Data Protection and Security Policy

Last Updated: March 10, 2023

At Voicemaker, we prioritize the security, privacy, and confidentiality of your data. We understand that your privacy and confidentiality are important to you, and we share those concerns. We are dedicated to treating the information of our customers, employees, stakeholders, and other interested parties with the highest level of care and confidentiality. This page has been created to address any questions you may have regarding the use, storage, sharing, and deletion of your data.

Here is a summary of our policies, followed by a detailed Q&A:
  • Your Projects are confidential, even from Voicemaker.
  • If you choose to delete your data from Voicemaker, we permanently delete it from our servers.
  • We are PCI DSS (Payment Card Industry, Data Security Standard) compliant company.
  • Voicemaker is currently in the process of obtaining certification for ISO/IEC 27001, which focuses on Information security.
  • Voicemaker conducts periodic Vulnerability Assessment and Penetration Testing (VAPT) reports & OpenVAS scans to mitigate any cybersecurity vulnerabilities.

How does Voicemaker protect my data?

We use SSL Certificate & encrypt it

Any data uploaded to Voicemaker is stored in an encrypted MongoDB Atlas database while at rest. Any time your data is “in transit,” it is encrypted over HTTPS, the industry standard for secure internet transactions. This means that the data you send to and from Voicemaker is secure, even if your network is not secure, such as when you’re on a public Wi-Fi network.


Strict no project access

At Voicemaker nor any of our employees will ever have access to your project or work. It remains completely your property, and any information related to it is kept confidential.

We only access your work when it is shared by you with our support team for resolving any conversion issues or errors. Once the issue is resolved, we delete your work promptly. Our employees do not have the right to store it on their personal systems or access your cloud saved files.


Third-party highly secured systems for payments

We prioritise payment security, which is why we have teamed up with industry-leading payment transfer companies to ensure the utmost protection for our clients' payment information. At present, we proceed your payments using Stripe, PayPal & RazorPay.


Login Information

We encrypt all login information, including email and passwords, in our database. We strongly encourage users to create the strongest possible passwords and to never share or digitally store their login credentials. Please note that Voicemaker is only authorized to reset a user's password at the explicit request of the user.


We have a Data Protection Officer

Voicemaker has put in place a set of internal policies and procedures regarding data protection, which all employees are required to adhere to. The collaboration between our Data Protection Officer and engineering team ensures that we maintain complete visibility on the user data we possess, its storage location, and authorized access.

To ensure compliance with these policies and prompt communication of data protection matters to our CEO, we have appointed a Data Protection Officer. The Officer is responsible for enforcing the policies and overseeing the protection of data.

Our commitment to data protection includes the following actions:
  • We restrict and monitor access to sensitive data.
  • We develop transparent procedures for data collection.
  • We train our employees in online privacy and security measures.
  • We build secure networks to protect online data from cyberattacks.
  • We establish clear procedures for reporting privacy breaches or data misuse.
  • We communicate our data handling practices through contract clauses or statements.
  • We establish data protection practices such as document shredding, secure locks, data encryption, frequent backups, and access authorization.

Additionally, we provide privacy provisions for Voicemaker users and subscribers on our website.


How does Voicemaker use my data?

Voicemaker keeps a record of your Project Information, including the files you upload to the platform, the text that has been converted to speech, audio files, and other metadata within a Project, on our servers. This feature enables us to provide you with various benefits, such as live collaboration, complete version history of your Projects, and the ability to access your Projects from any computer.

We don't use your Project Information for anything other than providing the service we offer — e.g. we don’t sell it; we don’t use it for marketing; we don’t use it for advertising.

Your Project Information is confidential from us. The exception is if you specifically ask us to look at a Project for the purpose of customer service, or if you explicitly opt-in to sharing Project Information (e.g. The results of your automatic text-to-speech converts) with us for the purpose of improving the quality of the algorithms we use to provide our service.


Name, email address, password and billing details

Name - To personalize your experience with Voicemaker, we use your name. Instead of addressing you as "User", we address you by your actual name, such as "Hi, Johnny." When you collaborate on a Project with other users on Voicemaker, your collaborators will also see your name when you interact with them by leaving a comment or sharing a Project.

Email - Your email address serves as your primary identifier in Voicemaker and also serves as the main point of contact for us to communicate with you.

Password - Upon logging in, we utilize your password to verify and validate your account.

Billing details - When you sign up for a paid account, we collect billing details including your credit card information and billing address. We use this information to collect payments. (We do not have access to your credit/debit card numbers or CVCs since they are handled by our payment gateways such as Stripe, PayPal & RazorPay.)


Who we share this information with?

Freshdesk - To provide customer support. Information shared: name and email address.
Freshdesk is the customer support platform we use to answer customer questions and manage support tickets. We share your email with Freshdesk to manage our customer service interactions with you.

