Privacy Policy

Information You Provide

We collect information you directly provide to us:

• Account Information: Name, email address, username, and encrypted password when you create an account
• Profile Data: Optional information such as job title, company name, bio, and profile picture
• Content: SSML projects, voice scripts, and other content you create or upload to our platform
• Communications: Messages you send us through support, feedback forms, or direct communication
• Payment Information: Billing details for premium services (processed securely by our payment partners, not stored on our servers)

Information We Collect Automatically

When you use our services, we automatically collect certain information:

• Usage Data: Features you use, projects you create, time spent on the platform, and user interactions
• Device Information: Browser type, operating system, device model, and screen resolution
• Log Data: IP address, access times, pages viewed, and referring websites
• Performance Data: Page load times, error reports, and system performance metrics
• Cookies and Similar Technologies: Data collected through cookies, web beacons, and similar tracking technologies

Information from Third Parties

We may receive information about you from:

• Social Login Providers: Basic profile information when you sign up using Google, GitHub, or other social providers
• Payment Processors: Transaction confirmations and payment status updates
• Analytics Services: Aggregated usage statistics and performance data

Service Delivery

• Provide, maintain, and improve our SSML editing tools and platform
• Process your account registration and manage your profile
• Enable you to create, edit, and share SSML projects
• Facilitate collaboration features and project sharing
• Process payments and manage billing for premium services

Communication and Support

• Respond to your questions, comments, and support requests
• Send important service notifications and security alerts
• Provide product updates and feature announcements
• Send marketing communications (only with your explicit consent)

Platform Improvement

• Analyze usage patterns to understand user needs and improve our services
• Develop new features and enhance existing functionality
• Monitor platform performance and troubleshoot technical issues
• Conduct research and generate insights to enhance user experience

Legal and Security

• Comply with legal obligations and respond to lawful requests
• Protect against fraud, abuse, and security threats
• Enforce our Terms of Service and community guidelines
• Protect our rights, property, and the safety of our users

Service Providers

We work with trusted third-party service providers who help us operate our platform:

• Cloud Infrastructure: AWS and other cloud providers for secure hosting and data storage
• Payment Processing: Stripe and other payment processors for handling billing
• Analytics: Google Analytics and similar services for usage insights
• Communication: Email service providers for transactional and marketing emails
• Support: Customer service platforms for managing support requests

These providers are contractually bound to protect your information and use it only for specified purposes.

Legal Requirements

We may disclose your information when required by law or to:

• Comply with legal processes, court orders, or government requests
• Respond to claims that content violates third-party rights
• Protect our rights, property, or safety, and that of our users
• Prevent fraud or other illegal activities

Business Transfers

If SSML Tools is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your information becomes subject to a different privacy policy.

With Your Consent

We may share your information with third parties when you give us specific consent to do so.

Technical Safeguards

• Encryption: All data transmissions use TLS 1.3 encryption, and sensitive data is encrypted at rest using AES-256
• Access Controls: Multi-factor authentication and role-based access controls for all systems
• Infrastructure Security: SOC 2 certified data centers with 24/7 monitoring and physical security
• Network Security: Firewalls, intrusion detection, and regular vulnerability assessments
• Data Backups: Encrypted, geographically distributed backups with regular recovery testing

Operational Security

• Employee Training: Regular security awareness training for all team members
• Background Checks: Comprehensive screening for employees with access to user data
• Incident Response: 24/7 security monitoring with documented breach response procedures
• Vendor Management: Security assessments and contractual protections for all service providers
• Regular Audits: Internal and external security audits to identify and address vulnerabilities

Access and Portability

• Right to Access: Request a copy of the personal information we have about you
• Data Portability: Receive your data in a structured, machine-readable format
• Account Dashboard: View and manage most of your information through your account settings

Control and Correction

• Right to Rectification: Correct inaccurate or incomplete information
• Right to Deletion: Request deletion of your personal information
• Right to Restriction: Limit how we process your information in certain circumstances
• Account Deletion: Delete your account and associated data at any time

Communication Preferences

• Marketing Opt-out: Unsubscribe from marketing emails at any time
• Notification Controls: Manage email and in-app notification preferences
• Consent Withdrawal: Withdraw consent for optional data processing

Types of Cookies

• Essential Cookies: Required for basic site functionality, security, and user authentication
• Performance Cookies: Help us understand site usage and identify areas for improvement
• Functionality Cookies: Remember your preferences and settings across sessions
• Marketing Cookies: Used for targeted advertising and measuring campaign effectiveness (with consent)

Managing Cookies

You can control cookies through:

• Our cookie consent banner and preference center
• Your browser settings (note: this may affect site functionality)
• Third-party opt-out tools like the Network Advertising Initiative
• Browser extensions that block tracking

Third-Party Analytics

We use Google Analytics to understand how users interact with our platform. This service may set cookies and collect information about your usage. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

Account Data

• Active Accounts: Retained while your account is active and for legitimate business purposes
• Closed Accounts: Most data deleted within 30 days, with some information retained for fraud prevention
• SSML Projects: Deleted when you delete them or close your account

Business Records

• Payment Records: Retained for 7 years as required by financial regulations
• Support Communications: Retained for 3 years for quality assurance and training
• Legal Documentation: Retained as required by applicable laws

Analytics Data

• Usage Analytics: Aggregated data retained for 2 years to improve our services
• Performance Metrics: System performance data retained for 1 year
• Error Logs: Technical logs retained for 6 months for troubleshooting

Transfer Safeguards

• Adequacy Decisions: We prioritize transfers to countries with strong privacy laws
• Standard Contractual Clauses: Use EU-approved contract terms for international transfers
• Security Measures: Implement additional technical and organizational safeguards
• Regular Reviews: Continuously assess the adequacy of our transfer mechanisms

Primary Locations

• United States: Primary data processing and storage infrastructure
• European Union: EU user data processed within the EU when required by law
• Service Providers: Some partners may process data in other jurisdictions with appropriate safeguards

Age Restrictions

Our services are designed for users who are at least 13 years old (16 years old in the European Union). We do not knowingly collect personal information from children below these age limits without proper parental consent.

Parental Rights

If you believe we have collected information from a child under the applicable age limit, please contact us immediately. Parents and guardians have the right to:

• Review their child's personal information
• Request deletion of their child's data
• Refuse further collection or use of their child's information

Educational Use

When educational institutions use our services, we comply with applicable education privacy laws like FERPA and provide additional protections for student data.

How We Notify You

• Email Notification: We'll send you an email about significant changes
• Platform Notice: Display a prominent notice on our website
• Account Dashboard: Notify you through your account settings

Your Choices

• Review Period: Changes take effect 30 days after notification (unless immediate compliance is legally required)
• Continued Use: Using our services after changes take effect means you accept the updated policy
• Objection: If you disagree with material changes, you can close your account before they take effect