1. Information We Collect
When you use Synctaku ("the Service"), operated by Synctaku ("we," "us," or "our"), we collect the following categories of information:
- Account Information: Your email address, collected during authentication via Supabase magic link. We do not collect passwords.
- Payment Information: Payment card details are processed exclusively by Stripe and are never stored on our servers. We receive only a transaction confirmation, customer email, and payment status.
- Script Content: The text scripts you submit for audio generation. These are transmitted to ElevenLabs for processing and are not stored permanently on our servers after generation is complete.
- Usage Data: We collect anonymized, cookieless analytics through Vercel Analytics (page views, referrer data, general device information). We also use Google Analytics 4, which does use cookies, to understand aggregate site usage.
- Cookies: We use strictly necessary cookies for authentication session management via Supabase; these cannot be disabled. Separately, Google Analytics sets analytics cookies via Google Consent Mode: if you're visiting from the EU, EEA, UK, or Switzerland, analytics cookies default to blocked and only activate if you click "Accept Analytics" on the cookie banner; elsewhere, analytics cookies default to active, since opt-out (rather than opt-in) consent is the applicable standard in most other jurisdictions. Wherever you are, you can view or change this choice at any time via the "Cookie Settings" link in the footer. We do not use advertising or third-party marketing cookies.
2. How We Use Your Information
We use the information collected for the following purposes only:
- To authenticate your identity and manage your account session
- To process credit purchases and maintain your credit balance
- To transmit your script text to ElevenLabs for synthetic audio generation
- To generate and deliver your timeline output files (XML, SRT, MP3)
- To embed EU AI Act compliance metadata into generated audio files
- To communicate with you about service updates or respond to support inquiries
We do not use your data to train machine learning models, sell to third parties, or serve targeted advertising.
3. 2026 EU AI Act Compliance (Article 50)
In support of Article 50 of the EU Artificial Intelligence Act (Regulation (EU) 2024/1689), effective August 2, 2026, the raw synthetic audio file produced by Synctaku contains machine-readable provenance metadata at the point of delivery:
- The delivered MP3 is embedded with an ID3v2 metadata tag explicitly identifying the content as AI-generated
- A SHA-256 content hash of the audio and of the source script is included for integrity verification
- The metadata identifies the generation system ("Synctaku Text-to-Audio Pipeline") and the timestamp of creation
This provenance layer is imperceptible to listeners and does not degrade audio fidelity. It is important to understand its scope: this metadata is embedded in the raw audio file inside your delivered ZIP archive. If you edit that audio into a video project and export/render the result, standard video-editing software does not carry ID3 tags from a source audio clip into the rendered output — so this metadata will not, on its own, appear in a video you subsequently publish. Article 50's disclosure obligations to end viewers of published synthetic content are a separate responsibility that sits with you as the publisher; our provenance layer is a tool to help you meet that obligation (e.g. by retaining it as an audit trail, or building a visible disclosure into your published video), not a substitute for it. We do not independently verify or apply any watermarking performed by ElevenLabs at the model level — any such feature is governed entirely by ElevenLabs' own systems and policies, not ours.
4. Data Storage & Retention
- Account Data: Retained for the duration of your account. Upon account deletion request, all associated data is removed within 30 days.
- Credit Ledger: Transaction history is maintained in Supabase for the lifetime of your account for billing reconciliation purposes.
- Generated Files: ZIP archives containing your audio, SRT, and XML files are stored in a private Supabase Storage bucket, accessible only via short-lived signed URLs issued after verifying you own the generation. A record of each generation (timestamp, credits used, voice used) is kept in your account history so you can re-download past outputs; the underlying file is retained until you delete your account, at which point it is removed along with your other account data.
- Script Text: Your script text is held in server memory only during the generation request and is not persisted to any database.
5. Third-Party Data Processors
We rely on the following third-party services to operate. Each processor has their own privacy policy and data handling commitments:
| Service | Purpose | Data Shared |
|---|
| Supabase | Authentication, credit ledger, generated file storage | Email address, user ID, generated audio/XML/SRT files |
| Stripe | Payment processing | Email, payment card (direct to Stripe) |
| ElevenLabs | Text-to-speech synthesis | Script text content |
| Vercel | Hosting, cookieless analytics | Generated files, anonymized usage data |
| Google Analytics | Aggregate site usage analytics (opt-in only) | Page views, device/browser info, IP-derived region — only if you accept analytics cookies |
6. Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal data:
- Right of Access: Request a copy of all personal data we hold about you.
- Right to Rectification: Request correction of inaccurate personal data.
- Right to Erasure: Request deletion of your account and all associated data. We will process deletion requests within 30 days.
- Right to Data Portability: Request your data in a structured, machine-readable format.
- Right to Withdraw Consent: You may log out and stop using the Service at any time. You may request account deletion by contacting us.
To exercise any of these rights, contact us at contact@synctaku.com.
7. Age Restrictions
Synctaku is not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal information, please contact us immediately at contact@synctaku.com and we will take steps to delete such information.
8. Security
We implement industry-standard security measures including HTTPS encryption in transit, secure cookie handling, and Row-Level Security (RLS) at the database layer. Payment processing is handled entirely by Stripe, a PCI DSS Level 1 certified provider. However, no method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify users of material changes by posting the updated policy on this page with a revised "Last updated" date. Continued use of the Service after changes constitutes acceptance of the updated policy.
10. Contact
For any privacy-related questions, data requests, or concerns, contact us at:
Email: contact@synctaku.com