SaydiVoice Privacy Policy

1. Introduction and scope

SaydiVoice is an artificial-intelligence voice service at voice.saydi.ai operated in Vietnam by SotaX Company Limited (Tax Code: 0111361643). We understand that the text you type and the audio you upload can contain personal information, business information or unpublished material. This policy sets out exactly how we handle it.

It covers the whole voice.saydi.ai website, the voice studio, the voice cloning and voice design tools, the dubbing tools, the developer API and SaydiVoice customer support channels.

This policy forms part of our Terms of Service. Where the two differ on contractual rights and obligations, the Terms of Service apply; where the question is about personal data, this policy applies.

2. Your role and Saydi AI's role

For the data you submit to SaydiVoice — text, document files, voice recordings, subtitles, video — you are the data controller: you decide the purposes and means of processing. Saydi AI is the data processor and processes that data only to provide the service to you.

For data needed to create an account, run the service, prevent abuse, take payment and support customers, Saydi AI is the controller of your personal data as a service user.

Because you control your input data, you are responsible for making sure you hold lawful consent from the data subject before uploading someone else's data — including another person's voice recording when you use voice cloning.

3. What data we collect

We collect only what is needed to operate the service:

3.1. Account information

When you create an account we receive your email, display name and profile picture (if you sign in with Google), plus your plan status and remaining allowance. Authentication is handled by Firebase Authentication; we do not store passwords in plain text.

3.2. Data you submit

Text you type and documents you upload; subtitles; voice samples used for voice cloning; audio or video you upload for dubbing and translation. This category may contain personal data, and we process it as a processor on your instructions.

3.3. Usage and technical data

Your generation and dubbing history linked to your account, the characters and seconds consumed in each allowance window, the languages and voices you choose, and your settings. We also collect technical data needed to run and protect the service: IP address, device and browser type, access times and error codes.

3.4. Transaction and payment data

Transaction reference, plan and cycle purchased, amount, payment time and activation status. Payments are processed by authorised payment partners; Saydi AI does not store card numbers or sensitive payment details on its servers.

4. Why we process your data

We use the data we collect for the following purposes:

• Providing the service: generating speech from text, cloning voices, designing voices, dubbing and translating content at your request.
• Accounts and allowances: authenticating users, tracking characters used per allowance window and applying the entitlements of the plan you bought.
• Payment and accounting: processing transactions, issuing invoices and keeping records required by tax and accounting law.
• Customer support: handling requests, complaints and bug reports.
• Safety and abuse prevention: detecting breaches of the terms of service, preventing fraud and protecting our infrastructure and other users.
• Service improvement: analysing aggregated or anonymised usage data to improve voice quality and system reliability.
• Legal compliance: responding to lawful requests from competent authorities.

5. Audio data and AI training

This is the most important section for an AI voice service, so we are explicit:

• Your data is not used to train models. Voice samples you upload for cloning and the audio you generate are not used to train Saydi AI's models.
• Voice samples are used only to create the voice you asked for. We keep them linked to your account until you delete that voice or delete your account.
• You control deletion. You may delete a cloned voice, delete your generation history or request deletion of your entire account at any time.
• Model inference runs on our infrastructure and does not send your data to a third-party AI model for training.

For features that require translation or language processing, data may be sent to an AI provider under a data-protection commitment, solely to return the result of your request and never for training.

6. Legal basis and consent

We process personal data on one or more of the following bases:

• Your consent — given when you create an account, upload a voice sample or enable a data-processing feature.
• Performance of a contract — processing needed to deliver a service you requested or paid for.
• Legal obligation — accounting and tax records, or providing information to a competent authority on lawful request.
• Legitimate interests — protecting system security and preventing fraud and abuse, without overriding your rights.

You may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out before it, but it may prevent you from using part or all of the service.

7. Sharing data with third parties

We do not sell your personal data. Data is shared only in the following cases, and only to the minimum extent necessary:

7.1. Infrastructure, storage and model inference

Data is stored on server and database infrastructure we control or rent from a cloud provider. Speech generation runs on our own GPU infrastructure.

7.2. Account authentication

We use Firebase Authentication (Google) for sign-in and session management. That provider receives the email, display name and session information needed to authenticate you.

7.3. Payments

Authorised payment partners process transactions and receive the information needed to complete payment. We do not store your card number.

7.4. Analytics and customer support

We use analytics tools to understand how the service is used; some of the analytics we rely on are designed to work without tracking cookies. Our support chat tool may process conversation content when you contact us.

7.5. Legal requests and protection of rights

We may disclose data in response to a lawful request from a competent state authority, or where necessary to protect the lawful rights and interests of Saydi AI, other users or a third party.

