Privacy Policy

1. Who we are and what this policy covers

This Privacy Policy describes how Speechma (“Speechma,” “we,” “us” or “our”) collects, uses, discloses and protects personal information when you visit speechma.com, use its free tools (Text to Speech, AI voices, Voice Cloning, Voice Design, Voice Changer, AI Dubbing, Speech to Text and the Music Studio), use our Android app, or contact us (together, the “Service”).

For the purposes of the EU and UK General Data Protection Regulation (GDPR and UK GDPR), Speechma is the controller of the personal information described in this policy, except where we say otherwise. You can reach us about anything in this policy at contact@speechma.com.

This policy does not cover SpeechmaPRO.com (speechmapro.com), which has its own privacy policy, or third-party websites and services that we link to, including Google, whose practices are governed by their own policies. Section 10 explains how this policy applies if you sign up for the Speechma API.

3. Information we collect

3.1 Information you give us

• Inputs. When you use a tool you submit content such as text and scripts, prompts, voice descriptions, lyrics, audio recordings, voice samples, songs, videos, files and links (“Inputs”). Inputs may contain personal information, for example your own voice, someone else’s voice, or names mentioned in a script.
• Messages to us. If you use our contact form or email us, we receive your email address, your name if you provide it, the content of your message and any attachments.
• Security code entries. Each generation requires a short security code. We check the code you enter to confirm that a real person is using the tool.

3.2 Information collected automatically

• Technical and connection data. Like every website, our servers receive your IP address, browser type and version, operating system, device type, language settings, referring page, the pages and tools you request, and the date and time of requests.
• Usage and diagnostic data. Which tools are used, whether a generation succeeded or failed, error messages and performance information, so we can keep the Service working.
• Approximate location. A country-level estimate derived from your IP address. We do not collect precise geolocation.

3.3 Information from cookies and similar technologies

Google AdSense and Google Analytics use cookies, pixels, device identifiers and similar technologies to collect information about your browser and your interactions with ads and pages. See Sections 7 and 8 and our Cookie Policy.

3.4 Information we do not collect

We do not ask for or intentionally collect government ID numbers, payment card details for the free tools, precise location, contacts, or information about your race, religion, health or sexual orientation. Please do not include sensitive information in your Inputs unless it is necessary for your purpose and you have the right to share it.

4. How we use information

We use personal information for the following purposes:

• To provide the Service: to process your Inputs and deliver the speech, voice, transcript, dubbed video, music or other result you requested.
• To keep the Service secure and fair: to verify security codes, apply usage limits, detect and prevent spam, fraud, bots, scraping and other abuse, and protect our users and systems.
• To maintain and improve the Service: to diagnose errors, measure performance and understand which tools and pages are used, mainly through aggregated statistics.
• To show advertising that funds the free Service, through Google AdSense, as described in Section 7.
• To communicate with you: to answer questions, support requests, privacy requests and legal notices you send us.
• To comply with law and protect rights: to respond to lawful requests, enforce our Terms of Service and Acceptable Use Policy, handle copyright notices, and establish, exercise or defend legal claims.

We do not use your Inputs or Outputs to build advertising profiles, we do not sell them, and we do not use voice recordings to identify or verify who you are.

5. Your inputs and generated results

The content you submit is used for one purpose: producing the result you asked for.

• Processing. Your text, files and recordings are transmitted securely to Speechma and to the AI processing infrastructure partners that run our voice and audio engine on our behalf, solely to generate your result. These partners act as our service providers (processors) and are not permitted to use your content for their own purposes.
• No storage after processing. Uploaded files are not stored on Speechma servers after processing is complete. Temporary copies that exist while a request is being processed are discarded once the result has been produced or the request fails.
• Results go to your browser. Generated audio, transcripts, lyrics, music and dubbed videos are delivered to your browser and stay there, even after a refresh, until you delete them or clear your browser data. We do not keep them on our servers. For AI Dubbing, your video is sent for processing only and is never stored on our servers.
• Voice samples. Voice samples used for Voice Cloning, Voice Changer or AI Voice Cover are used only to generate the audio you requested. We do not create or keep voiceprints or other biometric identifiers, and we do not use samples to identify anyone.
• Links. If you paste a link, we fetch the content at that link for processing in the same way as an upload.

Because some features process another person’s voice, you must only submit a recording of someone else if you have their permission. See our AI Voice & Cloning Policy.

6. Information stored on your device

To give you a useful experience without an account, Speechma stores certain information locally in your own browser using localStorage and IndexedDB. This can include your generated audio files, your generation history, favorite voices, draft text, and settings such as selected voice, language, speed and display preferences, and whether you have dismissed a notice.

This information stays on your device. It is not sent to our servers as part of your history, and other visitors cannot see it. If you use a shared or public computer, other people using the same browser profile could see it, so remember to clear it. You can delete it at any time by using the delete or clear options in the tool, or by clearing site data for speechma.com in your browser settings. Clearing it permanently removes your local history, because we do not have a copy. Step-by-step instructions are on our Your Privacy Choices page.

