Privacy Policy

Last updated: June 8, 2026

This Privacy Policy explains how Sayoria ("we", "us", "our") collects, uses, and protects information when you use our text-to-speech service at sayoria.com (the "Service"). We respect your privacy and aim to be transparent about our practices.

1. Who We Are

Sayoria is operated from Turkey. For questions about this policy or your personal data, contact us at support@sayoria.com.

2. Information We Collect

2.1 Information you provide

• Account data: your email address and password (stored hashed) when you sign up.
• Text input: the text you submit to be converted into speech.
• Communications: messages you send to support.

2.2 Information collected automatically

• Usage data: which voices you use, the number of characters processed, timestamps, and language selected. We use this to track credit consumption and improve the Service.
• Technical data: IP address, browser type, device information, and pages visited. Used for security and abuse prevention.
• Cookies and similar technologies: see our Cookie Policy.

2.3 Information from third parties

• Payment data: when you make a purchase, our payment processor Lemon Squeezy shares with us a transaction ID, the purchased product, and the amount. We do not see or store your full card number — that data is held by Lemon Squeezy and their card networks.

3. How We Use Your Information

• To provide the Service: authenticate your account, generate audio from your text, track and update your credit balance.
• To process payments and prevent fraud, through our Merchant of Record (Lemon Squeezy).
• To communicate with you about your account, transactions, and important Service updates.
• To improve the Service: aggregate usage analysis (which voices are popular, error rates, etc.).
• To comply with legal obligations (taxes, regulatory requests).

4. Legal Bases (EU/UK/EEA users)

We process your data based on:

• Contract performance — to deliver the Service you signed up for;
• Legitimate interests — to keep the Service secure and improve it;
• Consent — for optional features such as marketing emails (which you can opt out of at any time);
• Legal obligation — for accounting, tax, and regulatory compliance.

5. Sharing with Third Parties

We share data only with the service providers necessary to run Sayoria. These are bound by data protection agreements and process data only on our behalf:

• Microsoft Azure — for AI text-to-speech generation (West Europe region). Your text is sent for processing and the resulting audio returned. Microsoft processes the text transiently and does not retain it for model training.
• Supabase — for database and authentication hosting (EU region).
• Lemon Squeezy — Merchant of Record; processes all payments.
• Render — for application hosting (EU region).
• Namecheap / Cloudflare — domain and DNS infrastructure.

We do not sell your personal data to third parties for advertising.

6. Data Retention

• Account data is kept while your account is active. If you close your account, we delete personal data within 30 days, except where retention is required by law (e.g., transaction records for tax compliance, typically 5 years in Turkey).
• Generated audio files are stored temporarily on our servers (typically up to 7 days) so you can re-download them. After that they are deleted.
• Text input is not stored long-term; it is held only as long as needed to process the request and log usage statistics (character count only — not the text content).
• Backups may retain data for an additional 30 days for disaster recovery.

7. Your Rights

Depending on where you live, you may have the right to:

• Access the personal data we hold about you;
• Correct inaccurate data;
• Delete your data ("right to be forgotten");
• Restrict or object to certain processing;
• Data portability (receive a copy of your data in a structured format);
• Withdraw consent at any time;
• Lodge a complaint with your data protection authority.

To exercise any of these rights, email support@sayoria.com. We will respond within 30 days.

8. KVKK Notice (Turkey)

For users in Turkey, the Personal Data Protection Law No. 6698 ("KVKK") applies. The data controller is the Sayoria operator. Personal data is processed in accordance with KVKK principles: lawful, transparent, accurate, purpose-limited, and proportionate. You may exercise your rights under Articles 11 of KVKK by contacting support@sayoria.com.

9. International Transfers

Our infrastructure providers operate data centers in the European Union (Ireland, Germany). When you use the Service, your data is processed in the EU and may be transferred between EU member states. We rely on Standard Contractual Clauses and other appropriate safeguards for any transfers outside the EU.

10. Security

We use industry-standard security measures including HTTPS encryption, hashed passwords, secret rotation, and access controls. No system is 100% secure, but we work to protect your data against unauthorized access, alteration, or destruction.

11. Children

The Service is not intended for children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be announced on the website or by email. The "Last updated" date at the top of this page reflects the latest revision.

13. Contact

For any privacy-related question or to exercise your rights, contact us at support@sayoria.com.

Questions? Contact us at support@sayoria.com