Privacy policy

Your account and sign-in

Generating a voiceover requires signing in, either with Google or with an email address and password. Writing or pasting a script, importing documents, previewing voices and transcribing audio work without an account. Supabase stores the account needed to keep you signed in: a user ID, email address and authentication metadata, plus a display name and profile image address when you use Google.

With Google, Google authenticates you. We request only the basic identity scopes needed for sign-in; signing in does not give this site access to your Google Drive, Gmail or other Google content.

With an email and password, Supabase keeps the password only as a one-way hash, so nobody running this site can read it. Account emails — confirming your address and resetting your password — are sent through our email provider, Resend, which receives your email address for that purpose only.

Supabase authentication cookies keep your session active until you sign out or they expire.

To understand how the studio is used, we record usage events: the kind of action (playing a voice sample, starting a render, a render succeeding or failing, playing or downloading the result, an import, a transcription, a share, or reaching the character allowance), its size (character count or audio duration), the voice or file format involved, and — when a render fails — a general category for the failure such as “network” or “timeout”. Each event also records how your visit began: the page you arrived on, the site or search engine that referred you, and any campaign name in the link you followed. An event never contains your text, your documents, your audio, the addresses of pages you import, or your IP address. While you are signed in, events are linked to your account; signed out, they are anonymous and only ever counted in aggregate.

Messages you send through the contact form are stored so we can read and act on them. Signed in, a message is linked to your account so you can see its status, and is deleted with it. Signed out, it is stored with the email address you give, if you give one. Your IP address is used briefly to limit how many messages can be sent and is not stored with the message.

Payments

Paid plans and credit packs are sold through Creem, our payment provider and the seller of record for every purchase. Creem collects your card details and billing address on its own pages; this site never sees your card number. To match a purchase to you and get the receipt to the right inbox, we pass Creem your account id and the email address of your account. Creem then tells us what was bought and when, together with its own ids for your customer record and subscription, which we store with your account to apply the plan or credits and to open your billing portal. Creem’s own privacy policy covers what it keeps.

What happens to text you convert

When you generate a voiceover, the text you chose to convert is sent to a third-party neural speech service to be spoken - that is what produces the audio, and it is the only place your text goes. The finished MP3 and subtitle files are assembled inside your browser and are never uploaded to or stored on our servers. We keep no copy of your scripts, your audio, or your subtitles.

What happens to files you open

PDFs, Word documents, EPUBs, background music and audio recordings are read entirely inside your browser. The files themselves never leave your device. For documents, only the text you then choose to generate is sent to the speech service, as above. Transcription (audio to text) runs on your own device using Whisper; the recording is never uploaded anywhere.

What happens when you paste a link

The listen-to-an-article tool fetches the page you point it at through our server, extracts the article text, and returns it to your browser. The URL is processed to serve that request and is not kept.

What is stored in your browser

Your preferences - chosen voice, speed, pitch, sound settings, pronunciation entries, playback speed - and unsent drafts are kept in your browser’s local storage so they survive a refresh. They stay on your device; you can clear them at any time through your browser’s site-data settings.

Published listen links

If you press Publish on a finished voiceover, that one recording is uploaded to our storage along with its word timings and the text that was spoken, so the link can show the words as it plays. This is the only way anything you wrote reaches our servers, and it never happens on its own.

Anyone holding the link can listen without an account. The link is unlisted rather than private: it is not indexed by search engines and is not listed anywhere, and the address itself is what keeps it unguessable. Each link expires on its own, and you can take one down at any time from your account — which deletes the audio, not just the page.

Advertising and cookies

The site is free because it is supported by advertising. No advertising script loads and no advertising cookie is set unless you accept in the cookie banner. If you decline, the site works exactly the same, with no ads. You can change your choice at any time via the cookie settings link in the footer. When you accept, our advertising partner (Adsterra) may set cookies and process your IP address and browser characteristics to serve and measure ads, acting as its own data controller.

Analytics

The site uses Google Analytics to understand which pages are visited and how the tools are used - counts and trends, not content. It runs on every page and sets analytics cookies (such as _ga); Google processes your IP address and browser characteristics to provide the service. You can block it with your browser’s tracking protection or Google’s own opt-out browser add-on. Your scripts, documents and audio are never part of what is measured. The cookie banner’s Accept/Reject choice governs advertising cookies.

What we don’t do

• No account is needed to write, import, preview voices or transcribe.
• No password is collected when you use Google sign-in, and an email sign-in password is never stored or seen in readable form.
• No storing of scripts, documents, audio or transcripts — unless you publish a listen link, which stores that one recording until it expires.
• No selling of personal data.
• No tracking beyond what the consented ad partner sets.

Your rights

Depending on where you live (for example under the GDPR or CCPA), you may have rights to access, correct or delete personal data. You can clear local drafts and preferences through your browser’s site-data settings and withdraw ad consent through the footer. If you want your account deleted, contact us using the address below. We keep no copy of your scripts, documents or generated audio.

Contact

This site is operated by Tharusha Kulasinghe. Privacy questions and requests can go to support@readanytext.com.