7. Advertising (Google AdSense)

The free Service is funded by ads served by Google AdSense. Google and its partners use cookies and similar identifiers to serve ads, limit how often you see an ad, measure ad performance and prevent ad fraud. Depending on your choices and location, ads may be personalized based on your visits to this and other websites, or non-personalized (based on general context such as the page content and approximate location).

• Consent where required. Where the law requires consent, such as in the European Economic Area, the United Kingdom and Switzerland, we ask for your consent through a consent message before personalized ads and related cookies are used. You can change your choice at any time.
• Manage personalization. You can turn off personalized ads from Google at adssettings.google.com, and many participating ad companies offer opt-outs at optout.aboutads.info and youronlinechoices.eu.
• Learn more. Read how Google uses information from sites that use its services at policies.google.com/technologies/partner-sites and about Google’s advertising cookies at policies.google.com/technologies/ads.

Google’s use of data is governed by the Google Privacy Policy. We do not provide Google with your Inputs or Outputs.

8. Analytics and our own statistics

Google Analytics. We use Google Analytics to understand how visitors find and use the website, such as pages viewed, time on page, device type and approximate region. Google Analytics uses cookies and similar identifiers. We configure it to limit data collection where possible, including IP anonymization settings. You can prevent Google Analytics from using your data by installing the Google Analytics Opt-out Browser Add-on at tools.google.com/dlpage/gaoptout, and you can read more at How Google uses information from sites that use its services.

Speechma’s privacy-friendly statistics. We also run our own first-party statistics so we can see how the tools are used without tracking individuals. This system:

• does not use cookies or store anything on your device;
• uses an anonymized identifier that is generated from technical data with a secret value that changes every day, so the same visitor cannot be recognized from one day to the next;
• records simple events (such as “a voice generation succeeded”) with the daily identifier, an estimated country and a general device type (desktop, mobile or tablet);
• deletes these short-lived event records after a few days, keeping only aggregated counts (for example, how many generations a tool handled on a given day and in which countries); and
• does not store your IP address.

9. Security and anti-abuse processing

Free AI tools attract bots and abuse, so we process limited technical data to protect the Service:

• Your IP address is used transiently when a request arrives, to route the response, verify the security code and check for abuse.
• For rate limiting we store a one-way hash of your IP address together with a usage count, and we keep it only for as long as needed to apply the current limit period.
• Error and security logs record a masked IP address (with the last part removed) along with the time, the tool and the error, and are kept for up to 30 days before being deleted, unless we need them longer to investigate a specific security incident or abuse report or to comply with law.

We use administrative, technical and organizational measures designed to protect personal information, including encrypted HTTPS connections, access controls and data minimization. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Learn more on our Security page.

10. Contact requests and Speechma API accounts

Contact form and email. When you contact us, we use your message and email address to reply, to follow up, and to keep a record of the request. We keep these messages for as long as needed to resolve your request and for a reasonable period afterward for record-keeping, legal and security purposes, then delete them. We will not add you to a marketing list because you contacted us.

Speechma API. The free tools do not use accounts, but the developer Speechma API does. If you register for the API, we process the information needed to run your account and subscription, such as your email address, a securely hashed password, your API key, plan, usage counts and payment status. Payments are handled by a payment processor; we receive confirmation of the transaction and subscription status, not your full card number. Refunds are covered by the API Refund Policy. Except where this paragraph or the API terms say otherwise, this Privacy Policy applies to API account information.

Newsletter and community. If you sign up for the Speechma newsletter, your email address is sent to Substack, which sends our newsletter and manages subscriptions under its own privacy policy. We also keep a copy of the address, the page where you signed up and your approximate country, so we can manage the list. You can unsubscribe at any time with the link in every email. If you send us a project through the community page, we use the details you give to review it and, if we feature it, to show its title, link and the name you chose.

11. How we disclose information

We disclose personal information only as described here:

• Service providers. We work with carefully selected companies that help us run the Service, such as hosting and content delivery, AI processing infrastructure, security and anti-abuse services, email, and payment processing for paid products. They may process personal information only on our instructions and for the purpose of providing their services to us, under contractual confidentiality and data protection obligations.
• Google. Google receives information through AdSense and Analytics as described in Sections 7 and 8, and in some cases uses it for its own purposes as described in Google’s policies.
• Legal and safety reasons. We may disclose information if we believe in good faith that it is required by law, subpoena or other legal process; necessary to respond to a valid government request; or needed to protect the rights, property or safety of Speechma, our users or the public, including to investigate fraud, impersonation or abuse.
• Business transfers. If Speechma is involved in a merger, acquisition, financing, reorganization or sale of assets, information may be transferred as part of that transaction, subject to this policy.
• With your direction. We may share information when you ask us to or give your consent.

We may also share aggregated or de-identified information that cannot reasonably be used to identify you, such as total usage counts.

