. They are not intended to contain payment-card details, voice recordings, generated audio, or the text of a user's script.

6. Abuse and safety logs

We may retain records related to suspected abuse, use of a voice that is not the account holder's own, quota bypassing, fraud, spam, security incidents, or policy violations for longer where necessary to protect users and the service.

7. Consent evidence

We retain the confirmation text and version, time, pseudonymous subject or actor hash, recording fingerprint, recording source, hashed network address, browser information, and transaction identifiers associated with legal, voice, cookie, and billing confirmations. These records survive account or audio deletion for at least the applicable limitation period so we can establish what was confirmed, answer disputes, prevent repeat abuse, and comply with law. They do not contain the audio itself.

8. Retention of operational evidence

Payment, minute, generation, consent, and error journals may remain after ordinary account content is deleted when reasonably necessary for tax and accounting duties, legal claims, fraud prevention, security, or proof of service delivery. Retention depends on the record and applicable law. Where the user account is deleted, we detach or pseudonymize the account identifier while preserving required evidence.

9. Voice and biometric data

AltVoice stores only recordings of the account holder's own voice. The voice identifier derived from a recording for synthesis exists only for the duration of one generation and is then destroyed; it is not retained or reused. The recording itself is destroyed when you delete the voice, when your account is purged, or when a legal deadline requires it, whichever comes first, subject to the limited backup and preservation periods above. Where a biometric retention law sets a maximum period, that period applies. Consent timestamps and recording fingerprints are separate records with their own retention schedule and do not extend the life of the recording.