Security approach
TtsPlus uses defence in depth rather than relying on one control. Current application safeguards include hashed user passwords, encrypted storage for administrator mail credentials, session regeneration after authentication, anti-forgery protection, CAPTCHA challenges, validation and bounded uploads, separate administrator access, rate limits, account suspension, bot and scanner filtering, privacy-aware client identity controls, security response headers, internal error masking and restricted access to framework, configuration, logs, SQL and backup files.
Operational protection and minimisation
Administrative pages are separated from public routes and sensitive directories are denied at the web-server layer. Customer-facing errors avoid revealing internal processor names, endpoints or raw upstream messages. Voice previews are proxied through a TtsPlus route rather than exposing an external processing address. Logs and database records can still contain technical detail needed to investigate reliability or abuse and are accessible only to authorised administration and service roles. We aim to collect and retain no more than reasonably needed for each purpose.
Security limitations
No control eliminates all risk. Hosting, software libraries, networks, browsers, email and external processors can fail or be attacked. Security descriptions are statements of approach, not a promise of invulnerability, a penetration-test report or a claim of certification. TtsPlus should not be used to process protected health information, government secrets, payment authentication data or another specially regulated category unless a separate written agreement expressly confirms the required controls and responsibilities.
Vulnerability reporting
Send a suspected vulnerability to [email protected] with a clear subject, affected URL, impact and safe reproduction steps. Do not access, change, retain or publish another person’s data; degrade the service; run denial-of-service tests; demand payment through threats; or continue after confirming the issue. We welcome good-faith, proportionate research and will assess reports, but no bug-bounty payment or safe-harbour commitment exists unless separately confirmed in writing.
Incident response
A suspected incident is assessed for scope, affected systems, data categories, ongoing risk and containment. We may rotate secrets, invalidate sessions, restrict routes, preserve evidence, coordinate with hosting or processing partners and notify authorities or affected people when law requires. Details may be delayed to avoid helping an attacker or compromising an investigation. Users should report account compromise immediately, change reused passwords elsewhere and follow any specific recovery instructions we provide.
Customer responsibilities
Use a unique password, protect the email account used for recovery, review devices with access, sign out of shared machines and avoid uploading secrets not needed for the requested result. An organisation should manage permissions, train authorised users, maintain source and Output backups, assess legal requirements and restrict who can submit voice samples. TtsPlus security does not replace the customer’s own policies, endpoint protection, access reviews, incident response or lawful consent process.
Service-wide reference: purpose and scope
TtsPlus is a browser-based speech creation workspace available at ttsplus.com. The platform is designed for people who want to turn text into spoken audio, arrange multi-speaker dialogue, explore voices, create permitted voice variations, transcribe audio, organise projects and review recent activity. This service-wide reference explains the context that applies across our company information, help material and policies. A feature-specific notice shown inside the product may add practical detail, but it does not silently remove rights or duties stated in the applicable policy. If two statements genuinely conflict, the more specific and more recent statement normally controls, subject always to mandatory law.
References to “TtsPlus”, “we”, “us” or “our” mean the operator of ttsplus.com and the services delivered through that domain. “You” means a visitor, registered user, customer, authorised team member or anyone acting for an organisation. “Content” includes text, scripts, prompts, audio, voice samples, transcripts, project information, support messages and other material submitted to the service. “Output” means audio, text, metadata or another result created in response to a request. These definitions are functional rather than a claim about ownership; ownership and permitted use depend on applicable law, third-party rights and these policies.
What the platform provides
The current service includes public and account-based experiences. Visitors may use features and limits configured for the public studio. Registered users receive a personal dashboard, profile, plan view and workspace settings configured for signed-in accounts. Availability, character allowances, rate limits, languages, voices, export formats and individual tools may differ by audience, location, capacity, legal requirement or plan. Descriptions such as free, unlimited or high quality explain the current product presentation and do not promise infinite computing capacity, perpetual availability or the absence of reasonable fair-use controls.
TtsPlus may add, remove or change features as the product develops. Planned possibilities include paid subscriptions, usage packs, team or enterprise accounts, application programming interfaces, additional speech and transcription capabilities, integrations, more processing partners, affiliate or referral programmes, reseller arrangements, blogs, tutorials and educational material. Mentioning a possible feature in a policy prepares the legal and privacy framework; it is not a promise that the feature exists today or will launch on a particular date. Any paid or specialist feature may have supplemental terms presented before purchase or activation.
