Privacy Policy

About this policy

IndexTTS Online is an independently operated third-party web service for AI text-to-speech and authorized voice cloning using the IndexTTS model family. We are not affiliated with, endorsed by, sponsored by, or operated by Bilibili or the official IndexTTS team.

The publisher and website operator is the independent team responsible for indextts.online, operating under the product identity IndexTTS Online. Our primary public contact for privacy, account, billing, abuse, copyright, and legal-notice questions is support@indextts.online.

This Privacy Policy explains the information we process when you browse the site, upload or record a reference voice, generate speech, sign in, save voices, use History, buy a Voice Pack or Pro subscription, or interact with analytics and advertising features.

Information we process

Account and authentication data

If you sign in through a supported identity provider, we may receive account information made available through that sign-in flow, such as your name, email address, profile image, provider account identifier, and authentication/session data. We do not receive the password you use with the identity provider.

We store account and session records needed to keep you signed in and protect account access. Security records may include IP address and user-agent information where needed for authentication, abuse prevention, or incident investigation.

Anonymous and security data

You can use eligible trial features without signing in. Anonymous use relies on a signed anonymous session identifier. For quota enforcement and abuse prevention, we may also derive pseudonymous or hashed network/security signals.

When additional bot, abuse-prevention, or content-safety checks are enabled, a security service may process technical signals or submitted synthesis text needed to distinguish legitimate use from abuse and to enforce our Acceptable Use Policy.

Reference voice, text, and generated audio

To use voice cloning, you may upload a WAV file or record a short reference voice in your browser. Browser recordings may be converted to a compatible audio format before upload. The current product is designed for short reference samples rather than long source recordings.

For a generation request, we process information needed to provide and protect the feature, including:

• the reference audio used for voice cloning;
• the text you ask the voice to speak;
• the selected model, language, emotion mode, pace, or optional preset;
• content-safety decisions associated with the synthesis text;
• operational generation metadata such as status, timing, duration, entitlement source, and model information;
• the generated audio output.

The synthesis text may be processed by a content-safety service before generation and again before generated audio is released. We keep limited safety decision records for abuse review and enforcement; these records may include a hash of submitted text rather than an additional copy of the text itself.

Reference audio and text required for generation may be transmitted to managed AI-processing infrastructure. Generated output is returned to IndexTTS Online and may be stored in private object storage so that authorized users can play or download it.

Saved Voices and History

Signed-in users can save reusable reference voices. Saved Voice records may include a user-provided name, private object reference, file type, size, duration, source type, and timestamps.

Generation History stores the information needed to show and manage prior generations during the applicable retention period. Retention varies by plan and product state. Temporary generation inputs and outputs may remain for a limited operational period required for generation, reliability, security review, and cleanup. Saved Voices remain until deleted or otherwise removed under account or service lifecycle rules.

Billing and purchase data

Paid checkout is processed through an external payment provider. We may process billing-related records needed to connect a verified provider order with your IndexTTS Online account and entitlement, including provider order identifiers, product identifiers, purchase status, currency and amount when supplied by the provider, timestamps, refund status, and Voice Pack or subscription entitlement records.

We do not need your full payment-card number or card security code to operate the product. Those payment credentials are handled by the checkout/payment provider under its own terms and privacy practices.

Product feedback and demand signals

We may record limited product-research signals such as use-case choices, meaningful quota blocks, trial completion, interest in a Voice Pack or Pro plan, and whether a checkout flow was started or completed. These signals are used to understand whether the product solves a real need and what to improve next.

Analytics and technical data

We may process ordinary website and infrastructure data such as pages requested, timestamps, browser/device information, referring URLs, errors, session identifiers, and network/security metadata.

We may derive an approximate country or region from the public IP associated with a request. We use country-level location signals for market and product analysis, localization, security, and abuse prevention. We do not need precise GPS coordinates, exact street location, or postal-code information for this purpose. An observed network country is approximate and may differ from where a person normally lives, for example when a VPN, proxy, carrier network, travel network, or corporate network is involved.

