Privacy Policy - ttsmp3.net

ttsmp3.net is operated by Yedap Technologies, LLC. This Privacy Policy explains how we handle information when you use our website and related text-to-speech services, create an account, make a payment, or contact support.

For privacy questions or requests concerning your personal information, contact support@ttsmp3.net.

Contact privacy support

Information we collect and how we use it

Account information: email address, optional name, account identifiers, password hashes for password-based accounts, and the country inferred at registration. We use this information to create and secure accounts and provide access to the service.
Google sign-in: if you choose Google sign-in, we receive your Google account identifier, name, email address, profile image, and authentication information. We use this information to sign you in and link your account.
Speech generation: we process the text or SSML you submit, voice and language selections, and speech settings to generate audio. Submitted text is sent to Microsoft Azure Speech for synthesis; it is not saved in our application database. Generated audio is stored temporarily for playback and download.
PDF conversion: PDF text extraction takes place in your browser. The original PDF is not uploaded by this feature; the extracted text is sent for speech synthesis when you generate audio.
Subscriptions and usage: we keep plan details, access entitlements, subscription and transaction identifiers, usage counts, generation timestamps, and related records to deliver paid features, enforce quotas, and support billing.
Payment records: Paddle processes checkout payments. We receive and store transaction notifications and related customer, billing, and payment-method summary information. We do not collect or store full payment card numbers or card security codes on our servers.
Technical and support information: our infrastructure processes IP addresses, browser and request information, and service diagnostics to deliver and protect the service. Certain extension usage records include a hashed IP identifier associated with the account. If you contact us, we also process your email address, message, and information you choose to provide to resolve your request.

Cookies and browser storage

We use cookies for sign-in and language preferences. Some text editors use your browser's session storage to preserve draft text and settings during your browsing session. You can clear this data using your browser controls; blocking necessary cookies may prevent sign-in from working.

Data storage and processing locations

We host the service on Cloudflare Workers. Account, authentication, subscription, payment, and usage records are stored in Cloudflare D1. As of the date of this policy, our D1 database operates in western North America, and our Cloudflare R2 bucket for generated audio is located in eastern North America.

These locations describe our current primary database and audio storage. Requests and cached content may also be processed through Cloudflare's global network. Microsoft Azure Speech, Paddle, and Google process information through their own services, which may operate outside your country. The locations of our primary storage do not mean that all processing is limited to those regions.

Data security

We use HTTPS/TLS to protect data in transit between your browser and our service and for requests to our speech and payment providers. Cloudflare D1 and R2 encrypt stored data at rest using AES-256. Password-based accounts use salted password hashes rather than plaintext passwords. Service credentials are kept on the server and are not included in public client code.

Generated audio uses a download URL containing a randomly generated filename. Anyone with the complete URL can access the audio without signing in, so treat the link as sensitive and share it only with intended recipients. Encryption at rest does not make a shared download link private. No system can guarantee absolute security.

Data retention and deletion

Generated audio: an automatic cleanup task runs every hour and deletes generated audio files that have been stored for more than 24 hours. Under normal operation, files are removed from our audio storage approximately 24–25 hours after creation. A failed or delayed cleanup run may extend that period until a later successful run. This rule covers generated conversions and previews, not the site's reusable voice samples.
Cached and downloaded copies: removing a file from our audio storage does not immediately remove copies already cached by a delivery network or browser. Cached copies may remain accessible temporarily, and files you or other recipients have downloaded are outside this cleanup process.
Account and authentication information: these records are separate from generated audio and remain available to support your account. They are not automatically deleted after 24 hours.
Subscription, payment, and usage records: we retain these records to manage access, billing, refunds, disputes, fraud prevention, and applicable legal obligations. There is currently no fixed automatic deletion schedule for account, authentication, subscription, payment, or usage records.
Deletion requests: email support@ttsmp3.net to request deletion of your account or personal information. We may need to verify account ownership. We review the data covered by your request and any records that must be retained for applicable legal obligations or unresolved transactions or disputes, and explain any limitations when responding. Independent records held by our providers are also subject to their policies and applicable law.

Request account or data deletion

Third-party sharing and disclosure

We share information with the following providers for the functions described below. The information shared depends on the features you use; for example, Google receives sign-in information when you choose Google sign-in, and Paddle receives checkout information when you make a payment.

Cloudflare — hosting, network delivery, database storage, and audio storage. Cloudflare processes requests and related technical information and stores the account, billing, usage, and audio data needed to operate our service.
Microsoft Azure Speech — text-to-speech generation. We send submitted text or SSML and voice settings to Azure Speech to produce audio. Our synthesis requests do not include your account email address or payment details.
Paddle — checkout, payment processing, subscription billing, and related fraud and transaction management. We provide checkout information such as your email address, internal user identifier, selected plan, and checkout metadata. Paddle collects payment and billing details directly and returns transaction information so we can activate and manage your purchase.
Google — optional Google sign-in. Google processes authentication requests and shares the account information needed to sign you in, according to your authorization and Google's policies.
Legal disclosures — we may disclose relevant information where required by applicable law or a valid legal request, or where necessary to address fraud, security incidents, or legal claims.

Your privacy rights

Depending on your location and applicable law, you may have rights to access your personal information, correct inaccuracies, request deletion, restrict or object to processing, or receive a portable copy. Contact support@ttsmp3.net to exercise your rights. We respond within the time required by applicable law and may request information needed to verify your identity.

Children's information

Our service is intended for people aged 16 or older, as stated in our Terms of Service. If you believe a child under 16 has provided personal information, contact support@ttsmp3.net so we can review and address it.

Policy updates and contact

We update this policy when our practices change and show the revision date above. For questions about this policy or our handling of your information, contact support@ttsmp3.net.