Privacy Policy

1. Introduction

Welcome to tts.cx. This Privacy Policy explains how Tyga.Cloud Ltd (Company No: 14643275), trading as tts.cx ("we," "us," "our," or "tts.cx"), collects, uses, discloses, and safeguards your personal information when you visit our website at tts.cx (the "Website"), use our text-to-speech platform (the "Platform"), or interact with any of our related services (collectively, the "Services").

Tyga.Cloud Ltd is registered in England and Wales with its registered office at Ground Floor, Unit 2 Mallard Court, Mallard Way, Crewe Business Park, Crewe, Cheshire, England, CW1 6ZQ.

tts.cx is a text-to-speech platform that enables developers, applications, and AI coding agents ("Tenants") to convert text into natural-sounding speech through an API. The Platform is designed so that applications and AI agents are primary users, interacting programmatically via API keys alongside human developers who use the dashboard.

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, email address, postal address, telephone number, payment information, IP address, device identifiers, and any other information that can be used directly or indirectly to identify an individual.
• "Services" means the tts.cx platform, including all features, tools, APIs, and functionalities provided to Tenants and their team members, whether accessed via the Website, API keys, or any other means.
• "Website" means tts.cx and all subdomains, as well as any API endpoints and documentation hosted on the tts.cx platform infrastructure.
• "Tenant" means any individual, team, or entity that registers for a tts.cx account to obtain API keys and use the Platform.
• "Agent" means any AI coding agent, application, or programmatic client that interacts with the Platform via API keys on behalf of a Tenant.
• "Synthesis Content" means the text a Tenant or Agent submits to the Platform to be converted into speech, and the audio output generated from it.

By accessing or using our Services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with this Privacy Policy, you must not access or use our Services.

2. Applicability

This Privacy Policy applies to all users of the tts.cx platform, including Tenants, their team members, AI agents acting on behalf of Tenants, and casual visitors to the Website. It is important to understand the different roles that tts.cx and Tenants play with respect to the processing of personal data.

tts.cx as Data Controller

tts.cx acts as the data controller for personal data that we collect directly from you in connection with your use of our platform. This includes:

• Account registration information provided by Tenants and their team members
• Billing and subscription data related to tts.cx platform subscriptions
• Usage data, analytics, and technical information collected through the platform
• Communications between you and tts.cx (e.g., support requests, marketing emails)
• Information collected from visitors to tts.cx (the main marketing website)
• API key usage logs and rate limit data

tts.cx as Data Processor

When Tenants use tts.cx to generate speech, the Tenant is the data controller for the Synthesis Content they submit through the platform. In this context, tts.cx acts as a data processor, processing that content on behalf of and under the instructions of the Tenant. Tenants are responsible for ensuring that they have a lawful basis for submitting any text that contains, or that produces audio containing, personal data.

tts.cx provides tools and features to assist Tenants in meeting their obligations under applicable data protection laws, but each Tenant is ultimately responsible for their own compliance. If you have questions about how a specific Tenant processes data submitted to the platform, or if you wish to exercise your data protection rights with respect to data that a Tenant controls, please direct your request to the relevant Tenant in the first instance.

3. Information We Collect

3.1 Information You Provide Directly

We collect personal data that you voluntarily provide to us when you register for an account, subscribe to a plan, contact us, or otherwise interact with our Services. This includes:

Account Registration (Tenants):

• Full name and display name
• Email address
• Password (stored in encrypted form)
• Organisation or application name
• API keys generated for agent and application access

Billing Information (Tenants):

• Payment card details (processed and stored securely by our payment processor, Stripe; tts.cx does not store full card numbers on our servers)
• Billing name and address
• Subscription plan details and usage tier

Communications:

• Customer support inquiries and correspondence
• Feedback, reviews, and survey responses
• Email marketing preferences and opt-in status

3.2 Information Collected Automatically

When you access or use our Services, we automatically collect certain information about your device and your use of the platform. This includes:

Log Data:

• IP address
• Browser type and version
• Operating system
• Referring URL and exit pages
• Date and time of access
• API request logs, including endpoints called, character counts, response codes, and rate limit usage
• Error logs and performance data

Cookies and Similar Technologies:

• Session cookies to maintain your login state
• Preference cookies to remember your settings and display preferences
• Security cookies to detect and prevent fraudulent activity

For detailed information about the cookies we use and how to manage your cookie preferences, please refer to our Cookie Policy.