Accounts, eligibility and responsibility
A person creating an account must provide accurate information, keep credentials confidential and use the account only in an authorised way. You are responsible for activity performed through your account unless you promptly report compromise and take reasonable steps to secure it. You must not sell, rent, transfer or share access in a way that defeats plan limits or exposes another person’s information. We may ask for verification when investigating account ownership, privacy requests, payment disputes, abuse or security incidents. We will never ask you to send a password by ordinary email.
The service is not directed to children under thirteen. A person must be at least sixteen to create an account independently, or older where local law sets a higher digital-consent age. A younger person may use the service only where a parent or lawful guardian can validly authorise the use and supervise the activity. Schools, employers and organisations are responsible for obtaining notices, permissions and consents required for people using the service under their authority. If we learn that an account was created without legally sufficient permission, we may restrict it and remove associated personal information where appropriate.
Your content and the permission needed to process it
You keep any rights you already hold in Content you submit. You give TtsPlus a limited, non-exclusive permission to receive, host, copy, transmit, format, analyse for abuse prevention and process that Content only as reasonably needed to provide, secure, support and improve the requested service, comply with law and enforce our policies. This permission ends when the relevant Content is deleted or no longer needed, except for temporary backups, de-identified records, security evidence, transaction records or material we must retain for a lawful reason. We do not obtain ownership of a script merely because it was entered into the studio.
You must have all permissions required for submitted Content. That includes copyright permission for text and recordings, privacy permission for personal information, and explicit authority from every identifiable speaker whose voice is uploaded, cloned or imitated. A recording found online is not automatically free to use. Employment, friendship, family relationship, public-figure status or prior public availability does not replace consent. If you submit confidential, regulated or commercially sensitive material, you are responsible for deciding whether the standard service and its disclosed processing arrangements are suitable for that material.
Outputs, ownership and responsible review
As between you and TtsPlus, we do not claim ownership of an Output solely because the service generated it for you. However, laws concerning machine-generated material vary, and an Output may incorporate or be affected by rights belonging to voice owners, performers, writers, trademark owners or other parties. We therefore do not promise that every Output is copyrightable, unique, non-infringing or cleared for every commercial use. You must review the applicable voice information, obtain permissions and perform any legal clearance needed for publication, advertising, broadcast, resale or another public use.
Machine-assisted speech and transcription can contain pronunciation errors, omissions, hallucinated words, unexpected emphasis, artefacts, similarities or offensive results. Outputs are not verified facts and must not be treated as professional medical, legal, financial, safety or emergency advice. Listen to and review every important result before using it. Human review is especially necessary for accessibility, public announcements, regulated communications, education, news, political material, customer interactions and content capable of affecting a person’s rights, reputation, health, finances or safety.
External processing and service-provider neutrality
TtsPlus may rely on carefully selected third parties for infrastructure, hosting, content delivery, speech processing, transcription, storage, email, fraud prevention, approximate location, analytics, customer support and, if paid features launch, payments, invoicing and tax support. A request may be routed to one or more suitable processors depending on language, feature, reliability, location, price, capacity or quality. Public pages intentionally describe these relationships by category rather than advertising a particular processor, engine or technical configuration, because those arrangements may change and are not necessary for ordinary product use.
A processor receives only the categories of information reasonably needed for its task and is expected to handle that information under contractual or legal protections appropriate to its role. If you need information about a current processing category, data location or partner for a legitimate privacy, procurement or compliance review, contact [email protected]. We may verify the request, protect confidential security and commercial information, and provide the level of detail required by applicable law. A partner’s independent site, account or optional integration is governed by that partner’s own terms when you choose to use it.
Free access, future paid plans and payments
The current account plan may be presented as Unlimited Free, but it remains subject to technical safeguards, character limits, concurrency controls, availability, prohibited-use rules and any reasonable fair-use limits shown in the product. Free access can be adjusted, suspended or discontinued. If paid plans are introduced, the checkout will identify the price, billing period, currency, included allowance, renewal behaviour and material restrictions before purchase. Taxes, exchange rates and bank charges may depend on the customer’s location and payment method. Promotional, trial, beta and affiliate offers may include separate conditions and expiry dates.
Future card, wallet, bank-transfer or other payments may be handled by external payment gateways. TtsPlus should not receive a complete card number or card security code when a hosted gateway collects it, although we may receive billing contact details, country, transaction identifiers, payment status, fraud signals and limited card descriptors. Subscriptions may renew automatically only where the checkout clearly says so and applicable law permits it. Cancellation stops future renewals but normally does not erase the account immediately. Refund eligibility will follow the policy shown at purchase, mandatory consumer law and the Billing & Refund Policy then in effect.
