Echo.AIGet Started

Privacy Policy

Last updated: September 7, 2026  ·  Echo AI / veddaai.com

1. Introduction

Echo AI ("we", "us", "our") operates the veddaai.com website and the Echo AI desktop application ("Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. Please read this policy carefully. If you disagree with its terms, please stop using the Service.

2. Information We Collect

2.1 Account Information
  • Email address
  • Full name
  • Profile picture (when signing in with Google)
  • Password (stored as a one-way hash — never in plain text)
  • Google account ID (when signing in with Google)

2.2 Subscription & Payment Information
  • Subscription plan and status
  • Billing dates and payment history
  • Paystack customer and subscription codes
  • Card authorization tokens (stored by Paystack — we never store full card numbers)

2.3 Usage Data
  • Feature usage counts and API request logs
  • Audio processing minutes
  • Voice profiles selected during sessions

2.4 Technical Data
  • IP address at account registration (used for fraud and abuse detection)
  • Browser type and operating system
  • Session tokens (stored in your browser's localStorage)

2.5 Audio Data

Audio processed in real time passes through our cloud servers for voice conversion and is not permanently stored. Reference audio clips you voluntarily upload for voice cloning are stored securely on our servers and used solely to generate your chosen voice profile.

3. How We Use Your Information

We use the information we collect to:
  • Create and manage your account and subscription
  • Process payments and send billing confirmations
  • Provide and operate the voice conversion Service
  • Send transactional emails (welcome, trial expiry, billing receipts)
  • Detect and prevent fraud, abuse, and multi-account violations
  • Improve the Service and troubleshoot technical issues
  • Comply with legal obligations
We do not use your data for advertising, profiling, or selling to third parties.

4. How We Share Your Information

We share your information only with the following trusted service providers, strictly as necessary:
  • Paystack — payment processing. Your card details are handled directly by Paystack under their PCI-DSS compliance. We only receive a reusable authorization token.
  • Google — OAuth 2.0 authentication when you choose "Sign in with Google". Governed by Google's Privacy Policy.
  • Modal.com — cloud GPU inference for real-time audio processing. Audio is processed in memory and not stored.
  • Render.com — web server and database hosting.
We do not sell, rent, or trade your personal data to any third party.

5. Data Retention

Your account data is retained for as long as your account is active. If you request account deletion, we will permanently delete your personal data within 30 days, except where retention is required by law (e.g. billing records may be retained for up to 7 years for tax purposes).

6. Your Rights

Depending on your location, you may have the following rights:
  • Access: Request a copy of the personal data we hold about you
  • Correction: Request correction of inaccurate data
  • Deletion: Request deletion of your account and associated data
  • Portability: Request your data in a machine-readable format
  • Objection: Object to processing of your data in certain circumstances
To exercise any of these rights, email us at veddassistance@gmail.com. We will respond within 30 days.

7. Security

We implement industry-standard security measures including:
  • HTTPS/TLS encryption for all data in transit
  • One-way password hashing (passwords are never stored in plain text)
  • IP-based fraud detection to protect your account from unauthorized access
  • Secure JWT tokens with expiration for session management
No system is 100% secure. We encourage you to use a strong, unique password and to contact us immediately if you suspect unauthorized access to your account.

8. Cookies

We use only essential cookies required for authentication and session management. We do not use tracking cookies, advertising cookies, or third-party analytics cookies. You can disable cookies in your browser settings, but this may prevent you from logging in.

9. Children's Privacy

The Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal data from a child under 13, we will delete it immediately.

10. International Users

Your information may be processed and stored in servers located outside your country of residence. By using the Service, you consent to the transfer of your information to these locations, which may have different data protection laws than your country.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice on the Service. The "Last updated" date at the top of this page reflects when changes were last made. Continued use of the Service after changes take effect constitutes acceptance of the revised policy.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us:

Echo AI
Email: veddassistance@gmail.com
Website: https://veddaai.com