GDPR Policy

Last Updated: October 21, 2026

Hwavoice's GDPR Policy applies to You in addition to our Privacy Policy (https://hwavoice.com/en/privacy) if:

• You are a resident of the European Union (EU), European Economic Area (EEA) or Switzerland, or
• You are otherwise covered by the GDPR.

Hwavoice is a data controller and processor for the purposes of the GDPR. With your consent, Hwavoice is able to process your personal information in accordance with our Privacy Policy.

Personal information we process

In providing our products and services to you, we may process the following categories of personal information:

• Account information — email address, username, password (stored in hashed form), profile picture, and information received through social login;
• Text content you submit for speech synthesis — any personal information contained in the text you enter into the Services;
• Voice settings and usage data — selected voice models, parameters (such as speed, pitch, and volume), task history, and related usage activity;
• Payment information — transaction data for paid plans, processed through third-party payment providers;
• Support communications — information you provide when contacting us.

We may also make use of a number of automated processes using your personal information and your activity on our Site as tracked by us, in order to provide optimised services to you.

We fully describe our practices to all our members and visitors in our Privacy Policy, but use this separate notice to ensure that we meet the GDPR's requirements.

How do we use your personal information?

In accordance with the GDPR, we rely on the following legal bases to process this information:

• where you have given your consent for us to use your information;
• where the processing is necessary to perform a contract that we have with you — for example, to provide the text-to-speech services you request and to manage your account;
• our legitimate business interests, such as improving and developing our products and services and marketing new features or products (but only where our legitimate interest isn't overridden by your interest in protecting your personal information); and
• where it is necessary for compliance with our legal obligations.

You may at any time refuse to provide the personal information that we request. However, this may limit or prohibit our ability to provide our products and services to you. You may withdraw your consent for us to process your personal information at any time by contacting us in accordance with the 'Contact us' section below.

International transfers of personal information

For our users in the Designated Countries, where we transfer your personal information to a third party provider that is not located in the Designated Country and is not subject to an adequacy decision by the EU Commission, we will require those third party providers to enter into an agreement that provides appropriate safeguards for your information. This includes, where applicable, third-party providers that help us deliver the text-to-speech services, such as voice model and cloud infrastructure providers.

How long do we keep your personal information?

• Account information is kept for as long as your account remains active, and is deleted or anonymised after account termination, except where a longer retention period is required by law.
• Text submitted for speech synthesis and the resulting audio are processed only as needed to complete your task and are deleted afterwards, unless a longer period is required for billing, security, troubleshooting, or legal compliance.

Additional rights of users from Designated Countries

Your right of access

You have the right to ask us for copies of your personal information. This right always applies. There are some exemptions, which means you may not always receive all the information we process.

Your right to rectification

You have the right to ask us to rectify information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete. This right always applies.

Your right to erasure

You have the right to ask us to erase your personal information in certain circumstances.

Your right to restriction of processing

You have the right to ask us to restrict the processing of your information in certain circumstances.

Your right to object to processing

You have the right to object to processing if we are able to process your information because the process forms part of our public tasks, or is in our legitimate interests.

Your right to data portability

This only applies to information you have given us. You have the right to ask that we transfer the information you gave us from one organisation to another, or give it to you. The right only applies if we are processing information based on your consent or under, or in talks about entering into a contract and the processing is automated.

If you feel you haven't received a timely or satisfactory response from us to your question or complaint, you have the right to contact your local supervisory authority.

Contact us

If you have questions or requests regarding this GDPR Policy, you may email us at [email protected].