Privacy Policy

1. INTRODUCTION

Welcome to EchoAI ("we," "our," "us"). We respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI voice cloning service at tryechoai.com (the "Service").

By using EchoAI, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use our Service.

2. INFORMATION WE COLLECT

2.1 Personal Information You Provide

When you register and use EchoAI, we collect:

Account Information:

• Email address
• Username
• Password (encrypted)
• Account creation date

Payment Information:

• Billing name and address
• Payment method details (processed securely by Stripe)
• Transaction history
• Subscription status

Note: We do not store your full credit card numbers. All payment processing is handled securely by Stripe, our payment processor.

2.2 Voice Data

Voice Samples:

• Audio files you upload to clone your voice
• Processed voice models created from your samples
• Voice clone settings and preferences

Generated Audio:

• Text inputs you provide for audio generation
• Audio files generated using your cloned voice
• Tone and style selections
• Generation timestamps

2.3 Usage Information

We automatically collect:

Service Usage:

• Features you use and how often
• Number of audio generations
• Voice clones created
• Login activity and session data

Technical Information:

• IP address
• Browser type and version
• Device type and operating system
• Referring URLs
• Pages viewed and time spent

Performance Data:

• Error logs and debugging information
• Service performance metrics
• API response times

2.4 Communications

If you contact us:

• Support request content
• Email correspondence
• Feedback and survey responses

3. HOW WE USE YOUR INFORMATION

3.1 To Provide and Maintain the Service

• Create and manage your account
• Process voice cloning requests
• Generate audio from text using your voice
• Store your voice data and generated audio
• Provide customer support
• Process payments and billing

3.2 To Improve and Develop the Service

• Analyze usage patterns to improve features
• Develop new functionality
• Optimize service performance
• Fix bugs and technical issues
• Conduct research and testing

3.3 To Communicate With You

• Send service-related notifications
• Respond to your requests and inquiries
• Send billing and payment confirmations
• Notify you of service updates or changes
• Send security alerts when necessary

Marketing Communications: We will only send promotional emails if you opt-in. You can unsubscribe at any time.

3.4 For Security and Legal Compliance

• Detect and prevent fraud or abuse
• Enforce our Terms of Service
• Comply with legal obligations
• Protect our rights and property
• Respond to legal requests

4. THIRD-PARTY SERVICE PROVIDERS

We share your information with trusted third-party services that help us operate:

4.1 ElevenLabs

Purpose: AI voice cloning and text-to-speech generation

Data Shared: Voice samples, text inputs, generation requests

Location: United States

Privacy Policy: https://elevenlabs.io/privacy

4.2 Stripe

Purpose: Payment processing and subscription management

Data Shared: Billing information, payment method, transaction data

Location: United States

Privacy Policy: https://stripe.com/privacy

4.3 Vercel

Purpose: Application hosting and infrastructure

Data Shared: Service usage data, technical logs

Location: United States

Privacy Policy: https://vercel.com/legal/privacy-policy

4.4 Supabase

Purpose: Database hosting and authentication

Data Shared: Account data, usage data, voice metadata

Location: United States

Privacy Policy: https://supabase.com/privacy

Third-Party Control: We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.

5. DATA RETENTION

5.1 Active Accounts

We retain your information for as long as your account is active or as needed to provide you with the Service.

5.2 Account Deletion

When you delete your account:

• Voice data and generated audio: Deleted within 30 days
• Account information: Deleted within 30 days
• Billing records: Retained for 7 years as required by tax law
• Anonymized usage data: May be retained for analytics

5.3 Inactive Accounts

If your account is inactive for 24 months, we may delete your data after providing 30 days' notice to your registered email.

6. DATA SECURITY

We implement industry-standard security measures to protect your information:

Technical Safeguards:

• Encryption of data in transit (TLS/SSL)
• Encryption of data at rest
• Secure password hashing (bcrypt)
• Regular security audits
• Access controls and authentication

Operational Safeguards:

• Limited employee access to personal data
• Confidentiality agreements with staff
• Incident response procedures

However: No method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

7. YOUR PRIVACY RIGHTS

Depending on your location, you may have the following rights:

7.1 Access and Portability

• Right to Access: Request a copy of your personal data
• Right to Portability: Receive your data in a structured, machine-readable format

How to Exercise: Email tryechoai@gmail.com with subject "Data Access Request"

7.2 Correction and Deletion

• Right to Correct: Update inaccurate or incomplete information
• Right to Delete: Request deletion of your personal data

How to Exercise: Update information in your account settings, or email tryechoai@gmail.com with subject "Data Deletion Request"

7.3 Restriction and Objection

• Right to Restrict: Limit how we use your data
• Right to Object: Object to certain data processing activities

How to Exercise: Email tryechoai@gmail.com with your specific request

7.4 Withdrawal of Consent

If we process your data based on consent, you may withdraw that consent at any time. This does not affect the lawfulness of processing before withdrawal.

