1. Introduction

This Privacy Policy describes how WebVoice ('we', 'our', 'us') collects, uses, and protects your personal information in accordance with:

Regulation (EU) 2016/679 (GDPR)
Italian Legislative Decree 196/2003 (Privacy Code)
Regulation (EU) 2024/1689 (AI Act)

2. Data Controller

The data controller is WebVoice. For inquiries, contact: privacy@webvoice.com

3. Data We Collect

3.1 Account Information

Username and email address
Password (encrypted)
Language preference

3.2 Usage Data

Text content submitted for TTS generation (limited to 5000/50000 characters for free/premium users)
Audio files uploaded for STT transcription (limited to 50.0 MB/500.0 MB for free/premium users)
Generated audio files
Transcribed text
Credit transactions and usage history
API request logs

Files or text exceeding the service limits are rejected before processing and are not stored.

3.3 Technical Data

IP address
Browser type and version
Device information
Access timestamps

4. How We Use Your Data

We use your data to:

Provide and maintain our service
Process TTS and STT requests
Manage your account and credits
Send service-related notifications
Improve our AI models (using anonymized data)
Comply with legal obligations
Prevent fraud and abuse

5. Legal Basis for Processing

We process your data based on:

Contract performance: To provide the service you requested
Legitimate interest: Service improvement and security
Legal obligation: Compliance with Italian and EU laws
Consent: Where explicitly requested

6. Data Retention

We retain your data for:

Account data: For the duration of your account plus 2 years
Generated content: 90 days (unless you request deletion)
Transaction records: 10 years (legal requirement)
API logs: 1 year

7. Data Sharing

We do NOT sell your data. We may share data with:

Service providers (hosting, email) under strict contracts
Legal authorities when required by law
AI model providers (anonymized data only)

8. Your Rights (GDPR)

Under GDPR, you have the right to:

Access your personal data
Rectify inaccurate data
Erase your data ('right to be forgotten')
Restrict processing
Data portability
Object to processing
Withdraw consent
Lodge a complaint with the Italian Data Protection Authority (Garante)

To exercise these rights, contact: privacy@webvoice.com

9. AI Processing Disclosure

Your data is processed by AI systems (Kokoro ONNX for TTS, Faster Whisper for STT). These systems:

Process data on our servers (not sent to third parties)
Use anonymized data for model improvement
Do not store your content after processing (unless you save it)

See our AI Policy for detailed information.

10. Security Measures

We implement:

Encryption of data in transit (HTTPS/TLS)
Encryption of sensitive data at rest
Secure password hashing
Regular security audits
Access controls and authentication

11. International Transfers

Your data is stored and processed within the European Union. If data must be transferred outside the EU, we ensure adequate safeguards are in place (Standard Contractual Clauses, adequacy decisions).

12. Children's Privacy

Our service is not intended for users under 16 years of age. We do not knowingly collect data from children. If you believe we have collected data from a child, please contact us immediately.

13. Changes to Privacy Policy

We may update this Privacy Policy. Significant changes will be notified via email or service notification.

14. Contact

For privacy inquiries: privacy@webvoice.com

Data Protection Officer: dpo@webvoice.com