Privacy Policy | CreoleCentric

1. Introduction

CreoleCentric Labs ("CreoleCentric," "we," "our," or "us") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our text-to-speech services, website at creolecentric.com, and any related applications or services (collectively, the "Services").

By using our Services, you consent to the data practices described in this Privacy Policy. If you do not agree with our policies and practices, please do not use our Services.

2. Information We Collect

2.1 Information You Provide to Us

Account Information: Name, email address, username, password, and profile information
Payment Information: Billing address, payment method details (processed securely by our payment providers Stripe, PayPal, and NOWPayments)
Content Data: Text you submit for translation or text-to-speech conversion, voice recordings for voice cloning (Enterprise only)
Communication Data: Messages, support tickets, and feedback you send to us
API Credentials: API keys and authentication tokens for developer accounts

2.2 Information We Collect Automatically

Usage Data: Features used, time spent, frequency of use, performance metrics
Device Information: Browser type, operating system, device identifiers, IP address
Log Data: Access times, pages viewed, app crashes, system activity
Location Data: Approximate location based on IP address
Cookie Data: Authentication tokens, preferences, session information

3. How We Use Your Information

3.1 To Provide and Maintain Services

Process text-to-speech synthesis requests
Perform language translation services
Manage your account and authentication
Process payments and manage subscriptions
Track credit usage and allocations
Provide customer support

3.2 To Improve Our Services

Analyze usage patterns and user behavior
Develop new features and services
Optimize performance and user experience
Train and improve our AI models (using anonymized data only)
Fix bugs and technical issues

3.3 To Communicate With You

Send service-related notifications
Respond to inquiries and support requests
Provide updates about new features or changes
Send marketing communications (with your consent)
Alert you about security issues or account activities

4. Data Storage and Security

4.1 Data Storage

Your data is stored on secure servers provided by our hosting partners:

Primary Infrastructure: Hetzner (Germany) - Main application and database hosting
Audio Storage: Hetzner S3 Object Storage - Generated audio files
Content Delivery: Cloudflare - Global CDN and DDoS protection
Backup Systems: Encrypted daily backups with 30-day retention

4.2 Security Measures

We implement industry-standard security measures including:

SSL/TLS encryption for all data in transit
Encryption at rest for sensitive data
Regular security audits and vulnerability assessments
Access controls and authentication requirements
Secure API endpoints with rate limiting
HMAC verification for webhook communications
PCI-compliant payment processing

4.3 Data Retention

Account Data: Retained for the duration of your account plus 90 days after deletion
Generated Audio: Stored for 30 days for registered users, 24 hours for anonymous users
Usage Logs: Retained for 12 months for analytics and debugging
Payment Records: Retained for 7 years as required by financial regulations

5. Data Sharing and Disclosure

5.1 We Do Not Sell Your Data

CreoleCentric does not sell, trade, or rent your personal information to third parties.

5.2 Service Providers

We share data with trusted service providers who assist in our operations:

Payment Processors: Stripe, PayPal, NOWPayments (payment information only)
Infrastructure Providers: Hetzner, Cloudflare (hosting and delivery)
Analytics Services: Usage analytics (anonymized data only)
Communication Tools: Email service providers for transactional emails

5.3 Legal Requirements

We may disclose your information when required to:

Comply with legal obligations or court orders
Protect the rights, property, or safety of CreoleCentric, our users, or others
Investigate fraud or security issues
Enforce our Terms of Service

5.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, user information may be transferred as part of the business assets. We will notify you of any such change and any choices you may have regarding your information.

6. Your Rights and Choices

6.1 Access and Control

You have the right to:

Access: Request a copy of your personal data
Correction: Update or correct inaccurate information
Deletion: Request deletion of your account and associated data
Portability: Receive your data in a structured, machine-readable format
Objection: Object to certain types of processing
Restriction: Request limited processing of your data

6.2 Communication Preferences

Opt-out of marketing emails via unsubscribe links
Manage notification preferences in account settings
Disable cookies through browser settings (may affect functionality)

6.3 Data Export

You can export your data including generated audio history, usage statistics, and account information through your account dashboard or by contacting support.

7. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws different from your country. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

For users in the European Economic Area (EEA), we rely on:

Standard Contractual Clauses approved by the European Commission
Adequacy decisions where applicable
Your explicit consent for certain transfers

8. Children's Privacy

Our Services are not intended for children under 18 years of age. We do not knowingly collect personal information from children under 18. If we learn we have collected information from a child under 18, we will delete that information promptly. Parents or guardians who believe we might have information from or about a child under 18 should contact us immediately.

9. Cookies and Tracking Technologies

9.1 Types of Cookies We Use

Essential Cookies: Required for authentication and core functionality
Preference Cookies: Remember your settings and preferences
Analytics Cookies: Help us understand usage patterns (anonymized)
Session Cookies: Temporary cookies deleted when you close your browser

9.2 Managing Cookies

You can control cookies through your browser settings. Disabling certain cookies may limit functionality of our Services.

10. California Privacy Rights (CCPA)

California residents have additional rights under the California Consumer Privacy Act (CCPA):

Right to know what personal information is collected, used, shared, or sold
Right to delete personal information
Right to opt-out of sale of personal information (we do not sell personal information)
Right to non-discrimination for exercising privacy rights

To exercise these rights, contact us at [email protected] or through your account settings.

11. European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):

Legal Basis: We process your data based on consent, contract performance, legal obligations, or legitimate interests
Data Protection Officer: Contact our DPO at [email protected]
Supervisory Authority: You have the right to lodge a complaint with your local data protection authority

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will notify you of material changes by:

Posting the updated policy on our website
Updating the "Last Updated" date
Sending email notification for significant changes
Requiring acknowledgment for material changes affecting your rights

13. Contact Information

For questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

CreoleCentric Labs
Email: [email protected]
Support: [email protected]
Address: 2220 CR-210 W, Suite 108-171, St Johns, FL 32256
Website: https://creolecentric.com

Data Protection Officer:
Email: [email protected]

Last updated: January 29, 2025
Version: 2.0
Effective Date: January 29, 2025