7.5 Response Time

We will respond to your requests within 30 days. If we need more time, we'll let you know.

8. COOKIES AND TRACKING

8.1 Essential Cookies

We use essential cookies to:

• Maintain your login session
• Remember your preferences
• Ensure security

These are necessary for the Service to function.

8.2 Analytics Cookies

We may use analytics services to understand how you use EchoAI:

• Page views and navigation
• Feature usage patterns
• Performance metrics

You can disable analytics cookies in your browser settings.

8.3 No Third-Party Advertising Cookies

We do not use cookies for third-party advertising or tracking across other websites.

9. CHILDREN'S PRIVACY

EchoAI is not intended for users under 18 years of age. We do not knowingly collect personal information from children.

If we discover we have collected information from a child under 18:

• We will delete it promptly
• We will terminate the account
• We will notify the email address on file

If you believe a child has provided us with personal information, contact us immediately at tryechoai@gmail.com.

10. INTERNATIONAL DATA TRANSFERS

Our Service is operated from Canada. If you access EchoAI from outside Canada, your information may be transferred to, stored, and processed in:

• Canada
• United States (through our service providers)

By using the Service, you consent to this transfer. We ensure appropriate safeguards are in place for international transfers.

For EU/UK Users: We rely on Standard Contractual Clauses approved by the European Commission for transfers outside the EU/UK.

11. CALIFORNIA PRIVACY RIGHTS (CCPA)

If you are a California resident, you have additional rights:

• Right to Know: What personal information we collect and how we use it
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: Opt-out of the "sale" of personal information (Note: We do not sell personal information)
• Right to Non-Discrimination: We will not discriminate against you for exercising your rights

To exercise these rights: Email tryechoai@gmail.com with subject "California Privacy Request"

12. CANADIAN PRIVACY RIGHTS (PIPEDA)

As a Canadian company, we comply with the Personal Information Protection and Electronic Documents Act (PIPEDA).

You have the right to:

• Know why we collect your information
• Access your personal information
• Challenge the accuracy of your information
• Request correction or deletion
• File a complaint with the Privacy Commissioner of Canada

To exercise these rights: Email tryechoai@gmail.com

13. EU/UK PRIVACY RIGHTS (GDPR)

If you are in the EU or UK, you have rights under the General Data Protection Regulation (GDPR):

Legal Basis for Processing:

• Contract Performance: To provide the Service you subscribed to
• Legitimate Interests: To improve our Service and prevent fraud
• Consent: For marketing communications (opt-in only)
• Legal Obligation: To comply with tax and financial regulations

Your GDPR Rights:

• Right to access
• Right to rectification
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object
• Right to withdraw consent
• Right to lodge a complaint with your supervisory authority

Data Protection Officer: For GDPR inquiries, email tryechoai@gmail.com with subject "GDPR Request"

14. DATA BREACH NOTIFICATION

In the event of a data breach that may compromise your personal information:

• We will notify affected users within 72 hours of discovering the breach
• We will notify relevant regulatory authorities as required
• We will provide information on steps you can take to protect yourself

15. BUSINESS TRANSFERS

If EchoAI is involved in a merger, acquisition, or sale of assets:

• Your information may be transferred to the new owner
• We will notify you via email before your information is transferred
• The new owner must honor this Privacy Policy

16. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect:

• Changes in our practices
• Legal or regulatory requirements
• New features or services

Notice of Changes:

• Material changes will be notified via email 30 days before taking effect
• Continued use after changes constitutes acceptance
• The "Last Updated" date at the top shows when changes were made

We encourage you to review this Privacy Policy periodically.

17. CONTACT US

If you have questions or concerns about this Privacy Policy or our data practices:

Email: tryechoai@gmail.com
Website: https://tryechoai.com
Response Time: We aim to respond within 3-5 business days

For Privacy-Specific Inquiries:
Email tryechoai@gmail.com with subject line: "Privacy Inquiry"

For Data Subject Requests:
Email tryechoai@gmail.com with subject line: "Data Rights Request"

18. REGULATORY AUTHORITIES

If you believe we have not addressed your privacy concerns adequately, you have the right to lodge a complaint with:

Canada:
Office of the Privacy Commissioner of Canada
Website: https://www.priv.gc.ca
Email: info@priv.gc.ca

California (US):
California Attorney General
Website: https://oag.ca.gov/privacy

EU/UK:
Your local data protection authority
EU List: https://edpb.europa.eu/about-edpb/board/members_en

This Privacy Policy is effective as of November 18, 2025 and applies to all users of EchoAI.