Effective June 1, 2025
Legal Document • Privacy Policy

Privacy Policy

Your privacy is fundamental to how we build and operate Orate. This policy explains how we collect, use, and protect your information.

Last Updated: June 1, 2025 • Effective: June 1, 2025

1. Introduction

This Privacy Policy explains how Orate ("we", "us", or "our") collects, uses, and protects your personal information when you use our text-to-speech application and related services ("Service").

Our Privacy Commitment:

  • We collect only the information necessary to provide our services
  • We never sell your personal information to third parties
  • We use industry-standard security measures to protect your data
  • You have control over your information and can request its deletion

2. Information We Collect

2.1 Information You Provide

Account Information:

  • Name and email address
  • Account preferences and settings
  • Profile information (optional)

Content and API Keys:

  • Text content you submit for conversion
  • API keys for text-to-speech services (encrypted)
  • Voice preferences and customization settings
  • Generated audio files and metadata

2.2 Information We Collect Automatically

Usage Information:

  • Features used and frequency of use
  • Time spent in the application
  • Conversion history and preferences
  • Error logs and performance metrics

Technical Information:

  • Device type and operating system
  • Browser type and version
  • IP address and general location
  • Access times and session duration

3. How We Use Your Information

We use your information solely to provide, improve, and protect our Service:

Core Service Delivery:

  • Process text-to-speech conversions
  • Manage your audio library
  • Provide voice customization options
  • Enable BYOK API integrations

Platform Improvement:

  • Enhance user experience
  • Develop new features
  • Monitor system performance
  • Provide customer support

4. API Key Security and BYOK

Enhanced Security for Your API Keys

Your API keys are encrypted using industry-standard AES-256 encryption and stored in secure, isolated environments.

4.1 Encryption and Storage

All API keys are encrypted at rest and in transit. We use separate encryption keys for each user account, and our systems are designed so that even our administrators cannot access your unencrypted API keys.

4.2 Data Processing

When you use BYOK, your content is sent directly to your chosen third-party provider using your API keys. We act only as a secure conduit and do not store or process your content beyond what's necessary to facilitate the conversion.

4.3 Third-Party Provider Policies

Each third-party API provider (Google, Amazon, Microsoft, ElevenLabs) has their own privacy policies governing how they handle your data. We encourage you to review these policies as they apply to your use of their services through our platform.

5. Information Sharing and Disclosure

We Do NOT Sell Your Information

We do not sell, rent, or trade your personal information to third parties for marketing or advertising purposes.

5.1 Limited Sharing Scenarios

We may share your information only in these specific circumstances:

  • Service Providers: Trusted partners who help us operate the Service (hosting, analytics, customer support)
  • Legal Requirements: When required by law, court order, or government regulation
  • Safety and Security: To protect the rights, safety, or property of Orate, our users, or others
  • Business Transfers: In connection with a merger, acquisition, or sale of assets (with 30 days' notice)

6. Data Retention and Deletion

6.1 Retention Periods

  • Account Information: Retained while your account is active
  • Content and Audio Files: Retained until you delete them or close your account
  • API Keys: Retained until you remove them or close your account
  • Usage Logs: Retained for 90 days for system optimization

6.2 Account Deletion

When you delete your account, we permanently remove all your personal information, content, and API keys within 30 days. Some anonymized usage data may be retained for analytics purposes.

7. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

Access Rights

Request a copy of the personal information we hold about you

Correction Rights

Request correction of inaccurate or incomplete information

Deletion Rights

Request deletion of your personal information

Portability Rights

Request a portable copy of your data

To exercise these rights: Contact us at privacy@orateapp.com with your request. We'll respond within 30 days and may need to verify your identity.

8. Security Measures

We implement comprehensive security measures to protect your information:

Encryption

AES-256 encryption for data at rest and TLS 1.3 for data in transit

Access Control

Multi-factor authentication and principle of least privilege access

Monitoring

24/7 security monitoring and regular security audits

9. Children's Privacy

Our Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

If we discover that a child under 13 has provided us with personal information, we will delete such information from our systems promptly.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure that such transfers comply with applicable data protection laws and implement appropriate safeguards, including:

  • Standard Contractual Clauses approved by relevant authorities
  • Adequacy decisions for transfers to countries with adequate protection
  • Other appropriate safeguards as required by law

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will notify you of any material changes by:

  • Posting the updated policy on this page
  • Updating the "Last Updated" date
  • Sending you an email notification for significant changes
  • Providing in-app notifications when you next use the Service

Your continued use of the Service after any changes constitutes your acceptance of the updated Privacy Policy.

12. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

Privacy Officer: privacy@orateapp.com

General Support: support@orateapp.com

Legal Inquiries: legal@orateapp.com

Response Time: Within 30 days

Address: [Company Address]

Business Hours: Monday-Friday, 9 AM-5 PM PST

Last updated: June 1, 2025 • Effective: June 1, 2025