Last updated: November 1, 2026
This Privacy Policy explains which personal data we process when you use https://ttsmp3.com, the text-to-speech converters, the member areas and the API at https://api.ttsmp3.com (the "Service"), why we do it and which rights you have.
The controller responsible for the Service is:
EPSILON WEBCRAFTS LLC
271 W. Short St Ste 410 #1522
Lexington, KY 40507
USA
For all privacy questions and requests please write to:
When you convert text, we process the text, the selected voice and settings, the time of the request and your IP address.
Retention: the IP address of a conversion is deleted after 90 days, the converted text after 12 months. After that we only keep the technical record (voice, time, number of characters and, for members, the account), which we need for usage statistics and account history.
Legal basis: performance of the service you request (Art. 6(1)(b) GDPR) and our legitimate interest in a secure, abuse-free service (Art. 6(1)(f) GDPR).
To give every visitor their own free daily quota, we set a cookie (ttsv) with a random visitor ID. It contains no personal details and is valid for one year. Together with your IP address it is used to count the characters converted per day. The counters are stored only in pseudonymized (hashed) form and are deleted after two days; older daily usage counters per IP address are deleted after 90 days.
To tell humans from automated scripts, we use Cloudflare Turnstile. Turnstile checks signals from your browser and may set its own cookies; Cloudflare processes this data as our service provider.
Legal basis: our legitimate interest in offering a free service that cannot be abused by scripts (Art. 6(1)(f) GDPR); the cookie is strictly necessary for the free quota.
When you buy a plan, our reseller FastSpring processes the payment as merchant of record. FastSpring collects your payment and billing data under its own privacy policy; we do not receive your card details. From FastSpring we receive your e-mail address, the purchased product and a reference to your order or subscription, which we need to create and renew your account.
For your account we store your e-mail address, a password hash, the plan, the remaining characters and the period of validity. For every successful login we store the time, IP address and browser identifier, to protect your account and to document the use of the Service in case of disputed payments. Login records are deleted after 180 days. If you have an API key, it is stored with your account.
Legal basis: performance of the contract (Art. 6(1)(b) GDPR), legal retention obligations (Art. 6(1)(c) GDPR) and our legitimate interest in preventing fraud (Art. 6(1)(f) GDPR).
Transactional e-mails (for example your login details) are sent through Amazon Simple Email Service. When you contact our support, your e-mail and its content are processed in our Microsoft 365 mailbox to answer your request.
Our web server records technical access data: IP address, time, requested page, status code, referrer and browser identifier. We use it to operate the Service, to find errors and to defend against attacks. Access logs are deleted after 14 days, error logs after six months. Backups of our servers are encrypted and kept for up to six weeks.
The Service is delivered through Cloudflare (content delivery and protection against attacks), which processes connection data as our service provider. Our servers are located in Canada.
Legal basis: our legitimate interest in a secure and stable Service (Art. 6(1)(f) GDPR).
We use Google Analytics to understand how our website is used, and we show ads through Google AdSense, which finances the free Service. Google may use cookies and similar technologies to measure visits and, depending on your choice, to show personalized ads.
For visitors from the European Economic Area, the UK and Switzerland, a consent banner (Google's consent management) asks for your consent before such cookies are used for personalized advertising and measurement. You can change or withdraw your choice at any time via the privacy settings link of the consent banner. Without consent, ads are shown in a non-personalized way, and Google Analytics sets no cookies: it only sends anonymous signals without identifiers (Google Consent Mode), which Google uses to estimate overall visitor numbers.
Legal basis: your consent (Art. 6(1)(a) GDPR) where required; otherwise our legitimate interest in financing the free Service (Art. 6(1)(f) GDPR). More information: How Google uses information from sites that use its services.
We use the following service providers, which process data on our behalf or as independent controllers:
Some of these providers process data outside the European Economic Area, in particular in the USA. Where required, transfers are based on an adequacy decision of the European Commission (for example for Canada or for US companies certified under the EU-US Data Privacy Framework) or on standard contractual clauses.
We keep personal data only as long as needed for the purposes described above, unless longer retention is required by law. The specific periods are stated in the sections above. Account data is kept while your account is active and afterwards as long as required for tax and accounting obligations or for possible claims.
Under the GDPR and similar laws you have the right to access your data, to rectification, to erasure, to restriction of processing, to data portability and to object to processing based on legitimate interests. Where processing is based on consent, you can withdraw it at any time with effect for the future. You also have the right to lodge a complaint with a data protection supervisory authority. To exercise your rights, please contact us at the address above, using the e-mail address of your account if your request concerns an account.
The Service is not directed at children under 16. We do not knowingly collect personal data from children.
We may update this Privacy Policy when the Service or legal requirements change. The current version is always available on this page.