Who we are
ImageToSpeech.org ("ImageToSpeech", "we", "us") is the AI image-to-speech service available at https://imagetospeech.org. We act as the data controller for personal information collected through the site.
Data we collect
- Account data — name, email, hashed password or OAuth identifier when you sign up
- Uploaded content — images, screenshots, PDFs and any text extracted from them, processed to generate audio
- Generated audio — the MP3/WAV files produced from your inputs
- Usage data — page views, feature usage, device, browser, IP, language
- Billing data — subscription tier and invoice metadata (card data is handled by our PCI-compliant payment processor — we never see it)
How we handle uploaded images
Images and documents you upload are transmitted over TLS and processed for OCR and TTS. We do not sell uploaded content, and we do not use it to train our models without your explicit opt-in.
Source files and extracted text are stored only as long as needed to deliver your audio (typically up to 30 days for registered users, or until you delete them — whichever is sooner). Anonymous, unregistered conversions are deleted within 24 hours.
AI processing
We use a combination of in-house and trusted third-party AI providers for OCR (optical character recognition) and neural text-to-speech. Where third parties are involved, they act as data processors under contract and are bound by GDPR-compliant data-processing agreements.
Third-party services
- Hosting & database — secure cloud infrastructure (EU and US regions)
- Payments — PCI-DSS compliant payment processor
- Email — transactional email provider for account and receipt emails
- Analytics — privacy-respecting product analytics
Your rights (GDPR / CCPA)
Depending on your jurisdiction, you have the right to access, correct, export, restrict, or delete your personal data, and to object to certain processing. EU/UK users have the right to lodge a complaint with their supervisory authority.
- Right of access and portability
- Right to rectification
- Right to erasure ("right to be forgotten")
- Right to restrict or object to processing
- Right to withdraw consent at any time
Data retention
We keep account data while your account is active and for a short period afterwards to handle billing and legal obligations. Uploaded files and generated audio follow the retention windows described above.
Children
ImageToSpeech is not directed at children under 13 (or 16 in the EEA). We do not knowingly collect personal data from children. If you believe a child has provided us data, please contact us and we will delete it.
Security
We use TLS in transit, encryption at rest, role-based access control, and continuous security monitoring. Read our Security Policy for technical details.
Changes to this policy
We may update this policy as the product evolves. Material changes will be announced via email or in-app. The "Last updated" date above always reflects the current version.
Contact
Privacy questions or data requests: privacy@imagetospeech.org. For data deletion, you can also use our self-serve Data Deletion Request page.