VoiceMaker, a product of EqualyzAI Limited

Privacy Policy

Effective date: 1st June, 2026

Your privacy matters to us. This Privacy Policy explains what personal data EqualyzAI Limited collects when you use VoiceMaker, why we collect it, how we use and protect it, and what rights you have over it. Please read it carefully before using the platform.

This Policy applies to all users of VoiceMaker, including website visitors, registered users, and guests who interact with the platform without creating an account. By accessing or using VoiceMaker, you acknowledge that you have read, understood, and agree to the terms of this Privacy Policy.

We are committed to processing your personal data in a lawful, fair, and transparent manner, in line with the Nigeria Data Protection Act (NDPA) 2023 and all applicable guidelines issued by the Nigeria Data Protection Commission (NDPC). We implement appropriate technical and organisational measures to safeguard your information against unauthorised access, loss, misuse, or disclosure.

Where required, we will seek your consent before collecting or processing your personal data, and you retain the right to withdraw such consent at any time, subject to legal or contractual restrictions.

1. Who We Are

VoiceMaker is a voice-first artificial intelligence platform owned and operated by EqualyzAI Limited ("EqualyzAI", "we", "us", or "our"). VoiceMaker allows users to generate voiceovers using text-to-speech, transcribe audio, clone voices, animate content, and access other AI-powered voice features.

We are committed to protecting the personal data of everyone who uses or interacts with VoiceMaker, in accordance with the Nigeria Data Protection Act (NDPA) 2023 and all applicable data protection laws.

2. Who This Policy Applies To

This Policy applies to:

●      Registered users: Individuals and organisations that create an account on VoiceMaker to generate voiceovers, transcribe audio, clone voices, or use other features on the platform.

●      Guest users: Individuals who use limited VoiceMaker features without creating an account.

●      Website visitors: Individuals who visit, access, or browse the VoiceMaker website (myvoicemaker.ai) without necessarily signing up or using the platform.

●      Business users: Organisations that access VoiceMaker through our API or enterprise integrations.

3. Personal Data We Collect

3.1 Account and Registration Data

When you register for a VoiceMaker account, we collect:

●      Full name

●      Email address

●      Password (stored in hashed form)

●      Optional: workspace name, profile picture, and any other information you choose to add to your profile

●      For paid users: billing name, billing address, and payment reference information

3.2 Content You Upload or Generate

When you use VoiceMaker, we process content you provide or generate, including:

●      Text scripts: The text you submit for text-to-speech generation.

●      Uploaded audio and video files: Files you submit for transcription.

●      Generated audio output: The voiceover audio produced by our text-to-speech models.

●      Transcription output: The text produced by our speech-to-text models.

●      Voice cloning samples: Audio recordings you provide to create a cloned voice profile. See Section 5 for detailed terms on voice cloning.

●      Explain For Me content: Text or prompts you submit to the Explain For Me feature, which is processed using OpenAI's API.

●      Animate For Me content: Scripts and voice samples used to generate animated content through HeyGen's API.

3.3 Usage and Technical Data

We automatically collect certain technical and usage information when you access VoiceMaker, including:

●      IP address

●      Browser type, version, and configuration

●      Device type, operating system, and device identifiers

●      Pages visited, features accessed, and interactions within the platform

●      API request logs, generation metadata, and timestamps

●      Error reports, crash data, and system performance metrics

●      Session duration, access times, and referring URLs

This information is collected through server logs, cookies, and similar tracking technologies. We use it for analytics, security monitoring, troubleshooting, and improving the platform.

3.4 Payment Data

Payment transactions on VoiceMaker are processed by Flutterwave, our third-party payment provider. EqualyzAI does not collect or store full card numbers, card verification values (CVV), or other sensitive financial credentials.

We receive and retain limited payment-related information, including transaction references, payment status, billing details, and partial card information (for example, the last four digits), for billing, account management, record-keeping, and compliance with applicable tax and financial reporting obligations.

All payment processing is subject to the security and privacy practices of Flutterwave. We encourage you to review Flutterwave's privacy policy before providing your payment information.

3.5 Communications Data

If you contact us through email, support forms, chat, or the platform's feedback feature, we collect the contents of those communications, including your contact details, correspondence history, and any information you choose to share.

We use this data to respond to your enquiries, provide support, troubleshoot issues, improve our services, and maintain records of our interactions.

3.6 Cookies and Tracking Technologies

We use cookies and similar technologies on the VoiceMaker website and dashboard. Please refer to Section 12 for details on our use of cookies and your choices.

4. Voice Data and Biometric Considerations

Voice recordings constitute biometric data under the Nigeria Data Protection Act 2023. We take the sensitivity of voice data seriously and implement heightened safeguards to protect it.

