What we collect, why, and what you can choose.

Effective: January 1, 2026. Controller: Be Xuan Thanh, K47C3 Truong Du Bi DH Dan Toc TW, Viet Tri, Phu Tho, Viet Nam, Vietnam.

This page explains what Be Xuan Thanh ("we", "us") collects when you use Chosen Voice AI, why we collect it, who we share it with, and what choices you have. Questions go to support@chosenvoiceai.com.

1. What we collect

Account data — name, email, password hash, plan tier, billing-address metadata. We never see your full card number; that's held by the payment processor.

Content data — scripts, prompts, voice samples uploaded for cloning, the clones themselves, generated audio, generated images, and project metadata (names, descriptions, share settings).

Usage data — IP address, browser type and version, device type, operating system, pages viewed, features used, timestamps, referring URLs, and approximate geolocation derived from IP.

Communications — emails and support messages, plus tickets opened from the dashboard.

2. Voice samples & biometric data

Audio uploaded for voice cloning may count as biometric data under California CCPA/CPRA, Illinois BIPA, and EU GDPR. We treat it with extra care:

Voice samples and clones stay private to your account and team — never shared with other customers.
We do not train public AI models on your voice samples and we do not sell biometric data.
You can delete any clone from the Library; the source sample and derived clone are queued for permanent deletion.
Biometric data is retained no longer than 3 years after your last interaction, or until you delete it, whichever comes first.

3. How we use your data

To operate, secure, and improve the Service.
To bill you and process payments.
To handle support requests.
To send transactional email (login codes, receipts, account notices).
To send marketing email — only if you opt in. Unsubscribe link is in every marketing email.
To detect fraud, abuse, and Terms violations.
To meet legal obligations and respond to lawful requests.

4. Subprocessors we share data with

We share only the minimum data required with these vendors:

ElevenLabs — voice generation and cloning
OpenAI — optional image generation (DALL·E / gpt-image-1) and ancillary models
Fal.ai — default image generation (FLUX)
Resend — transactional email delivery
PayPal — payment processing
Cloudflare — CDN, DNS, and DDoS protection
Microsoft Azure — server hosting (application + database)

We do not sell personal information to third parties for advertising. We do not share your data with anyone else except (a) with your consent, (b) to comply with law, (c) to enforce our Terms, or (d) in connection with a business transfer (merger, acquisition, asset sale) — with notice to you.

5. Data retention

Account data: kept until you delete your account. Generated content: kept until you delete it or your account. Voice samples and clones: see Section 2. Billing records: 7 years (US tax requirements). Logs and analytics: typically 12 months. After account deletion we may keep limited records to prevent fraud, meet legal obligations, or resolve disputes.

6. International transfers

Be Xuan Thanh is based in Vietnam. If you are in the European Economic Area, the United Kingdom, or Switzerland, your data may be transferred to and processed in Vietnam. We rely on Standard Contractual Clauses (SCCs) and other lawful transfer mechanisms approved by the European Commission.

7. Security

We use standard physical, electronic, and administrative safeguards — TLS in transit, encrypted storage at rest, role-based access, and periodic review of subprocessors. No system is perfectly secure; we work to keep the risk surface small.

8. Children's privacy

The Service is not directed at children under 16. We do not knowingly collect personal information from children. If we learn we have collected such data, we delete it promptly. If you believe we hold any, write to support@chosenvoiceai.com.

9. Your rights

You can request access, correction, deletion, restriction, portability, or objection. See our GDPR & Your Rights page for details and how to exercise each one.

10. Changes to this policy

We may update this Privacy Policy from time to time. For material changes we post a notice on the website and, where required, email you. The "Effective date" at the top reflects the current version.

Last updated: 2026.