Analytics, device information and communications
To understand and protect ttsplus.com, we may process page visits, referring pages, campaign parameters, approximate location, browser and device characteristics, language, screen information, clicks, scroll depth, time on page, feature sections visited and session activity. Our current analytics is first-party and is designed to honour an explicit TtsPlus analytics choice as well as supported Global Privacy Control and Do Not Track signals. We use these records to measure reliability, improve navigation, identify popular features, prevent misuse and understand aggregate traffic, not to create a cross-site advertising profile.
If you register or contact us, we may send transactional messages required for the account, security, support, payments or policy updates. Optional marketing, product news, blog updates, affiliate announcements or educational emails will use consent or another lawful basis where required and will include an appropriate way to opt out. Opting out of marketing does not prevent essential service messages. Email delivery can expose basic routing and engagement information to communications providers. Never include passwords, payment authentication codes or unnecessary sensitive data in a support message.
Cookies, local storage and controls
The website uses a session mechanism and security tokens needed to keep forms, authentication and workspace requests safe. Browser storage may remember theme, a local cache of favourite voices, dismissed notices, interface state and analytics preferences or identifiers. For signed-in users, favourite voices are also associated with the account so clearing browser storage does not by itself erase the account copy. Some browser items last only for the tab or session; others remain until expiry or until you clear them. Blocking required storage may prevent sign-in, saved preferences, forms or studio actions from working. Optional analytics storage can be declined through the TtsPlus cookie choice control and may also be suppressed by supported browser privacy signals.
Your browser can inspect, block or delete cookies and site storage. Deleting them may sign you out, reset appearance, create a new anonymous visitor identifier, remove browser-only state or make a consent banner appear again. After signing back in, account-backed favourites, projects, pronunciation rules and account history can be loaded again from TtsPlus records. Anonymous visitors do not have a durable account identity after all site data is cleared. Browser settings operate per device and profile, so a choice on one device may not automatically apply elsewhere. More detail appears in the Cookie Policy. Privacy requests can be sent to [email protected].
Security and account protection
We use layered safeguards appropriate to the service, including access controls, password hashing, request validation, anti-forgery tokens, rate limits, bot filtering, security headers, restricted administrative access, limited exposure of internal errors and retention controls. Sensitive mail credentials saved through the administrator panel are encrypted before database storage. Network transport should use HTTPS on the production domain. We review safeguards as the service changes, but no website, network, processor or storage method can be guaranteed perfectly secure, and these statements are not a certification or warranty against every attack.
You support security by choosing a unique password, protecting your email account, keeping devices updated, signing out on shared devices and reporting suspicious behaviour quickly. Do not probe, scan, overload, reverse engineer or bypass controls without written authorisation. If you believe you found a vulnerability, send a concise report to [email protected] with steps to reproduce and avoid accessing other users’ data. We will assess good-faith reports and ask that you allow reasonable time for remediation before public disclosure. Security incidents will be handled and notified as required by applicable law.
Retention, deletion and account closure
Retention depends on the record. Account profile information normally remains while the account is active. Projects, pronunciation rules, account-synced voice favourites and history linked to a registered workspace remain until the user deletes them, deletes the account, or an applicable retention or maintenance rule removes them. Generated media for signed-in users is currently routed to managed cloud object storage and can remain available through account history until the item or account is deleted, an administrative retention rule removes it, or the storage configuration changes. Generated media for anonymous visitors currently uses local application storage and may expire under the configured retention schedule. Analytics, security, fraud, support, transaction and legal records follow their own retention needs.
The Profile page provides a delete-account feature that removes the account and linked studio records after password confirmation. Deletion cannot retrieve files you failed to download. Some information may survive briefly in protected backups or be retained where necessary for legal obligations, billing records, dispute resolution, fraud prevention, abuse investigation, suppression lists or the defence of legal claims. Where feasible, retained data is minimised, separated or de-identified. Deleting an account does not automatically retract an Output already downloaded, published or shared with other people.
Global availability and regional rights
TtsPlus is intended for a worldwide audience, but access from a country does not mean every feature, voice, payment method or use is lawful there. You must comply with laws that apply to you, your Content, your audience and the place where an Output is used. Those laws can cover privacy, biometric or voice data, copyright, publicity, consumer protection, advertising, elections, telecommunications, sanctions, export controls, tax, accessibility and protection of children. We may restrict a feature or country when required for safety, capacity, partner terms or legal compliance.
