Last updated: April 2026
Effective date: April 2026
ON Industries Pty Ltd (“Spoken”, “we”, “us”, or “our”) operates spokenhq.com and the Spoken platform. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our services.
By using Spoken, you agree to the collection and use of information in accordance with this policy.
Spoken is operated by ON Industries Pty Ltd, a company registered in New South Wales, Australia.
Contact:
When you create an account, we collect your email address and password (stored as a secure hash). We never store your password in plain text.
If you choose to create a cloned voice, we collect:
Important: Raw audio recordings used to create your voice clone are permanently deleted within 24 hours of successful clone creation. Only the AI voice clone model is retained, and only for as long as you maintain an active account.
Your voice clone is processed by our AI voice systems to create a personalised voice model. This voice model is used solely to generate audio versions of your newsletter content on the Spoken platform.
We never use your voice data to train general AI models. We never sell, share, or license your voice data to third parties.
We store the text content of newsletters you submit for audio generation, the audio episodes generated from that content, and metadata about those episodes (title, creation date, play statistics).
We collect anonymised data about how listeners interact with your audio episodes, including play counts, completion rates, and listening duration. This data is associated with your account for the purpose of providing you with analytics.
Payments are processed by Stripe. We do not store your credit card number, CVV, or full payment details on our servers. We store only a Stripe customer ID and subscription status.
We automatically collect IP addresses, browser type, device information, and access logs for security and operational purposes.
We use your information to:
Voice recordings and AI voice clones constitute biometric data under various laws including the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and applicable Australian Privacy Act provisions.
We only create a voice clone with your explicit, informed consent. You must actively confirm:
This consent is recorded with a timestamp and cannot be collected automatically or through pre-checked boxes.
You may delete your voice clone at any time from your account settings. Deletion is permanent and cannot be undone. Upon deletion, we will remove the voice clone model from our systems and from our AI voice processing provider within 30 days.
We share data with the following third-party services to operate the platform:
| Service | Purpose | Data shared |
|---|---|---|
| Supabase | Database and authentication | Account data, episode data |
| AI voice processing provider | Voice clone creation and TTS | Audio recordings, voice clone model |
| Stripe | Payment processing | Email, subscription data |
| Vercel | Hosting and infrastructure | All platform data (hosted on their servers) |
| Resend | Transactional email delivery | Your email address |
We do not sell your personal information to third parties. We do not share your personal information with advertisers.
| Data type | Retention period |
|---|---|
| Account data | Until account deletion + 30 day grace period |
| Voice clone model | Until deleted by user or account deletion |
| Raw audio recordings | Deleted within 24 hours of clone creation |
| Episode audio files | Until deleted by user or account deletion |
| Payment records | 7 years (Australian tax law requirement) |
| Consent logs | 7 years (anonymised after account deletion) |
| Usage analytics | 2 years |
You may delete your account at any time from your settings page. Upon requesting deletion:
You have the right to:
In addition to the above, you have the right to:
Our legal bases for processing are:
California residents have the right to:
To exercise any of these rights, contact privacy@spokenhq.com.
We use essential cookies required to operate the platform (authentication sessions). We do not use advertising cookies or third-party tracking cookies. You may disable cookies in your browser but this will prevent you from logging in to the platform.
We implement appropriate technical and organisational measures to protect your personal information including encrypted data transmission (HTTPS), encrypted storage of sensitive data, access controls limiting who can access your data, and regular security reviews.
No method of transmission over the internet is 100% secure. In the event of a data breach affecting your personal information, we will notify you as required by applicable law.
Spoken is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from anyone under 18. If you believe we have inadvertently collected information from a minor, contact us at privacy@spokenhq.com and we will delete it promptly.
Spoken is operated from Australia. If you access the platform from the EU, UK, or California, your data may be transferred to and processed in Australia and other countries where our service providers operate. We ensure appropriate safeguards are in place for such transfers in compliance with GDPR requirements.
We may update this Privacy Policy from time to time. We will notify you of material changes by email and by updating the “Last updated” date at the top of this page. Continued use of Spoken after changes constitutes acceptance of the updated policy.
For privacy-related enquiries: privacy@spokenhq.com
For general support: support@spokenhq.com
ON Industries Pty Ltd
New South Wales, Australia