Skip to main content

Privacy Policy

Last Updated: October 28, 2025

Introduction​

Supernal TTS ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our text-to-speech API service and website (collectively, the "Service").

Information We Collect​

Information You Provide​

  • Account Information: Email address, name, and company information when you create an account
  • API Keys: We generate and store API keys for authentication
  • Payment Information: Processed securely through third-party payment processors (we do not store credit card numbers)
  • Support Communications: Messages, emails, and feedback you send to us

Information Automatically Collected​

  • Usage Data: API requests, endpoints accessed, response times, error logs
  • Text Data: Text submitted for speech synthesis (temporarily stored for caching purposes)
  • Device Information: IP address, browser type, operating system, device identifiers
  • Cookies and Tracking: See our Cookie Policy below

Generated Data​

  • Audio Files: Generated speech audio files stored in our cache system
  • Analytics Data: Aggregated usage statistics, performance metrics

How We Use Your Information​

We use collected information for:

  • Service Delivery: Processing TTS requests, caching audio, API authentication
  • Billing: Calculating usage, processing payments, generating invoices
  • Improvement: Analyzing usage patterns, optimizing performance, improving features
  • Communication: Sending service updates, technical notices, security alerts
  • Support: Responding to inquiries, troubleshooting issues
  • Security: Detecting fraud, preventing abuse, enforcing terms of service
  • Legal Compliance: Meeting regulatory requirements, responding to legal requests

Data Retention​

  • API Requests: Logs retained for 90 days
  • Cached Audio: Stored for 30 days or until cache limit reached
  • Account Data: Retained while account is active and 30 days after deletion
  • Billing Records: Retained for 7 years for tax and accounting purposes
  • Text Submissions: Not permanently stored; only cached temporarily for performance

Data Sharing and Disclosure​

We do NOT sell your personal information. We may share data with:

Third-Party Providers​

  • TTS Providers: OpenAI, Azure, Cartesia (when you use their services with your own API keys)
  • Payment Processors: Stripe or similar payment services
  • Cloud Hosting: Vercel, AWS, or other infrastructure providers
  • Analytics: Google Analytics (anonymized)

We may disclose information when required by law or to:

  • Comply with legal process (subpoenas, court orders)
  • Protect our rights, property, or safety
  • Prevent fraud or security threats
  • Enforce our Terms of Service

Your Rights​

Depending on your location, you may have the right to:

  • Access: Request a copy of your personal data
  • Correction: Update or correct inaccurate information
  • Deletion: Request deletion of your data ("right to be forgotten")
  • Portability: Receive your data in a machine-readable format
  • Opt-Out: Unsubscribe from marketing communications
  • Restriction: Limit how we process your data
  • Object: Object to certain processing activities

To exercise these rights, contact us at privacy@supernal.ai

Data Security​

We implement industry-standard security measures:

  • Encryption: TLS/SSL for data in transit, encryption at rest
  • Authentication: API keys, JWT tokens, secure password hashing
  • Access Controls: Role-based access, principle of least privilege
  • Monitoring: Logging, intrusion detection, security audits
  • Backups: Regular encrypted backups

However, no system is 100% secure. We cannot guarantee absolute security.

International Data Transfers​

Our Service is hosted in the United States. If you access the Service from outside the US, your data will be transferred to and processed in the US. We comply with applicable data protection laws regarding international transfers.

Children's Privacy​

Our Service is not intended for users under 18. We do not knowingly collect information from children. If you believe a child has provided us with personal information, contact us immediately.

What Are Cookies?​

Cookies are small text files stored on your device by websites you visit. They help websites remember your preferences and improve your experience.

Cookies We Use​

Essential Cookies (Required)​

  • Authentication: Keep you logged in
  • Security: CSRF protection, session management
  • API Keys: Secure storage of your credentials

Analytics Cookies (Optional)​

  • Google Analytics: Track page views, user behavior (anonymized)
  • Performance Monitoring: Measure API response times, error rates

Functional Cookies (Optional)​

  • Preferences: Remember your settings (theme, language)
  • Widget Configuration: Store customization choices

Managing Cookies​

You can control cookies through:

  • Our cookie consent banner (appears on first visit)
  • Your browser settings (most browsers allow you to refuse cookies)
  • Google Analytics Opt-out: tools.google.com/dlpage/gaoptout

Note: Disabling essential cookies may affect Service functionality.

Our website may contain links to third-party websites. We are not responsible for their privacy practices. We encourage you to read their privacy policies.

Changes to This Policy​

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. Continued use of the Service after changes constitutes acceptance.

For material changes, we will provide prominent notice or seek consent where required by law.

Contact Us​

For privacy-related questions or to exercise your rights:

GDPR Compliance (EU Users)​

If you are in the European Economic Area (EEA):

  • Legal Basis: We process your data based on consent, contractual necessity, legitimate interests, or legal obligations
  • Data Protection Officer: privacy@supernal.ai
  • Supervisory Authority: You may lodge a complaint with your local data protection authority

CCPA Compliance (California Users)​

If you are a California resident:

  • Right to Know: Request disclosure of data collected
  • Right to Delete: Request deletion of personal information
  • Right to Opt-Out: Opt-out of sale of personal information (we don't sell data)
  • Non-Discrimination: We won't discriminate for exercising your rights

To exercise CCPA rights: privacy@supernal.ai

Data Processing Agreement​

For enterprise customers requiring a Data Processing Agreement (DPA), contact us at enterprise@supernal.ai