Privacy Policy

1. Scope

This Privacy Policy applies to VoiceCanvas, a text-to-speech service operated by ChuangXiangIT (“we,” “us,” or “our”). It covers information processed when you visit the website, create or use an account, generate speech, contact us, or purchase a subscription.

Paddle independently processes information when it sells a subscription as Merchant of Record. Its processing is described in the Paddle Privacy Notice.

2. Information we collect

Account and communication information

We process your email address, password authentication data, email-verification status, account identifiers, security and login records, and messages you send to support. Your password is stored as a protected password hash rather than readable text.

Text-to-speech inputs and generation records

When you request speech, we process and retain an administrative audit record containing:

• the text you submit and its character count;
• language, tone, selected voice, and voice-name snapshots;
• custom voice descriptions when you use that feature;
• generation time, status, provider request ID, and error information; and
• your account reference or, for legacy anonymous activity, a hashed identifier.

Usage and billing information

We process generation counters and rate-limit records to apply plan limits. For paid accounts, we receive customer and subscription identifiers, plan information, subscription status, renewal or cancellation timing, and event timestamps from Paddle. Paddle, not VoiceCanvas, collects and controls your complete payment-card details.

Device, analytics, and local settings

Hosting systems may process technical logs such as IP address, request time, browser or device information, requested route, and error diagnostics for delivery and security. Vercel Web Analytics provides aggregated page-view information such as route, referrer, approximate region, browser, operating system, and device type. Its default analytics do not use third-party cookies or create a profile that identifies you across websites.

VoiceCanvas stores your language choice in browser local storage undervoicecanvas-locale. You can remove it through your browser settings. Authentication may use strictly necessary cookies or tokens to keep you signed in and protect your account.

3. How we use information

We use information to:

• provide accounts, generate speech, stream audio, and enforce plan entitlements;
• verify email addresses and send transactional or service communications;
• process subscriptions, reconcile Paddle events, and provide billing support;
• prevent abuse, secure the Service, troubleshoot failures, and enforce our Terms;
• understand aggregate usage and improve performance and product experience; and
• meet legal, tax, accounting, fraud-prevention, and dispute-resolution obligations.

Depending on where you live, our legal bases may include performing our contract with you, complying with legal obligations, protecting legitimate interests in operating a secure and useful service, and consent where the law requires it. You may withdraw consent at any time, without affecting processing that occurred before withdrawal.

We do not sell personal information or use submitted generation text for targeted advertising.

4. How information is shared

We disclose information only as reasonably necessary to the following recipients:

• Speech provider: MiMo receives submitted text, voice selection or description, language, and synthesis controls to generate audio.
• Billing provider: Paddle processes checkout, taxes, recurring billing, receipts, fraud checks, cancellations, disputes, and refunds as Merchant of Record.
• Infrastructure providers: hosting, database, analytics, and email providers process data needed to run and secure VoiceCanvas.
• Professional advisers and authorities: information may be disclosed when required by law or reasonably necessary to establish, exercise, or defend legal claims, investigate abuse, or protect people and systems.
• Business transfers: information may transfer as part of a merger, financing, acquisition, reorganization, or sale of assets, subject to appropriate notice and safeguards.

Service providers may process information only for the services they supply to us and under their contractual and legal responsibilities.

5. Retention

We retain different categories for different periods:

• Account and subscription records remain while your account is active and afterward as reasonably necessary for support, security, disputes, and legal obligations.
• Generation audit records, including submitted text and metadata, remain stored until an administrator deletes them or an eligible deletion request is completed.
• Rate-limit buckets are short-lived operational records and are removed after their windows expire, subject to a brief cleanup period.
• Transaction and tax records may be retained for the periods required by Paddle and applicable accounting, tax, anti-fraud, and payment laws.
• Backups and security logs may remain for a limited period before being overwritten or isolated from routine use.

When retention is no longer necessary, we delete, anonymize, or isolate information unless law requires it to be kept.

6. Security and international transfers

We use reasonable administrative, technical, and organizational safeguards designed to protect information, including access controls, password hashing, transport encryption, and restricted administrative access. No online service can guarantee absolute security, so you should use a unique password and notify us if you suspect unauthorized access.

VoiceCanvas and its providers may process information in countries other than your own. Where required, we rely on recognized transfer mechanisms and contractual safeguards. The privacy and data-protection rules in those countries may differ from those where you live.

7. Your rights and choices

Depending on your location, you may have rights to request access, correction, deletion, restriction, objection, or portability; withdraw consent; or appeal a privacy decision. You may also complain to your local data-protection authority.

Send a request using the contact address below. Include the email associated with your account and enough detail for us to understand the request. We may ask you to verify your identity and may retain information when legally permitted or required, including for security, fraud prevention, transaction records, or legal claims. Authorized agents may submit requests where applicable, subject to proof of authority.

You can cancel a paid subscription through the Paddle customer portal, clear your saved locale in browser settings, and stop non-essential browser processing through available browser controls.

8. Children

VoiceCanvas is not directed to children who cannot legally consent to use of the Service or to processing of their information. If a child uses the Service, a parent or guardian must provide any authorization required by local law. Contact us if you believe a child provided personal information without appropriate authorization.

9. Changes to this Policy

We may update this Policy as the Service, our providers, or legal requirements change. We will revise the date at the top and provide additional notice when required. The updated Policy applies from its stated effective date.

Contact us

Questions or requests about this policy may be sent to ChuangXiangIT, the operator of VoiceCanvas, at security@chuangxiangit.com.