Privacy Policy

1. Who We Are

VocalLab AI is an Israeli sole proprietorship (Osek Patur) operating the Service at https://vocallab.ai. For the purposes of data-protection law, VocalLab AI is the data controller of your personal data. You can reach us about any privacy matter at support@vocallab.ai.

2. Information We Collect

We collect the following categories of data:

• Account data via Supabase: your email address and authentication tokens. We do not store plaintext passwords.
• Billing data via Lemon Squeezy: order and subscription information. We do not store your full card details; payments are handled by Lemon Squeezy.
• Voice and content data: the text you submit for generation, voice samples you upload for cloning, and the audio we generate for you.
• Usage and generation records: generations, points/credit balances, and voice-clone metadata, stored in our application database.
• Device and log data: IP address, browser/device information, and usage logs, used for security and analytics.
• Cookies and similar technologies (see the Cookies section).

3. How We Use Your Information

We process personal data on these legal bases: performance of our contract with you, our legitimate interests (such as securing and improving the Service and preventing fraud), compliance with legal obligations, and your consent where required.

We use data to: create and manage your account; process payments; generate AI voice audio; provide customer support; maintain security and prevent abuse; and improve and operate the Service.

4. Voice & Biometric Data

Voice samples and voice clones can constitute sensitive or biometric data under some laws (for example the EU/UK GDPR and the Illinois BIPA). We process this data only to provide the voice-generation and cloning features you request.

• By uploading a voice sample or creating a clone, you confirm you have the necessary consent of the person whose voice is used (see our Terms).
• We do not sell biometric or voice data, and we do not use your input text, uploaded voice samples, or generated audio to train our own or third parties' AI models.
• Voice samples and clones are retained while your account and clone are active and are deleted or anonymized following account or clone deletion, subject to the retention rules below.

5. Who We Share Data With (Subprocessors)

We never sell your personal data. We share data only with the service providers that help us operate VocalLab AI, each under appropriate data-protection terms, and only as needed to provide the Service:

• Inworld AI — AI voice generation and cloning. Receives the text and voice samples needed to generate audio.
• Supabase — authentication and account database.
• MongoDB Atlas — application database storing generations, points, and voice-clone metadata.
• Cloudflare R2 — storage and delivery of generated audio files.
• Lemon Squeezy — payment processing and subscription management.
• Railway — backend application hosting.
• Vercel — frontend application hosting.
• PostHog — privacy-friendly product analytics.

We may also disclose data when required by law, or to protect the rights, safety, and security of our users, the public, or VocalLab.

6. Data Retention & Security

We retain personal data only as long as necessary for the purposes described here or as required by law. When you delete your account, your personal data is deleted or anonymized within 30 days unless a longer retention period is legally required. We protect data with TLS encryption in transit, Supabase Row-Level Security, hashed tokens, access controls, and other industry-standard measures. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. International Data Transfers

We operate globally, and your data may be processed in countries other than your own, including by the subprocessors listed above. Where required by law, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses for such transfers.

8. Cookies & Tracking Technologies

We use strictly necessary cookies to keep you logged in and to secure the Service, and analytics cookies (PostHog) to understand usage. You can manage or block non-essential cookies through your browser settings; doing so may affect some features.

9. Your Privacy Rights

Depending on where you live, you have rights over your personal data:

• EEA/UK (GDPR): access, correction, erasure, restriction, portability, objection, and the right to withdraw consent.
• California (CCPA/CPRA): the right to know, delete, correct, and opt out of the "sale" or "sharing" of personal information. We do not sell your personal data.

To exercise any right, email support@vocallab.ai. We will respond within the period required by applicable law (generally within 30 days). You also have the right to lodge a complaint with your local data-protection authority.

10. Age Restriction

VocalLab AI is intended for users aged 18 and older. We do not knowingly collect personal data from anyone under 18, and we delete accounts identified as belonging to minors. If you believe a minor has provided us data, contact support@vocallab.ai.

11. Changes to This Policy

We may update this Privacy Policy from time to time. For material changes we will provide notice by email or a prominent notice in the Service at least 30 days before they take effect. This policy is written in English, which is the authoritative version; translations are provided for convenience only.

12. Contact Us

For any privacy question or request, contact us at support@vocallab.ai.