Privacy Policy
What Voice Clone Lab collects, what happens to your voice sample, and how to get your data deleted.
Last updated: 2026-11-03
The short version
We clone voices, so the most sensitive thing you can give us is a recording of yourself. We do not keep your sample files, we do not train our own models on them, and we do not sell anything about you. Below is the exact list of what leaves your browser and where it goes.
What we collect
If you use the tool without an account. We collect the text you type, the voice you select, and the resulting audio. To enforce the daily free limit we store a one-way hash of your IP address and a random device identifier in a cookie — never the address itself. We also keep a record of each render: how many characters it used, which voice, whether it succeeded, and when.
If you sign in with Google. We receive your email address, name and profile image URL. That is how an account is created; we do not receive your Google password or your contacts.
If you subscribe. Payment is handled by Waffo as merchant of record. We receive the order and subscription record — plan, amount, status — and never see or store your card number.
If you file a report. We keep the report text, the optional link and contact address you give us, and a hash of the sending address.
Your voice sample
- The audio you upload is transmitted to our speech provider, ElevenLabs, which builds the voice model.
- We do not retain the uploaded file. It exists in our request pipeline and is discarded once the provider returns a voice identifier.
- The voice model itself is stored in our ElevenLabs workspace, keyed to your account or session. We store the identifier, not the model.
- Deleting a voice in your account deletes it at the provider. A data request submitted through our report page does the same within 30 days.
We treat a voice sample as sensitive data. That is why uploads require an explicit consent attestation, why cloning public figures is prohibited, and why a confirmed impersonation is removed within 72 hours.
Generated audio
A free render is returned to your browser and is not stored by us. An export is rendered and returned the same way — you keep the file, we do not. We do not use generated audio to train anything, and we do not use it for anything other than producing the file you asked for.
Who else is involved
- Cloudflare — hosting and edge delivery; requests necessarily pass through their network.
- ElevenLabs — speech synthesis and voice models, in the United States.
- Waffo — payments, tax and invoicing as merchant of record.
- Google — sign-in only, if you choose to use it.
Each is bound by its own terms and, where required, standard contractual clauses for transfers out of the EEA or the UK.
Cookies
- Essential — session, and the device identifier used for the free limit. These cannot be switched off; the tool does not work without them.
- Analytics — loaded only after you accept them in the consent banner. Decline and nothing is set.
How long we keep things
- Render records — 13 months, then deleted.
- Reports — 24 months, so a repeat pattern is visible.
- Account and voice identifiers — until you delete them or ask us to.
- Payment records — as long as tax law requires.
Your rights
You can ask for a copy of your data, its correction, its deletion, or an export in a portable format; you can also object to processing that rests on legitimate interests. Use the report page and choose Access or deletion of my data — it is the fastest route and it is answered. If you are in the EEA or the UK you may also complain to your local supervisory authority.
Children
The service is not for anyone under 18, and we do not knowingly hold data from children. If you believe a child's voice is in our system, report it and we will remove it.
Changes
If this policy changes materially we will update the date above and, for account holders, say so by email. Continuing to use the service after a change means you accept the updated policy.