Privacy Policy
Last updated: July 8, 2026
1. Information We Collect
When you use Synctaku ("the Service"), operated by Synctaku ("we," "us," or "our"), we collect the following categories of information:
- Account Information: Your email address, collected during authentication via Supabase magic link. We do not collect passwords.
- Payment Information: Payment card details are processed exclusively by Stripe and are never stored on our servers. We receive only a transaction confirmation, customer email, and payment status.
- Script Content: The text scripts you submit for audio generation. These are transmitted to ElevenLabs for processing and are not stored permanently on our servers after generation is complete.
- Usage Data: We collect anonymized analytics through Vercel Analytics, including page views, referrer data, and general device information (browser type, viewport size). No personally identifiable information (PII) is collected through analytics.
- Cookies: We use strictly necessary cookies for authentication session management via Supabase. We do not use advertising, tracking, or third-party marketing cookies.
2. How We Use Your Information
We use the information collected for the following purposes only:
- To authenticate your identity and manage your account session
- To process credit purchases and maintain your credit balance
- To transmit your script text to ElevenLabs for synthetic audio generation
- To generate and deliver your timeline output files (XML, SRT, MP3)
- To embed EU AI Act compliance metadata into generated audio files
- To communicate with you about service updates or respond to support inquiries
We do not use your data to train machine learning models, sell to third parties, or serve targeted advertising.
3. 2026 EU AI Act Compliance (Article 50)
In full compliance with Article 50 of the EU Artificial Intelligence Act (Regulation (EU) 2024/1689), effective August 2, 2026, all synthetically generated audio files produced by Synctaku contain machine-readable provenance metadata.
- Generated audio is embedded with ID3v2 metadata tags explicitly identifying the content as AI-generated
- A SHA-256 content hash is included for integrity verification
- The metadata identifies the generation system ("Synctaku Text-to-Audio Pipeline") and the timestamp of creation
- ElevenLabs' native audio watermarking is also applied at the synthesis layer
This provenance layer is imperceptible to listeners and does not degrade audio fidelity.
4. Data Storage & Retention
- Account Data: Retained for the duration of your account. Upon account deletion request, all associated data is removed within 30 days.
- Credit Ledger: Transaction history is maintained in Supabase for the lifetime of your account for billing reconciliation purposes.
- Generated Files: ZIP archives containing your audio, SRT, and XML files are stored in Vercel Blob storage with public access URLs. These files are not automatically purged; if you require deletion of a specific file, contact us.
- Script Text: Your script text is held in server memory only during the generation request and is not persisted to any database.
5. Third-Party Data Processors
We rely on the following third-party services to operate. Each processor has their own privacy policy and data handling commitments:
| Service | Purpose | Data Shared |
|---|---|---|
| Supabase | Authentication, credit ledger | Email address, user ID |
| Stripe | Payment processing | Email, payment card (direct to Stripe) |
| ElevenLabs | Text-to-speech synthesis | Script text content |
| Vercel | Hosting, blob storage, analytics | Generated files, anonymized usage data |
6. Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal data:
- Right of Access: Request a copy of all personal data we hold about you.
- Right to Rectification: Request correction of inaccurate personal data.
- Right to Erasure: Request deletion of your account and all associated data. We will process deletion requests within 30 days.
- Right to Data Portability: Request your data in a structured, machine-readable format.
- Right to Withdraw Consent: You may log out and stop using the Service at any time. You may request account deletion by contacting us.
To exercise any of these rights, contact us at contact@synctaku.com.
7. Age Restrictions
Synctaku is not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal information, please contact us immediately at contact@synctaku.com and we will take steps to delete such information.
8. Security
We implement industry-standard security measures including HTTPS encryption in transit, secure cookie handling, and Row-Level Security (RLS) at the database layer. Payment processing is handled entirely by Stripe, a PCI DSS Level 1 certified provider. However, no method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify users of material changes by posting the updated policy on this page with a revised "Last updated" date. Continued use of the Service after changes constitutes acceptance of the updated policy.
10. Contact
For any privacy-related questions, data requests, or concerns, contact us at:
Email: contact@synctaku.com