Privacy rights vary. Depending on location, a person may request access, correction, deletion, restriction, objection, portability, withdrawal of consent, information about disclosures, an appeal or freedom from discriminatory treatment for exercising a right. We verify requests to protect the account and other people. Lawful exceptions may apply, and we will explain a material refusal where permitted. A user may also complain to a local privacy or consumer authority. The Regional Privacy Notice provides additional information for the European Economic Area, United Kingdom, Switzerland, California and other jurisdictions with similar rights.
Safety, voice consent and prohibited conduct
The service must not be used for fraud, phishing, extortion, harassment, hate, non-consensual impersonation, deceptive endorsements, fabricated evidence, unlawful robocalls, election interference, sexual exploitation, child abuse material, threats, malware, credential theft or instructions intended to facilitate serious wrongdoing. Do not remove disclosures where synthetic-media labelling is required. A parody, artistic or educational purpose does not excuse conduct that unlawfully violates privacy, publicity, copyright or safety rights. High-impact uses require documented authority, careful human review and any legally required notice to the audience.
Voice cloning or imitation requires explicit, informed and provable permission from the speaker unless a narrow legal exception clearly applies and has been independently assessed. Permission should identify the permitted purpose, audience, duration and whether commercial use is allowed. Consent can be limited or withdrawn prospectively, although withdrawal cannot undo lawful uses already completed. We may request evidence, disable a voice, preserve necessary investigation records, block accounts and cooperate with lawful authorities or rights holders. The Acceptable Use Policy explains enforcement and reporting in greater detail.
Availability, changes, storage and backups
Speech generation depends on networks, computing capacity and third-party processing. Requests can be delayed, rejected, rate-limited or unavailable. We may maintain, change or discontinue features; adjust limits; replace processing routes or storage providers; remove voices; or restrict output formats. Depending on the administrator configuration and whether you are signed in, generated media may be retained on managed cloud object storage or local application storage. Storage availability is a workspace convenience rather than an emergency, archival or business-continuity guarantee.
Account-backed projects, pronunciation rules, favourites and history are designed to remain available after ordinary browser-cache clearing, while anonymous browser-only state is not. Generated-media availability follows the active storage and retention configuration and can change when an item is deleted, an account is deleted, a retention rule runs or a storage provider is changed. Keep independent copies of irreplaceable source recordings and Outputs required for critical or regulated workflows. Status information, product copy and examples are descriptive, not a service-level agreement unless TtsPlus signs a separate written agreement expressly identified as one.
Future blogs, affiliates and third-party links
TtsPlus may publish blogs, tutorials, comparisons, templates, community examples or links to external resources. Educational content is general information, can become outdated and is not professional advice. External links do not mean we control or endorse every statement, security practice or offer on the destination site. Review the destination’s terms and privacy information before providing data or making a purchase. User comments or community submissions, if introduced, represent their authors and may be moderated for safety, legality, spam and relevance.
An affiliate or referral programme may compensate TtsPlus or a participant when someone follows a disclosed link, registers or buys a service. Material commercial relationships should be identified clearly near the relevant recommendation. Affiliates may not make false performance, income, legal or medical claims; bid on protected branding without permission; send spam; use deceptive redirects; or imply employment or endorsement that does not exist. Future programme rules, commission terms and tax duties will be provided separately. Affiliate tracking, if used, will be described in the Cookie and Privacy Policies.
Contact, notices and policy updates
Questions about ttsplus.com, a current processing partner, privacy, security, billing, copyright, voice consent or these documents may be sent to [email protected] or through the Contact page. Include enough information to understand the request, but do not send passwords or unnecessary identity documents. For a rights request, identify the account email and the right you want to exercise. For an abuse or copyright report, identify the relevant material, explain your authority and provide a reliable way to contact you. We may ask focused follow-up questions to prevent fraud and locate records.
Policies evolve with the service and law. The page shows a last-updated date. Material changes may also be announced in the service or by email where appropriate. Changes are prospective unless law requires otherwise. Continued use after an effective update may constitute acceptance of contractual changes, while privacy processing will continue to rely on an appropriate legal basis rather than acceptance alone. If you disagree with a change, stop using the affected feature and, if registered, close the account. Mandatory consumer and privacy rights are not waived by these documents.