Amazon SES - To send emails, Information shared: name and email address.
We use Amazon SES to send marketing and transactional emails (e.g. register, forgot password emails).

Stripe - To process subscription payments. Information shared: name, email address and billing information.
Stripe is our payments processor. Stripe uses your billing details to be able to process your payments and your email address to send payment receipts and to contact you if your payment method stops working.

PayPal - To transfer and process payments from PayPal. Information shared: name, email.

Razorpay - To transfer and process payments through UPI & Banks for Indian users. Information shared: name, email.

Google Cloud Text to Speech API to provide limited text to speech services.
Google solely accesses and utilizes your data to provide automatic text-to-speech services. Once the service is complete, Google promptly removes your data from its servers. Being the only automatic transcription service that complies with the Health Insurance Portability and Accountability Act (HIPAA), Google is an exceptionally privacy-focused transcription service.

Amazon AWS and Google Cloud - to store and host your files.
Our backend/frontend application and database and Voicemaker's exclusive AI voice models (AI/ML Engines) are hosted on Amazon AWS (us-west-2) servers located in Oregon, United States & Google Cloud (us-west1-a) servers located Oregon, United States. After the initial text to speech convert, Voicemaker stores your audio, cloud save and other data on either Amazon S3 or Google Cloud, services trusted by thousands of other organisations that prioritise security.

MongoDB Atlas - To host our core database to provide you with our services.
We use MongoDB Encryption at Rest, hosted on Amazon AWS (us-west-2).

DigitalOcean - We use DigitalOcean to store additional data, including project archives and backups.
DigitalOcean is a data center company that is certified by SOC 2 Type II, ISO 27001, SOC, and PCI-DSS.

Google Analytics - Helps us to analyse the visitors and their behaviour on the site. Which help us to improve service for the users on various devices and from various regions.

Google Adsense (Free users only) - Advertisement Partner
We display Google ads for our free users to cope up with the platform usage cost in return for the service the users use.


Know Your Rights

  • Right to access

    To access your account, simply click on the circle with your initials located in the top right corner of the Voicemaker platform. If you require a more detailed report, you may submit a Subject Access Request to [email protected].

  • Right to be forgotten

    When a Project is deleted from Voicemaker, we ensure its permanent removal from our servers within 30 days. Similarly, if you choose to delete your user account, all data linked to your account will be permanently erased.

  • Right to be informed

    We have created this page to provide you with a comprehensive understanding of all the personal information we hold about you and how we use it. You have the right to access this information, and if you have any further queries, please feel free to contact us at [email protected].

  • Right to equal services and price

    Voicemaker will not increase the price or decrease the quality of the service for any customer who exercises their rights under these regulations.

  • Right to withdraw consent

    You have rights to withdraw your consent for Voicemaker to process your data. In the section above, we have explained the various levels of consent available and how you can provide or withdraw consent. For instance, you may choose to unsubscribe from certain emails or share your transcript data to enhance our transcription accuracy. However, if you wish to withdraw your consent entirely, you can simply delete your Voicemaker account.

  • Right to portability

    You have the right to obtain all of the personal data Voicemaker has on you in a structured and commonly used format. We will gladly prepare this for you at your request. To initiate this request, send us an email at [email protected].

  • Right to correction

    Most of your personal data can be modified from your Voicemaker account page. To access your account, click on the circle with your initials in the top right corner of Voicemaker. If you would like us to make any modifications for you, just send us a request at [email protected].

  • Right to object

    Voicemaker solely utilizes your personal data to deliver our service. If you believe that we are not adhering to this policy, please send us an email at [email protected] outlining the problem, and we will initiate an investigation.

  • Right to stop automated decision-making

    Our system doesn't do any automatic profiling to make decisions. If, for any reason, you suspect that we are using automatic decision-making and wish for us to cease, please contact us at [email protected] detailing the problem, and we will launch an investigation.

  • Right to stop processing and right to stop third-party transfer

    To halt the processing of your personal data or any third-party transfers by Voicemaker, all you need to do is delete your Voicemaker account. By taking this action, all of your data will be permanently removed.


Consent and Changes

By using our website,, you acknowledge and give your consent to our Data Protection and Security Policy, agreeing to its terms. It is important to note that we may periodically update our Security measures, and any changes will be communicated through the posting of new information on this security page. As a precautionary measure, we advise you to regularly review this Security information for any updates. Changes to the Security will take effect upon being posted on this page.


Where can I ask other questions about data protection?

If you have any queries or remarks concerning how Voicemaker safeguards your data or our compliance with any of the regulations outlined above, please feel free to email our Data Protection Officer at [email protected].

Saving changes