Privacy policy

This policy explains what Talkify collects, why we collect it, how long we keep it and the choices you have. It applies to the website, the studio, the API and any support conversation with us.

Who is responsible for your data

The controller is the Talkify entity that provides your account — the company named on your invoice and in your order form. You can reach our privacy contact at any time through the contact page; put “Privacy” in the subject line so it reaches the right person.

Information we collect

You give us

• Account details — name, e-mail address, password hash, interface language and currency.
• Billing details — company name, billing address, tax identifier. Card data is entered on our payment provider's page and never stored on our servers.
• Content — scripts you submit, the audio we generate, voices you clone, files you upload for dubbing and the consent recordings that accompany a clone.
• Support messages — what you write to us and any attachments you send.

We collect automatically

• Usage data — pages visited, features used, generation counts and character balances.
• Technical data — IP address, browser and device type, approximate region derived from the IP, and error traces.
• Security data — sign-in history and rate-limit events used to detect abuse.

Why we use it, and on what legal basis

To provide the service	Generating audio, saving projects, cloning a consented voice, delivering downloads. Basis: performance of our contract.
To take payment	Processing subscriptions, renewals, invoices and refunds. Basis: contract and legal obligation.
To keep the platform safe	Detecting fraud, abuse and impersonation attempts, enforcing our terms. Basis: legitimate interests and legal obligation.
To improve the product	Aggregated statistics about feature usage and reliability. Basis: legitimate interests.
To contact you	Service notices, security alerts, billing receipts and — only with consent — product news. Basis: contract, legal obligation or consent.

We do not use your scripts or generated audio to train models for other customers, and we do not sell personal data.

Speech engines and sub-processors

To turn text into speech, the text of a request is sent to the speech engine that serves that language and voice. Providers process it to return the audio and are bound by contract to confidentiality and to limits on how long they may retain it. We also use providers for hosting, storage, e-mail delivery and payments. The current list is available on request, and we give notice here before adding a sub-processor that handles content.

International transfers

Our providers may process data outside your country. Where that happens we rely on recognised safeguards — standard contractual clauses or an adequacy decision — and we keep a record of the transfer mechanism for each provider.

How long we keep data

• Account and projects — while your account is open, then deleted within 30 days of a verified deletion request, except where we must keep records.
• Generated audio and uploads — until you delete them, or 12 months after the last activity on a free account.
• Consent recordings — for as long as the clone exists, plus 12 months to prove consent was given.
• Invoices and tax records — for the period required by accounting law in the relevant jurisdiction.
• Security and access logs — typically 90 days.

Cookies and similar technologies

We use strictly necessary cookies to keep you signed in, protect forms against cross-site request forgery and remember your currency and language. Analytics cookies, if enabled, are aggregated and can be refused without losing access to the product. You can clear or block cookies in your browser, but the studio will not stay signed in.

Your rights

Depending on where you live, you may ask to access, correct, export, restrict or delete your personal data, to object to processing based on legitimate interests, and to withdraw consent for marketing at any time. You can also lodge a complaint with your local data protection authority. To exercise a right, contact us and tell us which account the request concerns; we may ask you to verify control of the e-mail address first. We answer within 30 days.

Security

Traffic is encrypted in transit, data is isolated per account, passwords are stored as salted hashes and access to production systems is limited to the engineers who need it. No system is perfectly secure, so we also log administrative access and review it. If a breach affects your data, we notify you and the relevant authority without undue delay.

Children

Talkify is not intended for children under 16, and we do not knowingly collect their data. If you believe a child has created an account, contact us and we will remove it.

Changes to this policy

We update this page when the product or the law changes. Material changes are announced by e-mail or in the studio at least 14 days before they take effect, and the date at the bottom of this page always reflects the current version.

Contact

Questions about this policy, a data request, or a concern about how a voice was used: message us through the contact page. For abuse or impersonation reports, include the share link and we will prioritise the review.