DuplicateMe.io ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains what personal data we collect, how we use it, and your rights regarding that data.

By using our Service, you consent to the data practices described in this policy. If you do not agree, please discontinue use of the Service.

We use the data we collect for the following purposes:

• Providing the Service: Processing your audio, generating content, managing your account, and handling billing.
• Improving our AI models: Aggregated, anonymized usage patterns may be used to improve the quality and performance of our AI generation pipeline. We do not use your specific voice data or generated content to train models shared with other users without your explicit consent.
• Service communications: Sending transactional emails such as login codes, billing receipts, and important service updates.
• Security: Detecting and preventing fraud, abuse, and unauthorized access to the Service.

We do not sell your personal data to third parties. We will never monetize your data through advertising or data brokerage.

We share data only with the following categories of service providers, strictly as needed to operate the Service:

• Stripe — Payment processing and subscription management.
• Groq API — AI inference for content generation. Audio and text data is sent to Groq for processing. Groq does not retain your data beyond the duration of the API request.
• Resend — Transactional email delivery (login codes, receipts).

We may also disclose data if required by law, court order, or to protect the rights, safety, or property of our users or the public.

Your data is stored on secure servers with access restricted to essential personnel only. We implement the following security measures:

• All data is transmitted over HTTPS/TLS encryption.
• Passwords are never stored in plain text (we use passwordless login via email codes).
• Database access is restricted and monitored.
• Audio files and generated content are stored with unique identifiers and are not publicly accessible.

While we take reasonable measures to protect your data, no system is 100% secure. We cannot guarantee absolute security and encourage you to use strong, unique credentials for your account.

We use minimal client-side storage. Specifically:

• Authentication token: Stored in your browser's localStorage to keep you logged in. This is a JSON Web Token (JWT) that identifies your session.
• User preferences: Basic UI preferences may be stored in localStorage.

We do not use third-party tracking cookies, analytics trackers, or advertising pixels. We do not participate in any ad networks or cross-site tracking.

Our Service integrates with the following third-party providers. Each has their own privacy policy governing data they process:

• Stripe (stripe.com) — Handles payment processing. Subject to the Stripe Privacy Policy.
• Groq (groq.com) — Provides AI inference. Data sent to Groq is processed in real-time and not retained by Groq after the request completes.
• Resend (resend.com) — Delivers transactional emails. Subject to the Resend Privacy Policy.

Under the General Data Protection Regulation (GDPR) and applicable EU law, you have the following rights regarding your personal data:

• Right of access: You can request a copy of all personal data we hold about you.
• Right to rectification: You can request correction of inaccurate or incomplete data.
• Right to erasure: You can request deletion of your personal data. Upon request, we will delete your account and all associated data within 30 days.
• Right to data portability: You can request an export of your data in a machine-readable format.
• Right to restrict processing: You can request that we limit how we process your data.
• Right to object: You can object to the processing of your data for specific purposes.
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, contact us at support@duplicateme.io. We will respond to your request within 30 days.

We retain your data for as long as your account is active and as needed to provide the Service. Specifically:

• Account data: Retained until you request account deletion.
• Uploaded audio: Retained while your account is active. Deleted within 30 days of account closure.
• Generated content: Retained while your account is active. Deleted within 30 days of account closure.
• Billing records: Retained for up to 7 years as required by tax and financial regulations.

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected data from a minor, we will take steps to delete that information promptly.

We may update this Privacy Policy from time to time. When we make material changes, we will notify registered users via email and update the "Last updated" date at the top of this page.

Your continued use of the Service after changes take effect constitutes acceptance of the revised policy.

If you have any questions about this Privacy Policy or wish to exercise your data rights, contact us at:

Email: support@duplicateme.io