Usage Analytics:

• Feature usage patterns and frequency
• API call volumes, characters synthesised, and rate limit consumption
• Platform performance metrics
• Aggregate and anonymised usage statistics provided to Tenants via their dashboards

4. Synthesis Content and Voice Data

Because tts.cx is a speech platform, we want to be explicit about how we handle the text you submit and the audio we generate.

• Text submitted for synthesis is processed solely to generate the requested audio and to operate, secure, and improve the reliability of the Service. It is transmitted over encrypted connections.
• Generated audio may be held transiently in a performance cache so that repeated requests for identical text and voice can be served quickly. Cache entries are short-lived and size-limited, and are not used to build a profile of you.
• We do not sell Synthesis Content, and we do not use the specific text you submit to train models for third parties.
• We do not collect voice recordings or biometric voiceprints from you. Our ready-made and custom signature voices are produced through our own synthesis methods; using the Platform does not require you to upload recordings of any person's voice, and we do not derive biometric identifiers from your account.

Tenants must not submit text that they are not authorised to process, and must not use the Platform to generate speech that impersonates a real person without appropriate consent. See our Terms of Service for the full acceptable-use requirements.

5. How We Use Your Information

We use the personal data we collect for the following purposes:

5.1 Providing and Maintaining Our Services

• Creating and managing your tts.cx account and API keys
• Processing synthesis requests from AI agents, applications, and human users
• Facilitating payment processing through Stripe for subscription billing
• Providing customer support and responding to enquiries
• Sending transactional emails, including account confirmations, billing notifications, and platform updates

5.2 Improving and Developing Our Platform

• Analysing usage patterns to improve features, user experience, and platform performance
• Conducting internal research and development
• Monitoring and enforcing usage limits, rate limits, and subscription tiers
• Generating aggregate, anonymised analytics and reporting

5.3 Communications

• Sending administrative communications about your account, subscription, or the Services
• Providing customer support and technical assistance
• Sending marketing communications about new features, updates, and offers (with your consent, where required)

5.4 Protecting Rights and Ensuring Safety

• Detecting, preventing, and addressing fraud, abuse, and security incidents
• Enforcing our Terms of Service and other policies
• Enforcing API rate limits and preventing platform abuse

5.5 Legal Compliance

• Complying with applicable laws, regulations, and legal processes
• Responding to lawful requests from public authorities
• Fulfilling tax reporting obligations
• Establishing, exercising, or defending legal claims

6. Information Sharing

We do not sell your personal data to third parties. We may share your personal data in the following circumstances:

6.1 Service Providers

We engage trusted third-party service providers to perform functions on our behalf. These providers have access to your personal data only to the extent necessary to perform their functions and are contractually obligated to maintain its confidentiality and security. Our key service providers include:

• Stripe: Payment processing and subscription billing, in accordance with PCI DSS standards. See Stripe's Privacy Policy.
• Cloud Hosting Providers: We use cloud infrastructure services to host the platform, store data, and deliver content, on servers located in secure data centres with appropriate physical, technical, and organisational safeguards.
• Email Service Providers: We use third-party email services to send transactional and marketing communications on our behalf.
• Website Analytics: Page views on our public website are counted by a self-hosted, cookieless analytics service operated by Tyga.Cloud Ltd on our own infrastructure. No analytics data is shared with an external analytics vendor and none of it is used for advertising. You can switch this off at any time using the Analytics category in our cookie controls.

6.2 Affiliates and Related Companies

We may share your personal data with Tyga.Cloud Ltd's affiliated entities for purposes consistent with this Privacy Policy. Any such affiliates will be required to honour this Privacy Policy in their handling of your personal data.

