Privacy Policy

Last updated: March 6, 2026

1. Information We Collect

We collect the following types of information when you use RPGVoices:

  • Account information: email address, display name, and a securely hashed password (we never store your password in plain text)
  • Content you provide: text you upload or paste for synthesis, NPC character profiles and knowledge bases, voice presets, and generated audio files
  • Usage data: monthly character consumption, storage usage, subscription tier and status
  • Payment information: billing details are collected and processed directly by Stripe; we store only your Stripe customer ID and subscription status — never your credit card number
  • Technical data: IP address (for rate limiting and security only), session cookies, and request logs

2. How We Use Your Information

We use your information to:

  • Provide the text-to-speech synthesis service
  • Manage your account and subscription
  • Enforce usage limits and rate limits
  • Send transactional emails (verification, password reset, subscription changes)
  • Protect the security and integrity of the Service
  • Improve the Service based on aggregate, anonymized usage patterns

We do not sell your personal information. We do not use your text content or generated audio for any purpose other than providing the Service to you.

3. Third-Party Services

We use the following third-party services to operate RPGVoices:

  • Google Gemini API: Your text is sent to Google's servers for audio synthesis. Google's Gemini API Terms of Service and Privacy Policy apply.
  • Stripe: Handles all payment processing. Stripe's Privacy Policy applies to payment data.
  • Resend: Delivers transactional emails (verification, password reset, notifications). Resend's Privacy Policy applies.
  • Cloudflare: Provides bot protection (Turnstile CAPTCHA) on login and registration. Cloudflare's Privacy Policy applies.
  • MongoDB Atlas: Hosts our database. MongoDB's Privacy Policy applies.
  • Render: Hosts the application. Render's Privacy Policy applies.

4. Data Retention

We retain your data for as long as your account is active. Generated audio files are stored in your personal library until you delete them or delete your account. Text content is stored until you delete it or delete your account. Rate-limit and login-attempt records are automatically purged via time-to-live (TTL) indexes. Upon account deletion, all your personal data, text content, audio files, voice presets, and NPC profiles are permanently deleted.

5. Data Security

We take security seriously and implement the following measures:

  • Passwords are hashed using industry-standard algorithms (bcrypt/scrypt) and never stored in plain text
  • All connections use HTTPS encryption in transit
  • Content Security Policy (CSP) with per-request nonces prevents cross-site scripting
  • CSRF tokens protect all form submissions
  • Account lockout after repeated failed login attempts
  • Session cookies are HTTP-only, Secure, and SameSite
  • Rate limiting protects against abuse

6. Your Rights

You have the right to:

  • Access your data: Export all your data from the Profile page using the "Export My Data" feature
  • Correct your data: Update your email, display name, and password from the Profile page
  • Delete your data: Permanently delete your account and all associated data from the Profile page
  • Download your audio: Download any generated audio file from your Library

To exercise any of these rights, visit your Profile page or contact us at support@rpgvoices.com.

7. Cookies & Sessions

RPGVoices uses session cookies to keep you logged in. These cookies are essential for the Service to function and cannot be disabled. We do not use tracking cookies, advertising cookies, or third-party analytics cookies. Session cookies expire after 24 hours of inactivity.

8. Children's Privacy

RPGVoices is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13, we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice on the Service. Your continued use of the Service after changes take effect constitutes acceptance of the revised policy.

10. Contact

If you have questions about this Privacy Policy or how we handle your data, please contact us at support@rpgvoices.com.