1. Overview

JSF Labs (Private Limited) operates jsflabs.io, an AI voice synthesis and voice cloning platform. This policy explains what we collect, why we collect it, how we protect it, and the choices you have. It applies to our website, dashboard, API and every product we offer.

We have deliberately built this platform to collect as little as possible. If we do not need a piece of information to run the service, bill you correctly, or keep the platform safe, we do not ask for it.

2. Account information

When you create an account we collect and store:

• Your email address — used to identify your account, send service notices, and recover access.
• Your password — stored only as a one-way cryptographic hash. We never store, log or transmit your password in readable form, and no member of our team can view it.
• Basic profile details you choose to provide, such as a display name or organisation.
• Technical records such as IP address, browser type and login timestamps, kept for security and abuse prevention.

If you lose access to your account, we verify ownership before restoring it. We will never ask you for your password over email, WhatsApp or any other channel.

3. Your scripts, samples and generated audio

The text you submit, the audio samples you upload for cloning, the voices you create and the audio we generate for you are collectively your content. Your content is private.

• We do not use your content to train, fine-tune or evaluate our models.
• We do not share, sell, license or publish your content.
• We do not listen to or read your content except in two narrow cases: when you explicitly ask us to (for example, you send us a script so we can help debug output quality), or where we are legally compelled to.
• Access inside JSF Labs is restricted on a least-privilege basis and is logged.

Your content is retained on your account so you can access it, and is deleted when you delete it, when you close your account, or in line with the retention periods below — whichever comes first.

4. Voice cloning — your responsibility

Voice cloning is powerful, and the responsibility for how it is used sits with you. By uploading a voice sample you confirm and warrant that:

• The voice is your own, or you have the explicit, informed and documented consent of the person it belongs to.
• You have the legal right to clone and use that voice for your intended purpose, including any commercial use.
• You will not clone the voice of any public figure, celebrity or private individual without their permission.
• You will not use a cloned voice to impersonate anyone, commit fraud, spread misinformation, harass, or produce unlawful content.

JSF Labs provides the technology; we do not review or approve the identity behind every sample, and we cannot verify consent on your behalf. You are solely liable for any claim arising from a voice you clone. If we receive a credible complaint that a voice was cloned without consent, we may remove the voice and suspend the account while we investigate.

5. Generated content and how it may be used

Audio generated on a paid plan is yours to use, including commercially, subject to our Terms & Conditions and the consent requirements above. You are responsible for what you publish, distribute or broadcast.

You may not use generated audio to deceive people about who is speaking, to create content that is defamatory, hateful, sexually explicit involving minors, or otherwise unlawful, or to bypass any platform's authentication or verification systems.

We may embed inaudible provenance markers in generated audio to support responsible-AI verification. These markers do not identify you personally to third parties and do not affect audio quality.

6. Payments and billing information

Payments are processed by regulated third-party payment providers. Your full card number, CVV and banking credentials are handled directly by those providers and never reach or get stored on JSF Labs servers.

We retain only what we need for accounting and dispute handling: the transaction reference, amount, currency, date, plan purchased, and — where the provider supplies it — the last four digits and card brand. Invoices are retained for as long as tax and company law requires.

7. Credits and expiry

Character credits added to your account are valid for 30 days from the date they are credited. Any unused balance expires at the end of that 30-day window and is not refundable or transferable.

• Credits are consumed oldest-first, so the balance closest to expiry is always used before newer credits.
• Your dashboard shows the expiry date attached to each credit batch.
• We send a reminder before credits are due to expire so nothing lapses without notice.
• Expired credits cannot be reinstated. Please plan top-ups around your actual monthly usage.

8. How we protect your data

• Encryption in transit (TLS) on every connection, and encryption at rest for stored content.
• Passwords hashed with a modern, slow, salted algorithm — never reversible.
• Role-based internal access on a least-privilege basis, with access logging.
• Isolated storage for voice models and generated audio, separate from public infrastructure.
• Regular backups, with the same encryption and retention rules as live data.

No system is perfectly secure. If a breach ever affects your personal data, we will notify affected users promptly, explain what happened in plain language, and tell you exactly what we are doing about it.

9. Who we share data with

We do not sell your data, and we do not share it for advertising. We share the minimum necessary with a small number of service providers who help us operate:

• Cloud hosting and storage providers that run our infrastructure.
• Payment processors that handle your transactions.
• Email delivery providers used to send service and account notices.
• Error and performance monitoring tools that help us keep the platform stable.

Each provider is bound by contract to process data only on our instructions. We may also disclose information where we are legally required to, or where it is necessary to protect the rights and safety of our users or the public.

10. Cookies and analytics

We use essential cookies to keep you signed in and to keep your session secure — these cannot be switched off without breaking the service. We also use privacy-respecting analytics to understand aggregate usage, such as which features are used and where errors occur.

We do not run third-party advertising trackers and we do not build advertising profiles of our users.

11. Data retention

• Account data — kept while your account is active, then deleted within 30 days of closure.
• Scripts, voice samples, cloned voices and generated audio — kept until you delete them or close your account.
• Payment and invoice records — kept as long as tax and company law requires, even after account closure.
• Security and access logs — kept for a limited period for abuse prevention, then discarded.

12. Your rights and controls

You can, at any time:

• Access and update your account details from your dashboard.
• Download or export the content you have created.
• Delete individual voices, projects or audio files.
• Request full deletion of your account and associated data.
• Ask us what personal data we hold about you and why.
• Object to a specific use of your data, or withdraw a consent you previously gave.

To exercise any of these, email privacy@jsflabs.io from your registered address. We respond within 30 days, and usually far sooner.

13. Children

JSF Labs is not intended for anyone under 13, and users under 18 should only use the platform with the involvement of a parent or guardian. We do not knowingly collect data from children. If you believe a child has created an account, contact us and we will remove it.

14. Account suspension and our reserved rights

JSF Labs reserves the right to restrict, suspend or permanently terminate any account, and to remove any voice or content, where we reasonably believe there has been:

• Voice cloning without the consent of the voice owner.
• Use of the platform for fraud, impersonation, harassment, or any unlawful purpose.
• Breach of these terms, our Services Policy or our Terms & Conditions.
• Abuse of credits, payment fraud, chargeback abuse, or attempts to circumvent usage limits.
• Activity that threatens the security, stability or reputation of the platform or its users.

Wherever it is reasonable and safe to do so, we will tell you why and give you a chance to respond. In serious or urgent cases — particularly those involving harm to another person — we may act immediately. Where an account is terminated for a breach, unused credits are forfeited.

15. Changes to this policy

We may update this Privacy Policy at any time as our products, infrastructure or legal obligations change. The revision date at the top of this page always reflects the current version.

For material changes — anything that meaningfully affects how we handle your data — we will notify you by email or by an in-product notice before the change takes effect. Continuing to use JSF Labs after a change means you accept the updated policy. If you do not agree, you may close your account at any time.

16. Contact us

Questions, concerns or requests about privacy go to privacy@jsflabs.io. For anything else, support@jsflabs.io reaches the support team.

JSF Labs (Private Limited), Zahir Pir, Rahim Yar Khan, Pakistan.