How we handle voice data: We process voice data (including uploaded audio for transcription, voice samples for cloning, and generated audio output) strictly to provide the services you request. We do not use voice data to uniquely identify individuals for any purpose other than voice cloning as expressly requested by you.

Security measures for voice data: Voice data is encrypted in transit and at rest, access is restricted to authorised systems and personnel on a need-to-know basis, and we maintain audit logs of access to voice data storage.

Retention of voice data: Voice data is retained for 90 days after generation or upload, after which it is automatically deleted, unless you have chosen to save specific outputs to your account library or a longer retention period is required by law. Cloned voice profiles are retained until you delete them, with a 30-day grace period after account deletion.

5. Voice Cloning: Specific Terms

Voice cloning is a sensitive feature that allows you to create a synthetic version of a voice from an audio sample. Because of the potential for misuse, voice cloning on VoiceMaker is subject to the following specific terms:

5.1 Ownership and Consent

By uploading a voice sample for cloning, you represent and warrant that:

●      The voice belongs to you, or you have obtained explicit, informed, written consent from the person whose voice is being cloned.

●      You have the legal right to use the voice for the purposes you intend.

●      You will not use cloned voices to impersonate real people without their explicit consent, create defamatory content, produce fraudulent audio, or engage in any activity that violates applicable law.

We reserve the right to review voice clone submissions and to reject or delete any clone we reasonably believe violates these terms.

5.2 Consent Confirmation

Before creating a voice clone, you will be required to confirm through an in-platform consent mechanism that you own the voice or have obtained the necessary consent from the voice owner. This confirmation is recorded and retained as evidence of your representation.

5.3 Retention and Deletion

Cloned voice profiles are stored securely and retained until you delete them. You can delete a cloned voice at any time from your account dashboard. Upon account deletion, cloned voices are retained for a 30-day grace period to allow for account recovery, after which they are permanently deleted.

5.4 Watermarking and Audit

Audio generated from cloned voices carries an inaudible digital watermark to allow us to identify content generated on our platform. We maintain audit logs of voice cloning activity, including the account, timestamp, and consent confirmation.

5.5 Restrictions

You may not use VoiceMaker's voice cloning feature to:

●      Clone the voice of any public figure, celebrity, or private individual without their explicit, documented consent.

●      Generate audio intended to defame, harass, defraud, or mislead any person or organisation.

●      Produce content that violates any person's rights of publicity, privacy, or intellectual property.

●      Circumvent voice-based authentication systems.

●      Generate content that violates applicable laws, including electoral, defamation, and consumer protection laws.

Violations of these restrictions may result in immediate account suspension, deletion of cloned voices, and referral to relevant authorities where required by law.

6. How We Use Your Personal Data

We use your personal data for the following purposes:

●      Providing the services: To operate VoiceMaker, generate voiceovers, transcribe audio, clone voices, and deliver the features you use.

●      Account management: To create and maintain your account, authenticate you, process payments, and manage subscriptions.

●      Customer support: To respond to your enquiries, troubleshoot issues, and provide technical assistance.

●      Service improvement: To monitor platform performance, understand usage patterns, and improve our services (see Section 7 on AI model training).

●      Security: To detect, prevent, and respond to security incidents, fraud, abuse, and unauthorised use of the platform.

●      Legal compliance: To comply with applicable laws, regulations, court orders, and lawful requests from public authorities.

●      Communications: To send you service-related notifications, updates, and, where you have consented, marketing communications.

We process personal data on the following lawful bases under the NDPA 2023:

●      Performance of a contract (to deliver the services you have subscribed to)

●      Legitimate interests (to improve our services, ensure security, and prevent fraud)

●      Legal obligation (to comply with tax, financial reporting, and other applicable laws)

●      Consent (for optional processing activities, including AI model training and marketing communications)

7. AI Model Training

EqualyzAI does not use user content (including uploaded audio, generated audio, transcription text, voice cloning samples, or any other user-generated content) to train or improve our AI models without your explicit, prior opt-in consent.

Where you provide opt-in consent through your account settings, we may use your content, in a manner consistent with applicable data protection laws, to improve our text-to-speech, speech-to-text, and voice models, including improving support for Nigerian and other African languages. You may withdraw your consent at any time through your account settings. Withdrawal of consent will not affect the lawfulness of any processing carried out prior to withdrawal, but we will stop using your content for training purposes going forward.

We will not sell, license, or transfer user content to any third party for the purpose of training their AI models.

Where we use content for training under your opt-in consent, we apply appropriate safeguards, including removing direct identifiers where feasible and restricting access to training datasets to authorised personnel.

8. Data Sharing and Disclosure

We do not sell your personal data. We share personal data only where necessary and in the following circumstances:

●      Service providers (sub-processors): With trusted third-party vendors who provide services such as cloud infrastructure, payment processing, AI models, and analytics, under strict confidentiality and data protection obligations. See Section 8.1 for the current list.