6.3 Government and Legal Requests

We may disclose your personal data if required to do so by law, or if we believe in good faith that such disclosure is necessary to comply with a legal obligation, protect our rights or property, prevent or investigate wrongdoing, protect the personal safety of users or the public, or protect against legal liability.

6.4 Business Transfers

In the event that Tyga.Cloud Ltd or tts.cx is involved in a merger, acquisition, reorganisation, sale of assets, or bankruptcy, your personal data may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal data, and any choices you may have, in accordance with applicable law.

7. Children's Privacy

tts.cx is not directed to individuals under the age of 18. We do not knowingly collect personal data from children under the age of 18. If you are under 18, you may not create a tts.cx account or use our Services without the consent and supervision of a parent or legal guardian.

If we become aware that we have collected personal data from a child under the age of 18 without verification of parental consent, we will take steps to delete that information as promptly as possible. If you believe that we may have collected such data, please contact us at dpo@tyga.cloud.

8. Your Rights and Choices

8.1 Account Management

If you are a Tenant, you can access, update, and manage much of your personal data through your tts.cx dashboard settings, including your profile information, billing information, API keys, and notification preferences. You can also delete your account by contacting our support team, which will result in the removal of your account data in accordance with our data retention practices and applicable legal obligations.

8.2 Email Communications

You can opt out of receiving marketing and promotional emails by clicking the "unsubscribe" link included in each marketing email, or by updating your communication preferences in your account settings. Even if you opt out of marketing communications, we may still send you transactional emails related to your account and Services.

8.3 Cookies

You can manage your cookie preferences through your browser settings or through the cookie controls provided on our Website. For detailed information, please see our Cookie Policy.

8.4 Data Access, Portability and Deletion

You have the right to request a copy of the personal data we hold about you, and to request its correction or deletion, subject to certain exceptions required by law (e.g., data we must retain for tax, accounting, or legal compliance purposes). To make a request, please contact us at dpo@tyga.cloud. We will process your request within 30 days, or within the timeframe required by applicable law.

9. Security and Storage

We take the security of your personal data seriously and implement industry-standard technical and organisational measures to protect it against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption in Transit: All data transmitted between your browser (or agent) and our servers is encrypted using TLS (Transport Layer Security) / HTTPS protocols.
• Encryption at Rest: Sensitive data stored on our servers, including passwords and payment tokens, is encrypted using strong encryption algorithms. Passwords are hashed.
• Access Controls: We implement role-based access controls so that only authorised personnel have access to personal data, and only to the extent necessary for their job functions.
• Infrastructure Security: Our platform is hosted on secure cloud infrastructure with firewalls, intrusion detection, and regular security patching.
• Multi-Tenant Isolation: The platform implements tenant-level data isolation to ensure that each Tenant's data is logically separated from other tenants.
• API Key Security: API keys are generated with cryptographic randomness and can be revoked at any time by the Tenant. All API requests are authenticated and rate-limited.
• Payment Security: Payment card data is processed and stored by Stripe in compliance with PCI DSS Level 1 standards. tts.cx does not store full payment card numbers on its own servers.

While we strive to use commercially acceptable means to protect your personal data, no method of transmission over the Internet or method of electronic storage is 100% secure. In the event of a data breach that affects your personal data, we will notify you and the relevant supervisory authority as required by applicable law.

10. International Data Transfers

Tyga.Cloud Ltd is based in the United Kingdom. Our servers and service providers may be located in various countries. When you use our Services, your personal data may be transferred to and processed in countries other than your country of residence.

Where we transfer personal data outside the United Kingdom or the European Economic Area (EEA), we ensure that appropriate safeguards are in place, which may include Standard Contractual Clauses (SCCs), the UK International Data Transfer Agreement (IDTA) or UK Addendum, reliance on adequacy decisions, and supplementary technical and organisational measures. For more information, please contact us at dpo@tyga.cloud.

11. EU and UK GDPR Rights

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, you have certain rights under the General Data Protection Regulation (GDPR) and the UK GDPR, as applicable.

