Privacy Policy

Last updated September 23, 2026 · Version 2026-09-23.1

1. Controller and contact details

The controller for AltVoice product data is AltVoice, the operator of AltVoice. You can contact us at [email protected]. When paid features are enabled, the payment or merchant-of-record provider acts as a separate controller for checkout, payment, tax, invoice, fraud prevention, and transaction-support data under its own privacy notice.

2. Data we collect

We may process your name, email, hashed password, authentication provider identifiers, session records, plan and usage balances, customer, subscription, and transaction identifiers assigned by payment providers when paid features are used, projects, scripts, microphone recordings of your voice, generated audio, voice settings or model identifiers, feedback, support messages, consent records, IP-derived security data, browser or device information, logs, error reports, cookie choices, and limited website usage data such as the page visited, date, approximate country, and device category. We do not receive or store full payment-card details from payment providers.

2a. Chrome read-aloud extension

When you ask the reader to read a page, selection or pasted passage, it sends the requested text to AltVoice and the speech providers used for your selected quality. It may prepare upcoming fragments before playback reaches them. Text and generated results are retained under the service retention rules below; closing the player does not delete server records. Optional voice recording sends microphone audio only after you choose to record and save it.

The extension stores an installation authentication key, consent and playback preferences locally. Saved positions contain a hashed page identifier, paragraph position and timestamp, not the raw page URL, page title or article text. There are up to 20 positions; entries older than 30 days are removed when positions are accessed. These hashes are pseudonymous, not anonymous. Use Account → Clear reading history to remove saved positions. The reader does not run in incognito mode.

Page text is extracted when you invoke the reader, not by continuously monitoring your browsing. The extension does not request browser history, cookies, saved passwords, camera or general filesystem access. Pasted text is entered in an isolated extension document. Account connection requires sign-in and confirmation with a short-lived code displayed in the reader. Removing the extension clears its local data, but does not delete your AltVoice account or server-side data; the deletion and contact options below remain available.

3. Your voice as biometric data

AltVoice clones only your own voice, recorded live with your microphone. A voice recording and a technical representation derived from it can identify you and may qualify as biometric or sensitive personal data in some jurisdictions. We process it on the basis of your explicit consent, given through the confirmation you tick before recording, and only to create or apply a synthesis reference, generate audio you request, provide playback and saved voices, prevent abuse, and troubleshoot the service. We do not use your voice to authenticate identity or to make decisions about employment, credit, health, eligibility, or access to essential services.

You may withdraw consent at any time by deleting the saved voice from your library, deleting your account, or writing to [email protected]. Withdrawal does not affect processing that already took place. More detail appears in the Voice Consent Policy.

If you believe someone recorded your voice into AltVoice without your permission, you do not need an account to act. Contact [email protected] or use our voice-rights report form.

4. Sources of data

We obtain data directly from you, your browser, your authentication provider, payment providers when paid features are used, and service providers operating on our behalf. Voice recordings come only from your own microphone through the AltVoice interface.

5. Purposes and legal bases

We process account, content, and usage data to perform our contract and provide requested features; payment-linked records to administer the contract and meet accounting obligations; security, fraud, consent, and abuse records for our legitimate interests and legal obligations; and limited service-usage statistics for our legitimate interest in understanding and operating the service. Optional third-party analytics is based on consent where required. Voice processing is based on your explicit consent and instruction. If required information is not provided, we may be unable to create an account, process a payment, save a voice, or generate audio.

6. Processors and recipients

We disclose only the data reasonably needed for the relevant function. Recipients may include payment and merchant-of-record providers when paid features are enabled; AI inference providers described below; hosting, database, object-storage, and queue providers; authentication and optional analytics providers; transactional-email providers; error-monitoring and security providers; and administrator notification services. We may also disclose data to professional advisers, a buyer of the business, or authorities where lawfully required. Providers and infrastructure may change as the service evolves.

