1. Information We Collect

We collect the following:

• Account Information: Email, username, and profile details you give us at sign-up
• Usage Data: TTS requests, character counts, voice cloning activity, API usage
• Audio Files: Voice samples for cloning and generated TTS audio
• Payment Information: Payment method and transaction records for paid plans
• Technical Data: IP address, browser, device, access logs

2. How We Use Your Information

We use your information to:

• Run and improve the service
• Process TTS and voice cloning requests
• Manage your account and subscription
• Send service emails — verification, password reset, billing
• Detect and prevent fraud
• Meet legal obligations

3. Data Storage and Security

We use PostgreSQL, Redis, Django, and protected server storage. Private voice samples, generated audio, avatars, projects, and payment screenshots are delivered through authenticated or short-lived signed URLs. No system is fully secure, so we do not promise absolute security.

4. Data Retention

Generated audio is retained according to the active plan and the cleanup timestamp shown in the dashboard. Voice samples, payment screenshots, attribution records, analytics events, and support messages require defined operational retention periods. Account deletion and export requests are handled through support until the self-service workflow is available.

5. Third-Party Services

We use these third-party services:

• Inworld AI: TTS synthesis and voice processing
• Resend: Email delivery — verification, password reset, notifications
• Sentry: Error tracking and monitoring
• Redis and PostgreSQL hosting: queues, cache, and account data
• Optional analytics and advertising providers: only after you allow analytics in the consent banner

Each has its own privacy policy. Read it if you want.

6. Payment Data Processing

All payment transactions are processed by PayFast (Pty) Ltd, a PCI-DSS Level 1 compliant payment gateway. Duramo Lab does not store credit card numbers, CVV codes, or banking login details on its servers.

PayFast may collect and process payment data in accordance with its own privacy policy at payfast.io/privacy-policy.

Transaction metadata (amount, timestamp, payment status, order reference) is retained for accounting, refund processing, and fraud prevention.

7. Voice Cloning and Consent

When you upload audio to clone a voice, you must confirm that you own it or have permission to use it. Voice data is processed to create and operate the requested clone, is not public, and can be deleted by contacting support. Do not upload a voice without the required rights.

8. Cookies and Tracking

Essential session and CSRF cookies support account security. With your optional consent, we store first-party campaign attribution such as UTM values and click IDs and record product funnel events. You can decline or withdraw analytics consent by clearing the tracking choice and contacting support; non-essential event recording must stop after withdrawal.

9. Your Rights

You have the right to:

• Access, update, or delete your account info
• Request a copy of your data
• Request account and data deletion
• Opt out of marketing emails and analytics attribution
• File a complaint with a data protection authority

10. Children’s Privacy

The service isn’t for children under 13. We don’t knowingly collect their data. If we learn we have, we delete it promptly.

11. Changes to This Policy

We may update this policy. We’ll email you about material changes. If you keep using the service, you accept the updated policy.

12. Contact

Questions about this policy or want to exercise your rights? Reach us at our contact page or email [email protected].