Your audio and your privacy.
Last updated October 4, 2026.
Before generation
Choosing a file, decoding audio, and recording with your microphone happen in your browser. The studio sends prepared audio or text only when you request generation. The microphone stops when recording ends. We do not request camera or location access.
AI processing
Generation sends your input through our Cloudflare-hosted service to ElevenLabs. We do not persist original uploads in our audio bucket. Input exists temporarily in request memory. ElevenLabs processes audio and text under its own account settings and privacy policy. Standard API access is not zero retention. We do not promise a deletion deadline for provider-held data. Do not submit confidential conversations or sensitive personal data.
Generated files
Generated previews and full takes are stored in private Cloudflare R2 storage. They are accessible only to the owning browser session or a session signed in to the same account with a verified email. Access expires one hour after generation. A cleanup job runs every 15 minutes to delete expired outputs, so normal storage time is up to approximately 75 minutes. Failures or a cleanup backlog can delay physical deletion; the one-hour access expiry still applies.
Session and usage data
An essential HttpOnly cookie identifies your anonymous account for up to one year. Email sign-in uses a separate server-validated session lasting up to 30 days. Signing out revokes that session. Our database stores your verified email, a random account ID, subscription status, Stripe identifiers, and usage counters. An IP-derived hash is used for abuse limits; the application does not store the raw IP in its usage table. Free usage records normally expire after two days; paid usage counters expire after the billing period plus one day. Subscription and account records remain until an operator handles an applicable deletion request.
Email sign-in
Cloudflare Email Service delivers one-time sign-in codes to your email. Codes expire after 10 minutes and can be used once. We store a keyed hash of each code, not the code itself. Pending email verification records and expired sessions are removed by the scheduled cleanup job. We use hashed email and IP identifiers to limit abuse. Your email is used for authentication and account service, not marketing. Account records remain until an applicable deletion request is handled through Support.
Payments and service providers
Stripe handles card details and checkout information. We store customer and subscription identifiers, not full card numbers. Payment event IDs are retained for approximately 30 days for deduplication. Cloudflare and Stripe may keep security, transaction, or operational records according to their own policies. Infrastructure logs may include request metadata; application logs do not intentionally include uploaded audio, text content, API keys, or sign-in codes.
Your choices
You can stop before generation, download a take before it expires, or cancel renewal in your billing portal. Clearing cookies removes browser access but does not cancel a subscription. Sign in again with your verified email to restore access. For data requests or service questions, use the contact on the support page. This version does not include advertising or optional analytics tracking.