●      Legal obligations: Where required to comply with applicable laws, regulations, court orders, or lawful requests by public authorities, including the Nigeria Data Protection Commission.

●      Business transfers: In connection with a merger, acquisition, restructuring, or sale of assets, subject to appropriate safeguards.

●      Protection of rights: Where necessary to protect the rights, property, or safety of EqualyzAI, our users, or others.

●      With your consent: Where you have provided your explicit, informed, and specific consent.

8.1 Sub-Processors

We engage the following third-party service providers to help us operate VoiceMaker. All sub-processors are bound by confidentiality agreements and data processing terms that restrict their use of your data to specific purposes and require them to implement appropriate technical and organisational measures to protect personal data.

 

Sub-processor

Purpose

Data processed

Google Cloud Platform (Google LLC)

Cloud infrastructure, hosting, storage, and compute

All user data, including account information, uploaded content, and generated output

Flutterwave

Payment processing

Billing information and transaction data

OpenAI

Explain For Me feature (natural language processing)

Text prompts submitted to Explain For Me

HeyGen

Animate For Me feature (video/animation generation)

Scripts and voice samples used for animation

Google Analytics 4 (Google LLC)

Website and platform usage analytics

IP address, browser type, pages visited, session data

 

You may request an up-to-date list of our sub-processors by contacting us at privacy@equalyz.ai. We will notify users of material changes to our sub-processor list where required by applicable law.

8.2 Legal Requirements

We may disclose personal data where necessary to:

●      Comply with applicable laws, regulations, or valid legal processes within the Federal Republic of Nigeria.

●      Respond to lawful requests from government, law enforcement, or regulatory authorities, including the Nigeria Data Protection Commission (NDPC).

●      Protect and enforce the rights, property, or safety of EqualyzAI, our users, or third parties, including to detect, investigate, or prevent suspected violations of our terms or applicable laws.

Such disclosures will be limited to what is necessary and proportionate in the circumstances.

8.3 Business Transfers

In the event of a merger, acquisition, restructuring, investment, or sale of all or part of our assets, personal data may be transferred to a relevant third party, including a prospective or actual acquiring entity. Any such transfer will be subject to appropriate confidentiality arrangements and safeguards to ensure that your personal data remains protected. Where required, we will notify you of any such transfer.

9. International Data Transfers

EqualyzAI operates in Nigeria; however, some of our sub-processors (including Google Cloud Platform, OpenAI, HeyGen, and Google Analytics) process personal data outside Nigeria. Where personal data is transferred outside Nigeria, we ensure such transfers comply with Chapter 8 of the Nigeria Data Protection Act (NDPA) 2023 by:

●      Entering into data transfer agreements incorporating NDPC-approved safeguards or transfer mechanisms.

●      Transferring data only to jurisdictions or recipients that provide an adequate level of data protection, or that are otherwise subject to appropriate safeguards under the NDPA.

●      Implementing appropriate technical and organisational measures to protect personal data during transfer.

●      Maintaining records of all cross-border data transfers, as required by law.

In practice, this means: when you use VoiceMaker features such as Explain For Me (which uses OpenAI) or Animate For Me (which uses HeyGen), your input may be processed on servers located outside Nigeria. Similarly, our cloud infrastructure on Google Cloud Platform may store data in data centres outside Nigeria. In all such cases, we ensure that appropriate legal, technical, and contractual safeguards are in place to protect your data.

10. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including for legal, accounting, and reporting obligations. Our retention periods are as follows:

 

Data type

Retention period

User-generated content (uploaded audio, generated audio, transcription output, text scripts)

90 days after generation or upload

Voice cloning profiles

Retained until you delete them; 30-day grace period after account deletion

Account records (name, email, billing history)

6 years after account deletion (to comply with Nigerian tax and financial reporting requirements)

Usage logs, API logs, and technical data

12 months

Communications data (support tickets, feedback)

12 months

Payment transaction records

6 years (in line with tax record-keeping requirements)

 

Upon expiry of the applicable retention period, personal data is securely deleted, anonymised, or irreversibly de-identified, using appropriate technical and organisational measures. You may request deletion of your personal data at any time, subject to our legal and regulatory retention obligations.

For enterprise customers, custom retention arrangements may be agreed as part of a data processing agreement.

11. Your Rights Under Nigerian Data Protection Law

Under the Nigeria Data Protection Act (NDPA) 2023, you have the following rights in relation to your personal data:

 

Right

What it means

Right of Access

You may request a copy of the personal data we hold about you, along with information about how it is used.

Right to Rectification

You may request correction of inaccurate or incomplete personal data.

