Privacy Policy

1. Information We Collect

We collect information necessary to operate the Service and process your synthesis requests:

• Profile Data: Email address, login credentials, and user name supplied via Supabase Authentication.
• Billing Data: Transaction details, order history, subscription state, and payment references from Razorpay checkout sessions. We do not store full credit card numbers; payment data is fully processed via Razorpay secure tokens.
• Input Data: The text and configuration inputs you submit for audio generation.

2. Key Encryption (AES-256-GCM)

MiloVoice manages pooled ElevenLabs API keys provided by administrators. To prevent key exposure:

• Keys are encrypted at rest using industry-standard AES-256-GCM (Galois/Counter Mode).
• Decryption keys are loaded into secure node runtime memory contexts during the allocator phase and are never printed in logs or sent back to the client interface.

3. Synthesis Chunks & Audio Deletion

When a speech synthesis request is dispatched, it is divided into character chunks.

• Individual chunk audio files (`.mp3`) are written temporarily to a private Supabase Storage bucket (`audio-chunks`).
• Once the worker finishes stitching the chunks, the temporary individual audio chunks are flagged for deletion to minimize storage bloat and ensure data hygiene.
• Stitched files are made available via signed URLs that automatically expire.

4. Cookies and Analytical Tracking

We use necessary operational cookies to authenticate your user sessions. We do not use cross-site tracker cookies or third-party marketing cookies.

5. Data Sharing and Third Parties

We share voice generation inputs with ElevenLabs for speech synthesis processing, and transaction info with Razorpay for billing processing. We do not sell, rent, or trade your personal information with other third-party companies.

6. Your Rights

You have the right to request access to your profile data, request correction of inaccurate data, or request deletion of your account. If you wish to delete your account, you can trigger this from the console or contact support. Please note that active billing records must be preserved for tax/financial compliance.