Privacy Policy

Introduction

VoxCPM ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI voice generation platform (the "Service"), including text-to-speech (TTS), voice cloning, and voice design features.

Information We Collect

Account Information

When you create an account or sign in via Google OAuth, we collect your name, email address, and profile image (if provided by Google). For email/password authentication, we store your credentials in hashed form.

Voice Data

• Text Input: The text you enter for TTS generation, voice cloning, or voice design.
• Reference Audio: Audio files you upload for voice cloning (3-30 seconds in length).
• Generated Audio: The synthesized speech output produced by our AI models.

Usage Data

We collect information about how you interact with the Service, including generation requests, feature usage, credit consumption, and device/browser type.

Cookies and Similar Technologies

We use essential cookies for:

• Session management (better-auth.session_token)
• Language preferences (PARAGLIDE_LOCALE)
• Anonymous user identification (voice_anon_id, expires after 1 day)
• Theme preferences

We also use Google Analytics to understand how users interact with our site. You can opt out via your browser settings.

Payment Information

Payment processing is handled by trusted third-party providers (Stripe, PayPal, etc.). We do not store full credit card numbers on our servers.

How We Use Your Information

• To provide the Service: Processing TTS, voice cloning, and voice design generation requests through our AI pipeline (ComfyUI + VoxCPM models).
• To manage credits: Tracking credit grants, consumption (FIFO), and refunds.
• To improve our models: Aggregated, anonymized usage patterns help us optimize inference performance.
• To communicate with you: Service updates, security alerts, and support responses.
• To prevent abuse: Detecting and preventing bulk account creation, credit farming, and unauthorized access.

Data Storage and Processing

• Audio files are stored on Cloudflare R2 object storage and are accessible via unique, unguessable URLs.
• Generated audio history for logged-in users is retained by plan: 7 days for free users and 30 days for Pro users.
• Voice models saved to "My Voices" are retained until you delete them.
• Anonymous user data is automatically expired and deleted after 1 day.
• Text inputs are transmitted to our ComfyUI inference servers for processing and are not retained after generation completes.
• Account data is stored in our database and retained until account deletion.

Data Sharing and Third-Party Services

We rely on the following third-party services to operate:

| Service | Purpose | Data Shared | | ---------------- | ------------------- | --------------------------- | | Google OAuth | User authentication | Email, name, profile image | | ComfyUI Servers | AI voice generation | Text input, reference audio | | Cloudflare R2 | Audio file storage | Generated audio files | | Stripe / PayPal | Payment processing | Payment details | | Google Analytics | Usage analytics | Anonymized page views |

We do not sell your personal information or voice data to third parties.

Data Security

We implement industry-standard security measures:

• AES-256-GCM encryption for sensitive configuration data
• HTTPS encryption for all data in transit
• Secure session management via better-auth
• Database access controls and IP-restricted ComfyUI nodes
• Regular security audits

Your Rights

You have the right to:

• Access your personal data
• Download your generated audio files
• Delete your voice models, generation history, and account
• Withdraw consent for data processing

You can exercise these rights through your account settings or by contacting us.

Data Retention

• Free logged-in users: Voice generation history is retained for 7 days; voice models saved to "My Voices" are retained until you delete them.
• Pro users: Voice generation history is retained for 30 days; voice models saved to "My Voices" are retained until you delete them.
• Anonymous users: Voice generations and related data are automatically deleted after 1 day.
• Deleted data: Audio files are removed from R2 storage and database records are hard-deleted.

Children's Privacy

Our Service is not intended for children under 13. We do not knowingly collect personal information from children.

Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via the Service or email. Continued use of the Service after changes constitutes acceptance.

Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at: yanaimingvov@gmail.com