When traffic analytics are enabled, analytics services may process website interaction information such as session statistics, approximate location, browser/device information, referring sources, first-party measurement identifiers, and feature interactions. Traffic analytics are used for acquisition and broad funnel understanding; they are not the authority for account entitlements or generation quotas.

Advertising status

IndexTTS Online does not currently load a third-party display-ad network on its public product pages. The previous Google AdSense setup has been removed.

If display advertising is enabled again in the future, we will update this policy and the Cookie Policy before enabling the relevant ad network or advertising cookies, and we will apply any consent controls required for affected regions.

We do not intentionally include direct personal identifiers such as email addresses, telephone numbers, full names entered into account profiles, payment-card data, or authentication secrets in any future advertising request URLs or ad-targeting parameters.

How we use information

We use information to:

• provide voice cloning, text-to-speech, playback, download, Saved Voices, History, and paid entitlements;
• authenticate users and attach eligible anonymous state after sign-in;
• enforce trial, Voice Pack, Pro, concurrency, content-safety, security, and anti-abuse rules;
• process verified purchase, subscription, refund, and entitlement events;
• investigate reports of unauthorized voice cloning, impersonation, prohibited content, security issues, or other abuse;
• operate, debug, secure, measure, and improve the service;
• understand acquisition, product usage, and conversion while avoiding use of advertising requests as a channel for direct PII;
• support advertising and advertising measurement where enabled and lawfully permitted;
• comply with applicable legal obligations and respond to valid legal requests.

We do not sell personal data.

Service-provider categories and data recipients

IndexTTS Online relies on service providers to operate the hosted product. Depending on the feature and deployment configuration, information may be processed by categories of providers such as:

• web hosting, application delivery, and networking providers;
• private object-storage and managed database providers;
• AI model-processing and inference providers;
• identity and authentication providers;
• security, content-safety, and abuse-prevention providers;
• website analytics and measurement providers;
• advertising and advertising-measurement providers when advertising is enabled;
• payment and checkout providers for one-time or recurring purchases.

We provide each service provider only the information reasonably needed for the relevant function, subject to its applicable terms, privacy commitments, and our configuration of the service.

Official IndexTTS research or demo media may also be loaded from external research-media hosts. When your browser requests those assets, the host may receive ordinary request metadata such as IP address, user agent, and requested URL.

Data security

We use technical and organizational measures intended to reduce unauthorized access, including encrypted transport, access controls, private storage for hosted audio, limited-duration access links where appropriate, server-side ownership checks, authentication controls, content-safety controls, webhook verification for paid entitlements, and abuse protections. No internet service can guarantee absolute security.

International processing

Service providers may process information in countries other than your own. Processing and transfers are subject to applicable law and the safeguards available for the relevant service and jurisdiction.

Your choices and rights

Depending on where you live and the law that applies, you may have rights to request access, correction, deletion, portability, or restriction of certain personal data, and to object to certain processing.

You can delete individual Saved Voices from the product where self-service deletion is available. For account, privacy, or data-deletion requests that are not available through self-service controls, contact support@indextts.online.

You can control cookies and local storage through your browser. Disabling essential browser storage may prevent authentication, anonymous trial tracking, language preferences, generation resume, or other product features from working correctly. Advertising and consent choices may also be available through our consent interface and the relevant third-party provider controls.

Age and children's data

The hosted voice-generation and voice-cloning service is for users aged 18 or older. We do not knowingly offer the hosted generation service to children.

Do not submit a minor's voice or personal information unless you have the authority, consent, and other lawful basis required by applicable law. If you believe a minor's personal information has been submitted improperly, contact support@indextts.online so we can review the report.

Changes to this policy

We may update this policy when product capabilities, data practices, service-provider categories, advertising configuration, consent controls, safety controls, or legal requirements change. We will update the revision date above when a new version is published.

Contact

For privacy, account, data-deletion, billing, abuse-reporting, copyright, or legal-notice questions, contact support@indextts.online or visit our Contact page.