Legal
Privacy Policy
Effective 11 October 2026
This policy explains how Acteme (“we”, “us”) collects and uses personal data when you use the Acteme website, studio, API, MCP server and engine plugins (the “Service”). We are the controller of this data for the purposes of the EU and UK General Data Protection Regulation. You can contact us about privacy at [email protected].
1. Data we collect and why
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| Account details from Google: name, email address, profile picture and Google account identifier | Creating and identifying your account, signing you in, contacting you about the Service | Contract | Until you delete your account |
| Your content: scripts, character descriptions, direction and style notes, pronunciation entries, translations | Generating, translating and exporting audio | Contract | Until you delete it or your account. Archived projects are deleted 7 days after archiving. |
| Rendered audio | Delivering audio to you | Contract | 15 days on Prototype, 90 days on Indie, 180 days on Studio, counted from generation, or until you delete it earlier |
| Account activity: render jobs, credit balance and history, API keys, settings and email preferences | Operating the Service, applying plan limits, billing for usage | Contract | Until you delete your account. API keys until revoked. |
| Support requests and our replies | Answering your questions and resolving issues | Contract; legitimate interests | Until you delete your account |
| Session data: IP address, browser user agent and a session identifier | Keeping you signed in and securing your account | Legitimate interests (security) | Until you sign out or the session expires, at most 30 days |
| Server logs: IP address, request details and timestamps | Operating the Service, diagnosing errors, preventing abuse | Legitimate interests (security and reliability) | A short period, after which logs are overwritten automatically |
| Security records of significant account actions, such as sign-up and acceptance of these terms, with the IP address used | Security, fraud prevention, and evidence of what was agreed | Legitimate interests | IP addresses are removed after 90 days and records are deleted after 3 years. When you delete your account, your email address and IP address are removed from these records. |
| Billing information from Creem: name, email, country, order and subscription details. We do not receive full card numbers. | Applying purchases and subscriptions to your account, accounting and tax | Contract; legal obligation | Payment notifications for 90 days. Order records for as long as tax and accounting law requires, including after account deletion. |
We do not sell personal data, use it for advertising, or use your content to train machine learning models. We send transactional emails about your account, renders, balance and support requests. You can turn off optional notifications in Settings.
2. Speech generation and translation
To generate audio and translations, we send the parts of Your Content needed for each request, such as line text and direction notes, to Google LLC through the Gemini API. We do not send your name, email address or other account details with these requests.
We use the Gemini API as a paid service. Under Google's terms for paid services, Google processes this content on our behalf to provide the service and does not use it to improve its products or train its models. Google may retain requests and responses for a limited period to detect abuse and to meet its legal obligations.
3. Voice performers
Some voices in the Service (Acteme Specials) are created from recordings of adult performers who have agreed in writing to the use of their voice. For each performer we keep their name, the recordings used to create the voice, and a record of their consent. These recordings are shared with Google to create the voice. We process this data to perform our agreement with the performer and, in the case of the consent records, to establish, exercise or defend legal claims. We do not use voice recordings to identify individuals.
We keep consent records for as long as the voice is available in the Service and for 3 years after it is removed. A performer can ask us to remove their voice at any time by contacting [email protected]. Removal stops new audio from being generated with that voice; it does not affect audio that customers generated before removal.
4. Service providers
We share personal data only with the following providers, and only as needed for the purposes above:
| Provider | Role |
|---|---|
| Google LLC | Sign-in with Google; speech generation and translation through the Gemini API |
| Cloudflare, Inc. | File storage |
| Resend | Email delivery |
| Our server hosting provider | Hosting |
| Creem | Merchant of record for all purchases. Creem collects payment details directly and processes them as an independent controller under its own privacy policy. |
We may also disclose personal data where required by law, to protect the rights, safety or property of our users or others, or to a successor in connection with a merger, acquisition or sale of assets, in which case this policy will continue to apply.
5. International transfers
Our providers may process personal data outside your country, including in the United States. Where data from the European Economic Area, the United Kingdom or Switzerland is transferred to a country without an adequacy decision, the transfer is covered by the European Commission's Standard Contractual Clauses or the provider's certification under the EU-U.S. Data Privacy Framework and its UK and Swiss extensions.
6. Cookies and local storage
We use only cookies that are strictly necessary to run the Service: a session cookie that keeps you signed in, and a short-lived cookie that protects the Google sign-in flow. The studio also uses your browser's local storage to remember interface state, such as notices you have dismissed. We do not use analytics, tracking or advertising cookies.
7. Security
We use industry-standard measures to protect personal data, including encryption in transit and at rest, and we limit access to production systems to people who need it.
8. Deleting your account
You can delete your account from Settings at any time, after cancelling any active subscription. Deletion immediately and permanently removes your account, projects, content, API keys, support requests and custom voices, and your audio files are removed from storage shortly afterwards. Order records and anonymised security records are kept as described in section 1. Deleted data may remain in encrypted backups until those backups are overwritten in the normal backup cycle.
9. Your rights
Depending on where you live, you may have the right to access the personal data we hold about you, to correct it, to have it deleted, to restrict or object to its processing, and to receive it in a portable format. You can export your projects and audio from the studio at any time. To exercise any other right, email [email protected] from the address on your account. We respond within one month.
If you are in the European Economic Area or the United Kingdom, you also have the right to lodge a complaint with your local data protection authority.
10. Children
The Service is not intended for anyone under 18, and we do not knowingly collect personal data from children.
11. Changes to this policy
We will post any changes to this policy on this page and update the effective date. If a change is material, we will notify you by email or in the Service before it takes effect.
12. Contact
Questions and requests about this policy or your personal data can be sent to [email protected]. If the operator of the Service changes, for example when the Service is transferred to a company, we will update this policy and notify you before the change takes effect.