Last updated September 5, 2026. This is the whole policy — no boilerplate, no clause you can skip.
Signing in is passwordless: enter your email address and we send a one-time code, through Resend, that you type back into the app — there's no password and no separate sign-in page. The only email we ever send is that code, triggered by you entering your address. No marketing, no newsletters, ever.
When you record a take, that recording is sent to ElevenLabs for voice conversion and discarded as soon as the converted clip is produced. The recording itself is never stored on our servers.
Lines are synthesized by Cartesia or Fish Audio, depending on the voice, and the result is stored content-addressed and cached indefinitely, so the same line synthesized the same way is never converted twice. A plain synthesis clip (no reading behind it) is shared across everyone who asks for that exact line and voice. A clip made from a personal reading is keyed to that reading and is not shared with other users.
Signed out, your script stays on your device: projects are stored in your browser's own storage and are not uploaded or synced, and are kept until you delete them. Signed in, projects you save are stored in your account so they are available on your other devices, kept until you delete them or close your account. Scripts made on this device before signing in are moved to your account only if you choose to when asked. When you generate audio for a line, that line's text is sent to our voice service only to be spoken (see Clips, above) and discarded afterwards — only the resulting audio clip is stored.
Payments are handled by Stripe. We never see or store your card details. Your conversion-minutes balance itself is kept for the life of your account.
The app and your account run on AWS: Cognito holds your sign-in identity, S3 stores saved projects and cached clips, and Lambda runs the backend that talks to them. Together with Stripe, Cartesia, Fish Audio, ElevenLabs, and Resend, these services process data in the United States, under standard contractual safeguards for anything leaving the EU.
The app reports usage events and session activity (via Amplitude, including session replay) to help us understand how the product is used and improve it — but only once you agree to the one-time prompt asking permission; nothing runs before you answer. Session replay is blocked while you're viewing script content — script text never leaves your device for analytics purposes. Events are kept per Amplitude's own retention schedule.
You can ask to see, correct, export, or delete whatever we hold about you. Deletion is self-serve: open the avatar menu and choose "Delete account." The analytics choice above can be changed anytime from that same menu's "Usage analytics" toggle. For anything else, write to the contact address below and we'll answer within 30 days.
Questions about this policy: info@reader.actor.