VoiceCraft
Back to home

Privacy Policy

Last updated: 06.10.2026

Bruo Systems Limited, 2c Grangegorman Lower, Smithfield, Dublin, Ireland (Reg. 765033) ("we", "us", "our") operates VoiceCraft and respects your privacy. This policy explains what personal data we collect when you use the Service, why we collect it, how we use and share it, and the rights you have. VoiceCraft is a prepaid-credit service that generates narrated audiobook audio from manuscript text using third-party AI text-to-speech models.

What we collect

We collect the following categories of data:

  • Your email address, which you use to sign in and which we use to send one-time codes.
  • Your name, if you add it on your profile page. It is optional and is shown on your invoices.
  • Your credit balance, purchase history, and the invoices generated for your purchases.
  • When you buy credits: the cardholder name and billing address you enter at checkout. Your card details pass through our server only to be sent, encrypted, to our payment provider, together with that name and address; we never store your card number or security code.
  • The manuscript text you paste or upload, which we process to generate narration. When you upload a PDF, DOCX or TXT file, the text is extracted in your browser and only the text reaches us.
  • The audio we generate from your text, which we host so you can play, download and share it.
  • Configuration choices such as the narrator voice and quality lane you select.
  • What you send through the contact form: your name, email address and message.
  • Your IP address and the country it indicates, when you sign up, sign in or pay, to check that the Service is available where you are and to prevent fraud and abuse.
  • Your language and currency choices, kept in cookies on your device (see the Cookie Policy).
  • Basic technical and log data needed to operate the Service, such as timestamps, request and error logs, and limited device or browser information.

We do not ask for and do not need special-category data. Please do not submit manuscript text that contains sensitive personal information unless you have a lawful basis to process it.

How we use it

We use this data to authenticate you, operate and deliver the Service, generate and host your narration, process credit purchases and issue invoices, provide support, maintain security, prevent abuse and fraud, and comply with our legal obligations. We do not sell your data and we do not use your manuscript text or generated audio to advertise to you.

Legal bases

Where the GDPR applies, we rely on the following legal bases: performance of our contract with you (to provide the Service and process purchases); our legitimate interests (to operate the Service securely, prevent abuse, and improve reliability), balanced against your rights; and compliance with legal obligations.

Subprocessors

We use a small number of trusted subprocessors who process data only on our instructions and only as needed to provide the Service:

  • AI text-to-speech providers, which receive your manuscript text to generate narration.
  • A storage and hosting provider, which stores your generated audio and serves the application.
  • A payment provider, which processes card payments and receives your card details, cardholder name and billing address.
  • An email provider, which delivers your one-time sign-in codes.
  • A messaging service, through which our team receives notices of sign-ups, sign-ins and purchases; a notice can include your email address, IP address and country.

Retention

We keep each kind of data only as long as it is needed:

  • Account and sign-in data (your email address, name, sessions, one-time codes): while your account is active. One-time sign-in codes expire within minutes of being issued.
  • Manuscripts and generated audio: while your account is active, or until you delete a manuscript or chapter yourself.
  • Credit ledger, orders and invoices: while your account is active, so you can see your history and download your invoices.
  • Technical logs, including contact-form messages: for a short operational period, then discarded.

When you delete your account from Settings, all of the above, including your credit ledger, orders and invoices, is permanently removed with it; nothing is kept in a separate archive after deletion. Download any invoice you need before you delete your account.

Your rights

Subject to applicable law, you have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate or incomplete personal data.
  • Delete your personal data and account.
  • Export your data in a portable format.
  • Object to or restrict certain processing.
  • Withdraw consent where processing is based on consent.
  • Lodge a complaint with your local data protection authority.

You can delete your account at any time from Settings, which removes your personal data as described above.

International transfers

Some subprocessors may process data outside your country or the European Economic Area. Where this happens, we rely on appropriate safeguards, such as European Commission adequacy decisions or standard contractual clauses, to protect your data.

Security

We use reasonable technical and organisational measures to protect your data, including encryption in transit, access controls, and append-only credit accounting. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Children

The Service is not directed to children and is intended for users who are at least 18 years old. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can remove it.

Changes to this policy

We may update this policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you.

Contact

Email help@voicecraft.space for any privacy request or question.