Right to Erasure

You may request deletion of your personal data where there is no overriding legal basis for us to retain it.

Right to Restriction

You may request that we restrict our processing of your data in certain circumstances.

Right to Data Portability

You may request your personal data in a structured, commonly used, machine-readable format.

Right to Object

You may object to processing based on our legitimate interests, or to direct marketing at any time.

Right to Withdraw Consent

Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

 

11.1 How to Exercise Your Rights

To exercise any of your data protection rights, please contact us at privacy@equalyz.ai. We will respond to all valid requests within 30 days of receipt. Where necessary, we may request additional information to verify your identity before processing your request. In complex cases or where we receive multiple requests, we may extend our response time by an additional 30 days and will notify you accordingly.

Requests are generally handled free of charge; however, we reserve the right to charge a reasonable fee or decline a request where it is manifestly unfounded or excessive, in accordance with applicable law.

11.2 Complaints

If you believe that your personal data has not been handled in accordance with applicable data protection laws, you have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC) at info@ndpc.gov.ng.

We encourage you to contact us first at privacy@equalyz.ai so that we can address your concerns promptly, without prejudice to your right to contact the NDPC at any time.

12. Cookies and Tracking Technologies

We use cookies and similar tracking technologies (such as web beacons, pixels, and local storage) on the VoiceMaker website and dashboard to enhance functionality, analyse usage, and improve user experience. These technologies may be used to:

●      Maintain your session and remember your login state.

●      Remember your preferences and settings.

●      Analyse how users interact with the platform (via Google Analytics 4).

●      Support platform security and performance monitoring.

Where required by applicable law, we obtain your consent before placing non-essential cookies on your device. You can manage or disable cookies at any time through your browser settings. Please note that disabling certain cookies may affect the functionality of the platform.

13. Children's Privacy

VoiceMaker is not directed to, and is not intended for use by, individuals under the age of 18. We do not knowingly collect or process personal data from individuals under 18.

If we become aware that we have inadvertently collected personal data from a person under 18, we will take prompt steps to delete such data or otherwise restrict its processing, in accordance with applicable law.

If you believe that we may have collected personal data from a minor, please contact us at privacy@equalyz.ai.

14. Data Security

We implement appropriate technical and organisational measures, aligned with industry standards, to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure. These measures include:

●      Encryption in transit: All data transmitted between users, the platform, and third-party providers is secured using Transport Layer Security (TLS).

●      Encryption at rest: Stored data, including uploaded audio, generated audio, and cloned voice profiles, is encrypted at rest using strong encryption standards.

●      Role-based access controls: Access to personal data is restricted to authorised personnel strictly on a need-to-know basis.

●      Multi-factor authentication: Required for administrative and privileged access to platform systems.

●      Audit logging: Access to sensitive data and administrative actions are logged in tamper-resistant audit trails.

●      Regular security assessments: Including vulnerability scans, penetration testing, and periodic access reviews.

●      Incident response procedures: Established processes to detect, investigate, contain, and remediate data security incidents, including breach notification where required by law.

We require our employees, contractors, and third-party service providers to adhere to strict confidentiality and data protection obligations through binding contractual arrangements.

While we take reasonable steps to safeguard personal data, no method of transmission over the internet or electronic storage is completely secure. Accordingly, we cannot guarantee absolute security.

15. Data Breach Notification

If we become aware of a personal data breach affecting your personal data, we will:

●      Notify you without undue delay and within the timeframes prescribed under the Nigeria Data Protection Act (NDPA) 2023.

●      Provide relevant details of the breach, including the nature of the incident, the categories of data affected, and the likely impact.

●      Inform you of the measures taken or proposed to contain, mitigate, and remediate the breach.

●      Take immediate steps to investigate, contain, and prevent further unauthorised access or disclosure.

●      Maintain records of the breach in accordance with applicable legal and regulatory requirements.

We will cooperate with the Nigeria Data Protection Commission and other competent regulatory authorities as required and implement appropriate remedial actions to prevent recurrence.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, the platform, or applicable legal and regulatory requirements.

Where we make material changes, we will notify you by:

●      Sending an email to the address associated with your account.

●      Posting a prominent notice on the VoiceMaker website or platform dashboard.

Material changes will take effect 14 days after such notification, unless a longer period is required by applicable law. Your continued use of VoiceMaker after the effective date constitutes acceptance of the updated Privacy Policy. Where required by applicable law, we will obtain your consent before implementing any material changes that affect the way your personal data is processed.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data.

17. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

EqualyzAI Limited

Email: privacy@equalyz.ai

Office Address: 33, Queens Street, Off Alagomeji, Yaba Lagos Nigeria.

We will respond to all legitimate enquiries as promptly as possible and in accordance with applicable data protection laws.