Privacy Policy

The data controller is VOICELY STUDIO, a sole proprietorship established in Islamabad, Pakistan, operator of tryvoicely.com. You can reach us about anything in this policy at administrator@tryvoicely.com.

We have not appointed an Article 27 representative in the EU or UK. If you are in the EU or UK, write to us directly at the address above and we will answer you as we would through a representative.

• Text you submit for generation (and a normalized version used for caching and de-duplication).
• Generated audio (MP3) and related metadata — voice selection, language, timestamps.
• Account data if you sign in — your email address and the display name and profile identifier supplied by your sign-in provider.
• Request data — IP address (or an approximate network identifier), user-agent, referrer, and performance logs, used to protect the service and fix faults.
• Purchase data — your email, credits bought, amount, payment method and transaction reference. Never card numbers, CVV, or bank details.
• Android payment beta requests — if you ask to join the Voicely Android payment beta, the Voicely account making the request, the Google account email you give us for the Play Store, your country (from IP-based location at the time) and the request status. We use the Play email to administer your closed-test access (adding you to, and removing you from, our Google Play tester list) and to detect duplicate or misrouted access requests. It is never used to decide who owns a purchase or which Voicely account receives credits: that is the account signed in to the app when you buy. The request details are emailed to our own admin inbox for review, and when a request is approved we email the invitation link and next steps to the Voicely account's login email (never to the Play email).
• If you use the Contact form, the email address and message you submit.

Under the UK and EU GDPR we must have a lawful basis for each purpose. Ours are:

• Generating and delivering your audio — performance of our contract with you (Art. 6(1)(b)).
• Running your account and processing purchases — performance of a contract (Art. 6(1)(b)); keeping transaction records afterwards is a legal obligation (Art. 6(1)(c)).
• Caching, de-duplication, rate limits, abuse and fraud prevention, and security — our legitimate interests in keeping the service available, affordable and safe (Art. 6(1)(f)).
• Improving quality — evaluation, debugging and tuning — legitimate interests (Art. 6(1)(f)). You can object to this and we will stop; see the section below.
• Showing generations as public examples — legitimate interests (Art. 6(1)(f)), and only ever for content you chose to share via a share link. You can have any example removed on request.
• Analytics cookies — your consent where consent is required (Art. 6(1)(a)), withdrawable at any time; see Cookies below.

Improvement work and public examples rest on legitimate interests, which means you have an absolute right to object — and objecting must cost you nothing.

Public share links are different: they exist because you created them. Delete the link, or ask us to, and it stops being accessible.

If you create a public share link (for example a /share link), the content behind that link may be accessible to anyone who has it. Share only what you are comfortable making public, and ask us to remove anything you change your mind about.

• Passwords, OTP codes, bank details, CNIC/SSN, private addresses, or confidential personal data.
• Highly sensitive private information about yourself or other people.
• Special-category data under Art. 9 GDPR — health, religious or political beliefs, biometric or sexual-life data. We have no lawful basis to process it and do not want it.

Concrete periods, not “as long as necessary”:

• Generated audio files — short clips are deleted automatically about 15 days after generation. Longer pieces are kept for the life of your account and deleted when you delete it. A clip you published as a public example stays up until you or we remove it, and in any case is deleted when the account closes.
• Submitted text and generation metadata — kept while your account is open, so your history and caching work.
• Web and request logs, including IP addresses — about 14 days, then rotated out.
• Account data — until you ask us to delete the account, plus up to 30 days for backups to age out. Request deletion from the bottom of your account page or by emailing administrator@tryvoicely.com from your account email. We complete it within 30 days; if you sign in or use the account before then, the request is cancelled. We keep payment records (with your email) as described below, and a one-way fingerprint of your email so free credits cannot be claimed again.
• Android payment beta requests — kept with your account data: until you ask us to delete the account, plus up to 30 days for backups. If you were approved, we also remove your Play email from our Google Play tester list when the account is deleted.
• Purchase and transaction records — retained for up to 7 years to meet tax, accounting and fraud-prevention obligations. These survive account deletion because the law requires it.
• Abuse and enforcement records — kept where needed to prevent repeat abuse or to answer a lawful request.

We do not sell your data. It reaches these parties only to run the service:

• Google Cloud Platform — hosting, and speech synthesis via Google Cloud Text-to-Speech and Google Gemini. Your text is sent to Google to produce the audio.
• Google Analytics — usage measurement, where you have consented to analytics cookies.
• Lemon Squeezy — merchant of record for card payments; they handle your card data on their own PCI-DSS-compliant systems, governed by the Lemon Squeezy Privacy Policy.
• Easypaisa — payments inside Pakistan complete on Easypaisa’s own systems; we record only your email, the amount and the transaction reference.
• Google Play — distributes the Voicely Android app to closed-beta testers (if you request access and are approved, your Play email is added to our tester list in the Google Play Console) and processes in-app payments on Google's own systems, under Google Play's terms and Google's privacy policy. We receive the order details needed to credit your account (order reference, product, amount, currency and country), never your payment card details.
• Authorities — where our Acceptable Use Policy requires it, or in response to a lawful request.

Voicely is operated from Pakistan, and runs on Google Cloud Platform infrastructure. If you are in the EU or UK, your data is therefore transferred outside the EEA and the UK.

Pakistan has no EU adequacy decision. For processing carried out by Google on our behalf, transfers are covered by the Standard Contractual Clauses incorporated into Google Cloud’s Data Processing Addendum. For our own access from Pakistan, we rely on appropriate safeguards including access limited to the site operator, encrypted transport, and the retention limits set out above. You may request further detail at any time.

• Essential cookies — set when you sign in, to keep you signed in and to protect the sign-in form against cross-site request forgery. The service cannot work without these and they are not used for advertising.
• Analytics cookies — set by Google Analytics, to measure which pages and features are used and to group the requests from one visit together.

We do not use advertising or cross-site tracking cookies, and we do not sell data to advertisers.

Wherever you live, we will honour all of the following. If you are in the EU or UK these are your rights under the GDPR:

• Access — a copy of the personal data we hold about you.
• Rectification — correction of anything inaccurate.
• Erasure — deletion of your account and associated data, except records we must keep by law (see Retention).
• Restriction — ask us to pause processing while a dispute is resolved.
• Portability — your text and generation history in a machine-readable file.
• Objection — object to anything based on legitimate interests, including improvement use and public examples. See the opt-out section.
• Withdraw consent — at any time, without affecting what was done before.

Email administrator@tryvoicely.com. We answer within 30 days, free of charge. We may ask you to confirm you control the account address before acting.

Complaints. If you are unhappy with our answer you may complain to your data protection supervisory authority — in the UK the Information Commissioner’s Office (ico.org.uk), and in the EU the authority for the country where you live. We would appreciate the chance to put it right first.

Voicely is not intended for children. You must be at least 16 to use the service, and at least 18 to buy credits — see our Terms of Use. We do not knowingly collect data from children below these ages. If you believe a child has used Voicely, email administrator@tryvoicely.com and we will delete the account and its data.

Traffic is encrypted in transit. Access to the production system and database is limited to the site operator. No system is perfectly secure, and we do not claim otherwise — if a breach affects your rights we will notify you and the relevant supervisory authority as the law requires.

We may update this policy as the service changes; the “last updated” date above reflects the current version, and we will flag material changes on the site. Questions, requests, or complaints: administrator@tryvoicely.com or the Contact page.