Privacy Policy

In this Policy, 'VSL', 'we', 'us' and 'our' refer to the VSL entity responsible for the relevant processing. The VSL entity identified in your order form, subscription, account documentation or other customer agreement is responsible for personal data connected with that customer relationship. For website visitors and platform users who do not have an agreement identifying a VSL entity, VSL Global Pte. Ltd. is the data controller.

This Policy applies where VSL determines why and how personal data is processed, including website,sales, account, billing, support, security and direct-marketing data.

Where VSL processes text, audio, video, images, scripts, translations, Voice Data or other content solely on behalf of an enterprise or business customer, that customer is generally the controller and VSL acts as its processor or service provider. That processing is governed by the customer agreement and, where applicable, a Data Processing Addendum or 'DPA'.

If a customer agreement or DPA conflicts with this Policy in relation to Customer Content, the customer agreement or DPA controls to the extent of that conflict.

Depending on the relationship, purpose and applicable law, we process personal data to:

Where laws such as the UK GDPR require a lawful basis, our bases may include performance of a contract, compliance with a legal obligation, legitimate interests, consent and, where VSL acts as a processor, the documented instructions of the relevant customer.

VSL does not sell personal data. We do not share Customer Content or Voice Data for third-party behavioural advertising.

The following providers may process personal data or Customer Content for VSL, depending on the Services and configuration used:

We assess Subprocessors on a risk-based basis and require confidentiality, security and data-protection commitments appropriate to their services.Enterprise notice and objection rights are governed by the applicable DPA or customer agreement.

VSL operates internationally. Personal data may be transferred to and processed in countries other than the country where it was collected, depending on the VSL entity, customer configuration, hosting environment and providers selected for a project.

Where required, we use recognised safeguards for international transfers, such as adequacy decisions, standard contractual clauses, the UK International Data Transfer Agreement or the UK Addendum, and contractual protections that provide a comparable standard of protection.

You may contact privacy@vslglobal.ai for information about the safeguards relevant to your personal data.

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, including to provide the Services, follow customer instructions, comply with law, resolve disputes, maintain security and enforce agreements. A customer agreement, DPA, order form, account setting or documented deletion request may set a different period.

We use technical and organisational measures designed to protect personal data and Customer Content against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

Depending on the system and risk, these measures include HTTPS and TLS encryption in transit, encryption at rest for supported AWS storage and production databases, role-based access controls through Clerk and AWS IAM, edge and web-threat protections through AWS CloudFront and Vercel, operational logging through AWS CloudWatch and PostHog, confidentiality obligations, vendor assessment and incident-response procedures.

No system can be guaranteed completely secure. You are responsible for protecting your credentials, configuring permissions appropriately and notifying us promptly if you suspect unauthorised access.

Where required by applicable law or an enterprise DPA, VSL will notify the relevant customer, individual or authority of a qualifying personal-data breach within the applicable timeframe.

We use strictly necessary technologies to provide functions such as authentication, account security, load balancing, fraud prevention and remembering privacy choices.

With your consent where required, we use analytics and performance technologies to understand how the website and product are used. PostHog analytics and session replay do not operate until you accept analytics through VSL's consent tool.

You can accept, reject or manage non-essential technologies through the consent tool and can change your choice at any time through the Cookie choices link in the footer. Our Cookie Notice provides further informations

Depending on your location and VSL's role, you may have the right to:

To exercise a right, contact privacy@vslglobal.ai. We may need to verify your identity and clarify the request. Where VSL acts only as a processor for a business customer, we may refer the request to that customer or assist it in responding.

You can unsubscribe from marketing emails using the link in the message. Withdrawal of consent does not affect processing carried out lawfully before the withdrawal.

UK residents may complain to the Information Commissioner's Office at ico.org.uk. Individuals in Singapore may contact the Personal Data Protection Commission at pdpc.gov.sg. You may also complain to the authority responsible for data protection where you live or work.

The Services are not directed to individuals under 18. You must be at least 18, or the age of legal majority in your jurisdiction, to create or operate an account.

A verified business or enterprise customer may provide Customer Content involving a minor only where it has a valid legal basis, all required rights and documented consent from a parent, guardian or other authorised representative. Creating a voice model of a minor requires prior written approval from VSL and any verification VSL reasonably requires.

VSL may restrict the providers or workflow available for content involving a minor and may decline a project where rights, safety, contractual or legal requirements are not satisfied.

VSL prohibits any use that exploits, sexualises, deceives or otherwise harms a child. If you believe a minor's personal data or voice has been provided without appropriate authority, contact privacy@vslglobal.ai.

The Services may contain links to third-party websites or integrate with services controlled by others. Their privacy practices may apply to processing they carry out independently. Review their notices before providing personal data or enabling an integration.

We may update this Policy when our Services, providers, legal obligations or data practices change. We will update the date above and provide additional notice where required by law or contract.