Privacy Policy

1. What We Collect

When you use VocalAI we collect:

• Account information — name, email address, and profile image provided via Google or GitHub OAuth.
• Audio inputs — files you upload (reference audio, tracks) to process with our tools. These are used solely to run the requested AI operation.
• Generated outputs — audio files produced by our tools, stored so you can access them in My Creations.
• Usage data — credit balance, generation history, and tool usage patterns to operate and improve the service.
• Payment data — handled entirely by Stripe. We never see or store your card details.

2. How We Use Your Data

• To run AI audio generation on your behalf.
• To maintain your credit balance and generation history.
• To process payments and manage subscriptions via Stripe.
• To send transactional emails (e.g. password reset, receipts) where applicable.
• To improve model quality and service reliability using aggregated, anonymised usage data.

We do not sell your personal data or use it to train AI models without your explicit consent.

3. Audio Data Handling

Uploaded audio files are transmitted to third-party AI providers (WaveSpeed, Replicate) solely to fulfil your generation request. Files are not stored by those providers beyond the duration needed to process the request. Generated outputs are stored in our cloud storage (Cloudflare R2) and linked to your account. You can delete your creations at any time from My Creations.

4. Third-Party Services

VocalAI integrates the following third-party services:

• Google / GitHub OAuth — for authentication.
• WaveSpeed AI — for audio remix, inpaint, outpaint, and voice-changer processing.
• Replicate — for voice cloning, voice design, and vocal removal.
• Stripe — for payment processing. Subject to Stripe's own privacy policy.
• Cloudflare R2 — for output file storage.

5. Data Retention

Account data is retained for as long as your account is active. Generated outputs are retained until you delete them or close your account. You may request deletion of your account and all associated data by contacting us.

6. Security

We use industry-standard security practices including encrypted connections (HTTPS), access-controlled cloud storage, and hashed credentials. No system is completely secure — please use a strong, unique password for any linked accounts.

7. Your Rights

You have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your account and data.
• Object to processing of your data for marketing purposes.

To exercise these rights, contact us at the address below.

8. Contact

If you have questions about this policy or your data, please reach out via the support link in the footer.