Privacy Policy

Last updated: September 9, 2026

This Privacy Policy explains how Voxora Script LLC, doing business as Voxora Script ("we," "us"), collects, uses, and protects your personal information when you use voxorascript.com (the "Service"). Voxora Script LLC operates the Service and is the data controller for the personal information described in this policy. We aim to collect the minimum data needed to run the Service.

1. Information We Collect

  • Account information: your email address, display name, and a securely hashed version of your password (we never store your password in plain text).
  • Content you create: scripts, voice mappings, ad templates, and the audio files you generate.
  • Voice-cloning samples: Creator members may record or upload a voice sample with permission from the speaker. The sample is sent to ElevenLabs using the member's own API key to create the requested clone. Voxora does not retain the raw sample after that request; we keep the resulting voice ID and the time consent was confirmed.
  • Usage records: character counts and generation history, used to show you your own usage.
  • Optional product analytics: Only if you choose “Allow analytics,” HeyCatch measures pageviews, public-page interactions, campaign attribution, and technical browser information. Signed-in visits are associated with an internal account ID and plan, not your name or email. We exclude account forms, studio content, and privacy controls from automatic interaction capture, and do not intentionally send scripts, passwords, or API keys. Replit-hosted Umami is blocked by this app's browser security policy.
  • Billing information: handled by Stripe. We never see or store your full card number — we store only your Stripe customer and subscription identifiers.
  • API keys: to generate audio, you must connect your own ElevenLabs API key. We store it to make requests on your behalf. You can remove it at any time in Settings.
  • Launch notifications: if you join the launch list, we store your email address so we can notify you when Voxora Script launches.

We do not sell your personal information, and we do not use your content to train AI models.

2. How We Use Your Information

  • To provide the Service: convert your scripts to audio, save your projects, and manage your subscription.
  • To send essential account emails, such as password resets (sent via Resend).
  • To send the launch notification you requested.
  • To prevent abuse.
  • To comply with legal obligations.

3. Who We Share Data With

We share data only with the processors needed to operate the Service:

  • ElevenLabs — receives the text of scripts you generate audio from and, when a Creator member requests voice cloning, the consented voice sample submitted for that purpose.
  • Stripe — processes payments and stores your payment details.
  • Resend — delivers transactional emails (e.g., password resets) to your email address.
  • Replit — hosts the Service and its database.
  • HeyCatch — processes product analytics to help us understand usage and acquisition. See HeyCatch's privacy policy.

We may disclose information if required by law or to protect the rights, safety, or property of our users or the Service.

4. Cookies and product analytics

We use an essential session cookie that keeps you signed in. Optional analytics are off by default on both preview and published pages. Before you allow them, we do not load or initialize HeyCatch or create analytics identifiers. We save only your necessary consent choice in local browser storage. If that storage is unavailable, analytics remain off; your browser may ask again on a later visit. We do not enable session recordings.

If you allow analytics, HeyCatch uses browser storage and cookies to associate visits and campaign attribution, including anonymous visits before sign-in. Use the persistent “Privacy settings” button on any page to allow or reject optional analytics. Rejecting does not send an analytics event. Withdrawing consent blocks further analytics transport, removes analytics-owned identifiers, cookies and storage accessible to this site, and reloads the page to stop the SDK. It does not remove your login, payments, or saved app data. Withdrawal does not erase data already received by HeyCatch. Browser choices apply to this browser and origin; other browsers or devices have separate choices.

5. Data Retention

We keep your account data and content while your account is active. If you delete your account, we delete your personal data and content within 30 days, except where we must retain records (e.g., billing records) to meet legal obligations.

6. Security

Passwords are stored as salted hashes, connections are encrypted with HTTPS, and access to production data is restricted. No system is perfectly secure, but we take reasonable technical measures to protect your data.

7. Your Rights (GDPR — European Users)

If you are in the European Economic Area or the UK, you have the right to:

  • Access the personal data we hold about you;
  • Correct inaccurate data;
  • Delete your data ("right to be forgotten");
  • Export your data in a portable format;
  • Object to or restrict certain processing;
  • Withdraw consent at any time where processing is based on consent.

Our legal bases for processing are: performance of our contract with you (running the Service), legitimate interests (preventing abuse), and legal compliance. To exercise any right, email us at the address below; we respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

8. Your Rights (CCPA/CPRA — California Users)

If you are a California resident, you have the right to:

  • Know what personal information we collect and how we use it (described in this policy);
  • Delete your personal information;
  • Correct inaccurate personal information;
  • Opt out of the sale or sharing of personal information — we do not sell or share your personal information as defined by the CCPA;
  • Non-discrimination for exercising your rights.

To exercise these rights, email us at the address below. We will verify your request using your account email and respond within 45 days.

9. Children

The Service is not directed to children under 16, and we do not knowingly collect data from them. If you believe a child has created an account, contact us and we will delete it.

10. International Transfers

Our servers are located in the United States. If you use the Service from outside the U.S., your data will be processed in the U.S. under safeguards consistent with this policy.

11. Changes to This Policy

We may update this policy from time to time. Material changes will be announced on the site or by email, with the "Last updated" date revised above.

12. Contact

Privacy questions or requests may be sent to Voxora Script LLC at support@voxorascript.com.