Privacy Policy

Overview

VoiceCloner supports anonymous use and optional accounts. This policy explains what data is processed when you upload a voice sample, create a voice profile, or generate speech.

Voice Data

• Uploaded samples, whether submitted anonymously or by a signed-in user, are stored in a private Cloudflare R2 bucket under a user-scoped path. The database stores the object key and file metadata, not the audio bytes.
• Pending samples are available for approximately 30 minutes. If cloning is not completed during that window, the sample is removed from the application records and queued for storage cleanup. Once cloning is complete, the sample is attached to the voice profile and retained until the profile is deleted.
• Generated audio is stored in Cloudflare R2, with its URL and metadata recorded by VoiceCloner so you can access it after generation. Deleting a voice profile removes its stored source sample and generated audio, and requests deletion of the provider voice.
• The provider may process limited operational data under its own privacy and retention terms. Deletion requests can take time to propagate through provider systems and backups.

Do not upload a voice unless you own the rights to it or have the speaker's explicit permission.

Anonymous Usage and Security Data

To enforce free limits and prevent abuse, we derive a one-way keyed hash from network and browser signals such as your IP address and user agent. We store the hash, the one-time trial credit snapshot, lifetime credits consumed, clone-attempt counters, voice-session status, timestamps, and limited provider request or error identifiers. We do not store your raw IP address in our application database.

Cloudflare may process network, device, and security information to deliver the site, run Turnstile, and protect the service. Your browser may also store a language preference cookie.

Service Providers

We use:

• ElevenLabs to create voice profiles and generate speech.
• Cloudflare D1 to store account, voice-profile, quota, and session metadata.
• Cloudflare R2 to store source samples and generated audio in a private bucket.
• Cloudflare to host and secure the website, provide bot protection, and connect to the database.

We do not sell personal information. We may disclose information when required by law, to investigate abuse, or to protect users and the service.

Retention and Security

Pending samples that are not cloned are available for approximately 30 minutes and then queued for cleanup. Samples attached to a completed voice profile and generated audio remain in private R2 until the profile is deleted. Anonymous quota, generation, and deleted-session metadata may be retained for abuse prevention and operational troubleshooting, unless a longer period is legally required. Cloudflare and ElevenLabs maintain their own retention schedules.

We use encryption in transit, restricted secrets, rate limits, short-lived session tokens, and access controls. No internet service can guarantee absolute security.

Your Choices and Rights

You can delete signed-in profiles from your voice library and request deletion of voice samples or profiles by contacting us. You can also clear local browser data, including the cookie used to identify an anonymous session. Depending on your location, you may have rights to access, correct, delete, restrict, or object to processing of personal data. Contact us if you need help locating a record.

Changes and Contact

We may update this policy as the product or law changes. The date above identifies the latest version. Questions or privacy requests can be sent to support@voicecloner.org.