Data controller
ImageToSpeech.org acts as the data controller for personal data collected through the service. We can be reached at privacy@imagetospeech.org.
Legal bases for processing
- Contract — processing necessary to deliver the service you've signed up for
- Legitimate interest — product analytics, fraud prevention, network security
- Consent — optional features such as model improvement opt-in or marketing emails
- Legal obligation — tax, accounting, and law-enforcement requests
Your rights as an EU/UK user
- Right of access — request a copy of the data we hold about you
- Right to rectification — correct inaccurate data
- Right to erasure — request deletion of your account and data
- Right to restrict or object to processing
- Right to data portability — export your data in a machine-readable format
- Right to withdraw consent at any time
- Right to lodge a complaint with your national supervisory authority
Data portability
You can export your account data, uploaded files and generated audio from your Settings page. We provide exports in common, structured formats (JSON for metadata, original formats for media).
Right to deletion
Delete your account and all associated data from Settings or use our self-serve Data Deletion Request page. We action verified deletion requests within 30 days.
Consent
We obtain explicit consent for non-essential processing (such as using your uploads to improve our models). You can withdraw consent at any time without affecting the lawfulness of prior processing.
International transfers
Where personal data is transferred outside the EEA, we rely on Standard Contractual Clauses and additional safeguards approved by the European Commission.
Sub-processors
We maintain a list of sub-processors (cloud hosting, payments, email, analytics) and sign GDPR-compliant Data Processing Agreements with each. Contact us for the current list.
Contact
EU privacy enquiries: privacy@imagetospeech.org.