13. International data transfers

Speechma serves visitors around the world, and our service providers and Google may process information in the United States and other countries whose data protection laws may differ from those where you live. When we transfer personal information from the EEA, the UK or Switzerland, we rely on appropriate safeguards recognized by law, such as the European Commission’s Standard Contractual Clauses (and the UK Addendum), adequacy decisions, or the transfer mechanisms our service providers participate in. You can contact us for more information about these safeguards.

14. Children’s privacy

The Service is intended for a general audience and is not directed to children under 13. We do not knowingly collect personal information from children under 13 (or under the higher age that applies in your country). Users between 13 and 18 should use the Service with a parent or guardian’s permission. If you are a parent or guardian and believe your child has provided personal information to us, for example through the contact form, email contact@speechma.com and we will delete it. We do not knowingly allow personalized advertising to users we know to be children.

15. Your privacy rights

Depending on where you live, you may have some or all of these rights over your personal information:

• Access: to know what personal information we hold about you and receive a copy;
• Correction: to have inaccurate information corrected;
• Deletion: to have your information deleted;
• Portability: to receive information in a portable format;
• Objection and restriction: to object to or restrict certain processing;
• Opt out of targeted advertising and of the “sale” or “sharing” of personal information;
• Withdraw consent at any time where processing is based on consent; and
• Non-discrimination: we will not treat you differently for exercising your rights.

How to make a request. Email contact@speechma.com with the subject “Privacy Request,” tell us which right you want to exercise and your state or country, and give us enough information to find the relevant data (for example, the email address you used to contact us). Because we do not have accounts and do not store your uploads or results, we often hold very little or no personal information that can be linked to you; in that case we will tell you. We may need to verify your request before acting on it, and we will respond within the time required by applicable law (generally 30 days under GDPR and 45 days under U.S. state laws, extendable where permitted). You may use an authorized agent where the law allows, and if we decline your request you may appeal by replying to our decision with the subject “Privacy Appeal.”

16. Additional information for U.S. residents (CCPA/CPRA and other state laws)

This section supplements the policy for residents of California and other U.S. states with comprehensive privacy laws, such as Colorado, Connecticut, Virginia, Utah, Texas, Oregon and others.

Categories collected in the last 12 months: identifiers (such as IP address and online identifiers set by Google); internet or other electronic network activity (such as pages viewed and interactions with ads); approximate geolocation (country level); audio, electronic or similar information (Inputs such as voice recordings, processed only to produce your result); and inferences drawn by Google for ad personalization. If you contact us, we also collect your email address and message. Sources, purposes and recipients are described in Sections 3, 4 and 11.

Sale and sharing. We do not sell personal information for money. However, allowing Google to use cookies and identifiers for personalized advertising may be considered “selling” or “sharing” personal information for cross-context behavioral advertising under California and other state laws. You can opt out on our Your Privacy Choices page, and we treat a Global Privacy Control (GPC) signal as a valid opt-out request where technically feasible. We do not knowingly sell or share the personal information of consumers under 16.

Sensitive personal information. We do not use or disclose sensitive personal information for purposes that would give you a right to limit it under the CPRA. Voice recordings are used only to provide the service you request and are not used to identify you.

Retention is described in Section 12. California residents may also request information about disclosures for direct marketing purposes under California’s “Shine the Light” law; we do not disclose personal information to third parties for their own direct marketing purposes.

17. Additional information for the EEA, UK and Switzerland (GDPR)

Legal bases. We process personal information on the following legal bases:

• Performance of a contract (Article 6(1)(b)): processing your Inputs to provide the result you requested, and running API accounts.
• Legitimate interests (Article 6(1)(f)): keeping the Service secure, preventing abuse and enforcing limits, our cookie-free first-party statistics, fixing errors, answering messages and defending legal claims. We have balanced these interests against your rights and kept the data involved to a minimum.
• Consent (Article 6(1)(a)): personalized advertising and non-essential cookies where consent is required, including Google Analytics and AdSense cookies. You can withdraw consent at any time without affecting earlier processing.
• Legal obligation (Article 6(1)(c)): responding to lawful requests and keeping records the law requires.

Your rights include access, rectification, erasure, restriction, data portability, objection (including an absolute right to object to direct marketing) and withdrawal of consent, as described in Section 15. You also have the right to lodge a complaint with your local data protection supervisory authority, or in the UK with the Information Commissioner’s Office. We would appreciate the chance to address your concern first, so please consider contacting us at contact@speechma.com.

Automated decision-making. We do not make decisions that produce legal or similarly significant effects about you based solely on automated processing. Our AI tools transform the content you submit; they do not make decisions about you.

18. Do Not Track and Global Privacy Control

Browsers offer a “Do Not Track” setting, but there is no common industry standard for how websites should respond to it, so we do not respond to it differently. We do recognize the Global Privacy Control (GPC) signal as a request to opt out of the sale or sharing of personal information for personalized advertising where technically feasible and required by law. See Your Privacy Choices for details.

19. Changes to this policy

We may update this Privacy Policy as the Service, the law or our practices change. We will post the updated version on this page and change the “Last updated” date above. If we make material changes, we will provide a more prominent notice, such as a banner on the website, before the change takes effect where required. We encourage you to review this page from time to time.