1. Information We Collect
1.1 Text You Submit
The text you paste into the workspace is stored on our servers so we can convert it into audio and answer support questions about that order. Treat the text box like any other third-party processor: don’t paste anything you wouldn’t share with a vendor.
1.2 Voice Selection & Ownership Affirmation
We record the voice you picked and the timestamp of your acceptance of the ownership-affirmation checkbox. This is part of the order record.
1.3 Email Address
When you check out, Stripe collects your email address and shares it with us so we can email you the download link and any service messages about your order. We do not use this address for marketing.
1.4 Payment Information
Payment is processed by Stripe. We do not store your credit card number, CVC, or full billing address. We only store a Stripe Payment Intent / Checkout Session ID so we can reconcile the order. Stripe’s privacy policy is available at stripe.com/privacy.
1.5 Generated Audio
The MP3 we render from your text is stored in Amazon S3 (encrypted at rest). The download link we email you is valid for 7 days; each click generates a fresh, short-lived signed S3 URL that expires within minutes.
1.6 Technical & Server Data
We collect standard server logs and request metadata for security and debugging:
- IP address: stored on each job row and short-lived rate-limit buckets, used for rate limiting, abuse detection, and security
- Request method, path, status code, response time: standard application logs (no request body, no user-agent persisted by us)
- CDN logs: Cloudflare records standard CDN request data (IP, user agent, path) on its side; see Section 4
1.7 Browser Storage
The workspace remembers your in-progress text, selected voice, and ownership checkbox in your browser’s sessionStorage so a page refresh doesn’t lose your work. This data lives on your device and is cleared when you close the tab. See our Cookie Policy for details.
2. How We Use Your Information
- Provide the Service: convert your text into audio, store the MP3, and email you a download link
- Process payments: charge through Stripe and reconcile against the job we deliver
- Support you: respond to delivery, refund, and quality questions
- Prevent abuse: apply rate limits, detect suspicious patterns, and block fraudulent or harmful use
- Improve the Service: diagnose pronunciation issues, measure aggregate volume, tune the voice catalog
- Comply with law: respond to lawful requests and enforce our Terms of Service
We do not use your text or audio to train any third-party generative model, and we don’t share it with our voice provider in a way that would let them do so either.
3. Legal Basis for Processing (GDPR)
If you are in the European Economic Area or UK, we process your data under:
- Contract performance: to deliver the audio you paid for
- Legitimate interest: to improve the Service, prevent fraud, and ensure security
- Consent: where required (e.g. the ownership-affirmation checkbox)
- Legal obligation: to comply with tax, accounting, and other applicable regulations
4. Data Sharing & Third Parties
We share your data only with the following service providers, strictly to operate the Service:
| Provider | Purpose | Data Shared |
|---|---|---|
| Stripe | Payment processing | Payment details, billing email (handled by Stripe directly) |
| Amazon Web Services (S3) | Audio file storage | Generated MP3 files and short-lived preview clips |
| Fly.io | API + text-to-speech inference hosting | Text submitted for synthesis (in transit) |
| Neon | Managed PostgreSQL database | Job records, email per job, IP per request |
| Cloudflare | DNS, CDN, and website hosting | IP, user agent, standard CDN request data |
| Resend | Transactional email delivery | Recipient email address, message content (download link) |
| Slack | Internal failure alerts | Job identifier, error details, charged amount, the buyer’s email, and the Stripe Payment Intent ID (so we can investigate and refund). Never the submitted text or the audio file. |
We do not sell, rent, or trade your personal information. We do not use third-party advertising or analytics trackers. We have no tracking pixels, no Google Analytics, and no social media widgets.
5. Data Retention
- Customer download link: valid for 7 days from the time of payment; the link stops working after that and you would need to re-purchase to get a new copy
- Preview clips: deleted from S3 within roughly 30 days via an object-storage lifecycle rule
- Job records and the underlying MP3: retained on our servers indefinitely so we can support refund and quality questions, reconcile payments, and improve the Service. You can ask us to delete a specific job at any time (see Section 6)
- Server logs: retained for up to 90 days for security and debugging
- Payment records: retained as long as required by tax, accounting, and Stripe’s own retention policies
6. Your Rights
Depending on your jurisdiction, you may have the following rights:
- Access: request a copy of the personal data tied to a specific order
- Correction: request correction of inaccurate data
- Deletion: request deletion of a specific job, the email associated with it, and the resulting audio file
- Portability: request your data in a machine-readable format
- Objection: object to processing based on legitimate interest
- Restriction: request restriction of processing in certain circumstances
6.1 For California Residents (CCPA/CPRA)
If you are a California resident, you have the right to know what personal information we collect, request deletion, request correction, and opt out of the sale or sharing of personal information. We do not sell or share personal information for cross-context behavioral advertising. To exercise your rights, email privacy@simpletexttospeech.io.
6.2 For EEA/UK Residents (GDPR)
You have the rights listed above under GDPR. You also have the right to lodge a complaint with your local data protection authority. To exercise your rights, email privacy@simpletexttospeech.io.
To exercise any of these rights, email privacy@simpletexttospeech.io from the address you used at checkout and include the job token from your delivery email so we can locate the right record. We will respond within 30 days.
7. Data Security
We implement appropriate technical and organizational measures to protect your data, including:
- HTTPS encryption for all connections
- Audio downloads served via signed URLs that expire
- S3 buckets configured to block public access; objects encrypted at rest
- Database, object storage, and inference services accessed over private credentials we rotate periodically
- Rate limiting on API endpoints
- Stripe-hosted Checkout (we never see your card details)
No system is perfectly secure. Please use a strong, unique password on your email account because the email link is what proves you own the order.
8. International Transfers
Our servers and service providers are located in the United States. If you access the Service from outside the US, your data will be transferred to and processed in the US. By using the Service, you consent to this transfer. Where required, we rely on our processors’ data processing agreements and the European Commission’s Standard Contractual Clauses or equivalent safeguards.
9. Children’s Privacy
SimpleTextToSpeech.io is not directed to children. Per our Terms of Service, you must be at least 13 years old (16 in the EEA/UK) to use the Service and at least 18 to make a purchase. We do not knowingly collect personal information from children under 13 (or under 16 in the EEA/UK). If we learn that we have collected data from a child below the applicable age, we will delete it promptly. If you believe a child has used the Service, contact us at privacy@simpletexttospeech.io.
10. Changes to This Policy
We may update this Privacy Policy from time to time. The current version always lives at simpletexttospeech.io/privacy. The "Last updated" date at the top of this page indicates when it was last revised. Material changes will be reflected in a new date.
11. Contact Us
If you have any questions or concerns about this Privacy Policy or our data practices, contact:
Email: privacy@simpletexttospeech.io
Entity: Sezi LLC (SimpleTextToSpeech.io)