Depending on the selected model, voice synthesis runs on AltVoice-operated inference servers or on external GPU and model providers. Currently these are RunPod (serverless GPU inference for premium cloning and sound effects, which receives the reference recording and text for each request and does not keep a named voice model for us) and Fish Audio (which receives the reference recording and text and creates a private provider-side voice model for that single generation; we queue its deletion through the provider's API as soon as the generation finishes, normally within a minute, and never reuse it). In other words, the voice identifier a provider derives from your recording exists only for the duration of one generation. The only durable copy of your voice is the recording in your library, which you control. Error monitoring uses Sentry, which receives technical error details and your IP address. Contact [email protected] for information about the providers relevant to a particular voice or generation.

Standard voice-processing authorization covers the requested features and related purposes described here. It does not cover selling recordings as a dataset, publishing your voice for other users, or training general-purpose models. Any separate use requires its own notice and appropriate authorization.

7. International transfers

Providers may process data outside your country, including in the United States. Where transfer rules apply, we use an available lawful mechanism such as an adequacy decision, standard contractual clauses, a recognized certification framework, or another permitted safeguard. Contact [email protected] for information about the safeguard relevant to your data.

8. Retention

Generation files and history remain available while you actively use your account. They become eligible for deletion after 12 consecutive months without authenticated account activity, unless you delete them sooner or a security or legal hold applies. Signing in and using the account resets this inactivity period. Saved voices remain until you delete them or close the account. Delete voices you no longer use; where a biometric retention law sets a maximum period, that period applies.

Account records remain while the account is active. A self-service deletion request disables access immediately and schedules active account content for permanent deletion after a 7-day security period. Billing, fraud, security, consent, complaint, and legal-claim records may be retained longer, for the applicable limitation period. Limited backup or legal-preservation copies may remain until securely overwritten or the preservation duty ends. See our Data Retention page.

Because provider-side voice models are deleted after every generation, deleting a voice or your account removes the recording itself; any provider model still in flight at that moment is queued for deletion with automatic retries. Provider backup cycles may be separate from removal from your account. Consent evidence has its own retention period; it does not include another copy of the audio.

Temporary pseudonymous data used for service-usage statistics is normally removed within 32 days. Non-identifying aggregate statistics may be retained without a fixed expiry to preserve historical usage totals.

9. Cookies and analytics

Essential cookies support authentication, request integrity, preferences, and abuse prevention. AltVoice maintains limited service-usage statistics without analytics cookies or persistent browser identifiers. Optional third-party analytics is not loaded until you accept it where the consent banner applies. You can reject optional analytics without losing core service access and reopen cookie settings from the footer. See the Cookie Policy for the current inventory.

10. Security

We use reasonable technical and organizational measures including authenticated access, owner-scoped checks on every audio and project endpoint, short-lived signed links for some downloads, password hashing, provider credential separation, logging, rate or quota controls, and incident monitoring. If a security incident is likely to result in a high risk to you, we will notify you and, where required, the supervisory authority without undue delay. No system is completely secure. You are responsible for your credentials, devices, and exported files.

11. Your privacy rights

Depending on your location, you may request access, correction, deletion, portability, restriction, or objection; withdraw consent without affecting earlier lawful processing; or appeal a privacy decision. You may also complain to your local data-protection or consumer authority. Send requests to [email protected]. We may verify identity and may retain data where an exception applies, including billing, fraud, security, free-expression, legal-claim, or statutory recordkeeping needs.

12. No sale and no targeted advertising

We do not sell voice recordings or personal data for money, and we do not use voice recordings for third-party targeted advertising. If our practices change in a way that triggers a statutory sale, sharing, or opt-out right, we will update this notice and provide the required control.

13. Children

AltVoice accounts are for adults aged 18 or older, and only the account holder's own voice may be recorded. Contact [email protected] if you believe a minor's voice or data was submitted.

14. Automated decisions

We may use automated signals to detect abuse, enforce quotas, or flag activity for review. We do not use solely automated decisions that produce legal or similarly significant effects about users. We may suspend immediately for urgent risk and then review an appeal manually.

15. Changes and complaints

We may update this Policy as the service, providers, or laws change. We will update the date and version above and provide additional notice for material changes where required. You can contact [email protected] with questions or complaints. You do not have to contact us first to exercise your right to complain to a regulator or seek a legal remedy.