Privacy Policy
Last updated: October 21, 2026
This Privacy Policy explains how Xarvox ("we," "us," or "our") collects, uses, and protects your personal information when you use our Service. We are committed to protecting your privacy and complying with the GDPR, CCPA, and other applicable data protection laws.
1. Data We Collect
Account data:
- Email address
- Password (hashed; we never see your plain password)
- Account creation date and account ID
Content you upload:
- Videos you upload for dubbing
- Audio samples you upload for voice cloning
- Text you submit to the TTS studio
- Output files generated from your uploads
Payment data:
- Billing name, email, and address (processed by Paddle — we do not store your card details)
- Subscription tier and billing history
Usage data:
- Job history, credits used, technical logs
- IP address, browser, and device information
2. How We Use Your Data
- To provide the Service — process your videos, run dubbing, generate audio
- To manage your account and subscription
- To process payments via Paddle
- To send transactional emails (job complete, payment receipt)
- To detect abuse, fraud, and violations of our Terms
- To improve the Service through aggregated, anonymous analytics
3. Legal Basis (GDPR)
If you are in the European Economic Area, we process your data under the following legal bases:
- Contract: to perform the Service you requested
- Legitimate interest: fraud prevention, service improvement
- Consent: where you have opted into communications
- Legal obligation: tax, accounting, and compliance
4. Data Sharing
We share your data only with the third parties needed to run the Service:
- Paddle.com Market Limited — payment processing, invoicing, tax
- Supabase — authentication and database (data stored in EU/US regions)
- Modal Labs — GPU processing for AI models
- Cloudflare — translation AI and CDN
- Vercel — frontend hosting
- Render — backend hosting
- Resend / Brevo — transactional email delivery
We never sell your data. We never use your content or voice samples to train AI models.
5. Data Retention
- Video uploads and outputs: retained per your plan (1 to 90 days depending on tier), then permanently deleted.
- Voice samples: retained until you delete them or close your account.
- Account data: retained while your account is active. After deletion, we keep minimal records for tax and legal compliance (typically 7 years).
- Server logs: retained up to 90 days.
6. Your Rights
Depending on your jurisdiction, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Delete your data ("right to be forgotten")
- Export your data in a portable format
- Object to or restrict processing
- Withdraw consent for optional communications
To exercise any of these rights, email privacy@xarvox.com. We respond within 30 days.
7. Cookies
We use essential cookies for authentication and session management. We do not use advertising or third-party tracking cookies. Paddle may set cookies during checkout to prevent fraud.
8. Children
The Service is not intended for children under 13. We do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.
9. Security
We use industry-standard security measures: encrypted connections (HTTPS), hashed passwords, JWT-based authentication, and role-based access controls. No system is 100% secure; if you discover a vulnerability, please report it to security@xarvox.com.
10. International Transfers
Your data may be processed in countries other than your own, including the United States and the European Union. Where required, we use Standard Contractual Clauses approved by the European Commission to protect your data.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be announced via email or in the dashboard.
12. Contact
Privacy questions or requests: privacy@xarvox.com