Every processor acting on our behalf must commit to confidentiality and may process data only on our instructions, consistent with Decree 13/2023/ND-CP.

8. How long we keep data

We keep data for as long as it is needed for the purposes described above:

• Account data: while your account is active and for a reasonable period afterwards to handle disputes and complaints.
• Voice samples and cloned voices: until you delete the voice or your account.
• Generation and dubbing history: according to your storage settings; you can delete it at any time.
• Transaction data: for the periods required by accounting, tax and anti-fraud law, including after account deletion.
• Technical data and system logs: for a short period for operations, security and incident investigation.

When a retention period ends, the data is deleted or anonymised using appropriate measures.

9. How we secure data

We apply appropriate technical and organisational measures to protect data:

• Encryption in transit: all website and API connections use HTTPS/WSS.
• Authentication and authorisation: expiring session tokens, role-based access control and a need-to-know rule for operational staff.
• Rate limiting and abuse controls: per-account and per-IP limits plus anomaly detection.
• Environment separation: secrets and infrastructure configuration are kept out of application source and out of browser bundles.
• Backups and monitoring: regular backups and system error monitoring.

No measure is absolutely secure. If you spot a security risk, please tell us immediately through our contact page.

10. Your rights as a data subject

Under Decree 13/2023/ND-CP you have the following rights over your personal data:

• Right to be informed about the processing of your personal data.
• Right to consent or refuse and to withdraw consent.
• Right of access to the data we hold about you.
• Right to correct inaccurate or incomplete data.
• Right to erasure, except where the law requires us to retain records.
• Right to restrict or object to processing in certain circumstances.
• Right to data portability — to receive your data in a readable form to move to another service where requested.
• Right to complain and to claim compensation for damage under applicable law.

Some rights may be limited where fulfilling them would infringe another person's rights, interfere with a competent authority's investigation, or where the law requires us to retain records.

11. How to exercise your rights

Many rights you can exercise yourself in the studio: delete a cloned voice, delete your generation history, update your account details, change your password or sign out of all devices.

For anything else — access, correction, deletion of all data or your account, withdrawal of consent, restriction of processing, complaints — send a request through our contact page or email contact@saydi.ai.

We verify the requester's identity so that data is never disclosed to someone not entitled to it, and we respond within 72 working hours of receiving a complete request. Where verification needs more time or the request is technically complex, we explain why and give an expected timeline.

12. Data of children under 16

The service is intended for people aged 16 and over. We do not knowingly collect or process the personal data of anyone under 16. Anyone under 16 may use the service only with the consent and supervision of a parent or legal guardian.

If we discover that we have inadvertently collected data from someone under 16 without parental or guardian consent, we will delete it as soon as possible. Parents and guardians may contact us to request deletion.

13. Cookies and analytics

SaydiVoice uses cookies and browser storage only to the extent needed:

• Essential cookies: keeping you signed in, protecting forms and remembering your language choice. Without these the service does not work correctly.
• Analytics cookies: helping us see which pages are used and which errors occur. Some of the analytics we rely on are designed without personal tracking cookies.
• Local storage: storing interface preferences and working state in your browser.

You can block or delete cookies in your browser settings. Blocking essential cookies may prevent you from signing in or using some features.

14. Transferring data outside Vietnam

Some of the infrastructure and support services we use have servers outside Vietnam. Where personal data is transferred abroad we meet our obligations under Decree 13/2023/ND-CP: preparing a transfer impact assessment, ensuring the recipient applies an equivalent level of protection, and filing the required dossier with the competent authority.

15. Responding to data incidents

If we detect an incident affecting personal data, we:

• contain, isolate and fix the incident as quickly as possible;
• assess the scope and identify which data and which data subjects are affected;
• notify the competent authority as required by law, and within 72 hours of detection where the law sets that deadline;
• notify affected users through their registered contact channel with the guidance needed to reduce risk.

16. Changes to this policy

We may update this policy when our data practices change, when we add a service provider or when the law changes. Every change is published on this page with a new update date.

For material changes affecting your rights we give notice by registered email or in-app notification before the change takes effect. Continuing to use the service after the effective date means you accept the updated policy.

17. Contact, complaints and competent authority

The controller and processor of personal data for the SaydiVoice service is SotaX Company Limited (Tax Code: 0111361643), at 2nd Floor, CIC Tower, No. 1 Nguyen Thi Due, Yen Hoa Ward, Hanoi City, Vietnam.

For any question, data-subject request or complaint about personal data, use our contact page or email contact@saydi.ai.

If you believe your rights have been infringed and you are not satisfied with our response, you may complain to the competent state authority for personal data protection or bring proceedings under applicable law. See also our Terms of Service and plan and credit policy.