11.1 Legal Basis for Processing

• Performance of a Contract: Processing necessary to provide the tts.cx platform services, manage your subscription, and process synthesis requests.
• Legitimate Interests: Processing necessary for our legitimate interests, such as operating and improving our platform, preventing fraud, and ensuring security, provided these are not overridden by your rights and freedoms.
• Consent: Where we rely on your consent (e.g., for marketing communications or non-essential cookies), you may withdraw it at any time without affecting the lawfulness of prior processing.
• Legal Obligation: Processing necessary for compliance with a legal obligation to which we are subject.

11.2 Your GDPR Rights

• Right of Access to the personal data we hold about you.
• Right to Rectification of inaccurate or incomplete data.
• Right to Erasure ("right to be forgotten") in certain circumstances.
• Right to Restriction of Processing in certain circumstances.
• Right to Data Portability in a structured, commonly used, machine-readable format.
• Right to Object to processing based on legitimate interests or for direct marketing.
• Right to Withdraw Consent at any time where processing is based on consent.
• Right to Lodge a Complaint with a supervisory authority. In the UK, this is the Information Commissioner's Office (ICO) at ico.org.uk.

11.3 Data Retention

• Active Accounts: Retained for as long as your account remains active and for a reasonable period thereafter.
• Transaction Records: Retained for a minimum of 6 years to comply with UK tax, accounting, and legal reporting requirements.
• Log Data: Server logs and API request logs are typically retained for up to 12 months for security, debugging, and analytical purposes, after which they are deleted or anonymised.
• Synthesis Content: Text submitted for synthesis is not retained beyond what is necessary to generate and transiently cache the audio output.
• Deleted Accounts: When a Tenant deletes their account, we permanently delete their personal data within 30 days, except where retention is required for legal compliance.

To exercise any of your GDPR rights, please contact our Data Protection Officer at dpo@tyga.cloud. We will respond within one month, which we may extend by a further two months for complex requests, in which case we will inform you.

12. California CCPA Disclosures

If you are a California resident, the California Consumer Privacy Act of 2018 (CCPA), as amended by the California Privacy Rights Act (CPRA), provides you with specific rights regarding your personal information. This section supplements the rest of this Privacy Policy and applies solely to California residents.

12.1 Categories of Personal Information Collected

• Identifiers: Name, email address, IP address, account username, unique personal identifiers, API keys.
• Commercial Information: Records of subscriptions purchased, billing history, and usage tiers.
• Financial Information: Payment card details (processed by Stripe), billing address, transaction history.
• Internet or Network Activity: API request logs, interactions with our Website and Services, log data.
• Geolocation Data: Approximate location derived from IP address.
• Professional Information: Organisation or application name and other professional details provided by Tenants.

12.2 No Sale of Personal Information

tts.cx does not sell and has not sold the personal information of its users in the preceding 12 months. We also do not "share" personal information for cross-context behavioural advertising purposes as defined by the CPRA.

12.3 Your California Privacy Rights

As a California resident, you have the right to know, the right to delete, the right to correct, the right to opt out of any sale or sharing, the right to limit use of sensitive personal information, and the right to non-discrimination for exercising your rights. To exercise any of these rights, please contact us at dpo@tyga.cloud. We will verify your identity before processing your request and will respond within 45 days as required by the CCPA.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make changes, we will revise the "Effective Date" at the top of this page. For material changes, we will provide additional notice, such as a prominent notice on our Website or within the dashboard, or an email notification to registered Tenants.

We encourage you to review this Privacy Policy periodically. Your continued use of the Services after the effective date of any updated Privacy Policy constitutes your acceptance of the changes.

14. Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy or our data processing practices, or if you wish to exercise any of your rights, please contact us:

Data Protection Officer
Email: dpo@tyga.cloud

Tyga.Cloud Ltd
Company No: 14643275
Ground Floor, Unit 2 Mallard Court
Mallard Way, Crewe Business Park
Crewe, Cheshire, England
CW1 6ZQ

We aim to respond to all enquiries within 30 days. If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by telephone at 0303 123 1113.