Legal

Privacy Policy

Last updated: October 20, 2026

1. Who We Are

Escalera Labs S.L. ("Echo", "we", "us", "our") is the data controller responsible for the processing of your personal data. We operate the voicechanger.live website, the Echo Live desktop application (Windows & macOS), and the AI Voice Changer Effects: Echo mobile application (iOS & Android) (collectively, "Echo Products").

This Privacy Policy explains what information we collect, how we use it, who we share it with, and your rights regarding your personal data. It applies to all Echo Products, including the desktop application, mobile application, browser-based tools, and our website.

The most important thing to know: Echo processes voice audio on your device. Echo Lite supplies processed audio to the calling website you connect, which sends it to the people in your call under its own privacy policy. Echo does not receive microphone audio or soundboard recordings through usage reporting.

Echo Lite browser extensions

Echo Lite is our browser extension for Chrome, Microsoft Edge, Firefox and Naver Whale. Voice effects, AI voices and soundboard mixing run on your device. Your sounds, saved effects, Situations and preferences stay in this browser profile unless you export them. Connecting a calling website gives Echo access to that site so it can supply your chosen voice and sounds to the call. The site handles the outgoing audio under its own policy.

Echo Lite reads the current tab's address to show which calling site you can connect, and stores your connected site choices locally. It does not send browsing history or site addresses in usage reports.

An Echo account is optional for the included free features. When you sign in, Echo checks your account and Pro access. The extension stores scoped session credentials in extension storage. Imported Situation media is downloaded from soundboard.pro and its media service when you request it.

Echo Lite's use of information received through Chrome APIs complies with the Chrome Web Store User Data Policy, including its Limited Use requirements. We use this information only to provide or improve Echo Lite's features. We do not sell it or use it for personalized advertising.

Optional usage reports

Usage reports are off until you enable them in Echo Lite Settings. Reports go to PostHog's EU service and describe limited feature activity and failure categories, your extension version and a broad operating-system category. They do not include audio, recordings, sound or voice names, typed text, browsing URLs, email addresses or account credentials. Echo Lite does not record your screen or replay your sessions.

A random identifier distinguishes this browser profile. If you sign in while reporting is enabled, a separate analytics account identifier can connect eligible activity across Echo products. This is pseudonymous reporting, not anonymous reporting. Network requests expose a source IP address to the receiving service; the collector asks PostHog not to retain an IP event property or add location data.

Turn off Share usage reports in Settings to stop collection and clear unsent reports and the local reporting identifier. Global Privacy Control also turns reporting off. Unsent reports expire after 24 hours. Turning reporting off does not delete reports already received; use the privacy contact and rights process below to request access or deletion.

Referral Program

Each Echo account has a personal referral link. When a friend creates an Echo account through your link and starts using the Echo desktop app, you can earn rewards under the Referral Program described in our Terms of Service. This section explains the data the program uses.

What we process

  • Referral link: Your referral code and, for a friend who joins through it, a record on the friend's account that it was referred by your account.
  • Qualification events: For a referred friend, whether their email address is verified, when they first signed in on the Echo desktop app, the length of the voice session the app reported, the app version, our decision (credited, over the reward limit, or not eligible) with a short reason code, and when it was made.
  • Rewards: The voices a referrer chose with earned credits, and when.
  • Hashed device identifiers: When you sign in on the Echo desktop app (any version) while the program is running or scheduled, the app sends your computer's machine identifier. Echo desktop 1.3.9 and later also send an installation token and a machine token when they show your referral progress or report a qualifying session. Our servers turn these into one-way hashes and store only the hashes, never the raw identifiers. We keep at most eight device hashes per account. This happens at desktop sign-in while the program is running or scheduled, whether or not you take part, because a referrer's own computer must be recognisable to prevent self-referral. We also compare installation hashes with ones we already hold for introductory offers.
  • Email checks: To detect self-referral we compare normalised forms of the friend's and the referrer's email addresses (lower case, without "+tags", and without dots for Gmail addresses). The normalised form is computed only for this comparison and is not stored. We also check the friend's email domain against a list of disposable email providers.

Why we use it

  • Running the program and awarding rewards: Recording referrals, deciding whether a friend qualifies, and giving referrers the voices they earned. Legal basis: performance of our contract with you (Article 6(1)(b) GDPR).
  • Preventing abuse and fraud: Detecting self-referral, fake or duplicate accounts, disposable email addresses and the reuse of one computer for several rewards. Legal basis: our legitimate interest in keeping rewards for genuine new users and protecting the program (Article 6(1)(f) GDPR). We limit the impact by storing only hashes, keeping at most eight per account, and not using them for advertising or analytics.

Qualification is decided automatically by the checks described in our Terms of Service. A decision affects only whether a referral reward is granted. If you believe a decision is wrong, contact [email protected] and a member of our team will review it.

Who sees what

  • Referrers see counts only: voices earned, credits available to choose, and friends who joined but have not qualified yet. We do not tell a referrer which friend joined, qualified or did not qualify, or why. Because these are counts, a referrer who invited only one person may be able to infer that person's progress.
  • Referred friends see their own qualification status in the Echo desktop app.
  • Our team may access referral records to provide support and investigate abuse. The records are stored with Supabase and processed on Vercel, as described in Section 5. We do not share referral data with advertisers or sell it.

How long we keep it

  • Referral code and referral link: For the lifetime of the account. If a referrer deletes their account, the link is removed from their friends' accounts.
  • Qualification records: Until the referrer's or the friend's account is deleted, whichever comes first.
  • Device hashes linked to an account: For the lifetime of that account.
  • Hashes of computers that earned a reward: When a computer earns a referral credit, we keep its hash so the same computer cannot earn another credit. If the related accounts are deleted, we keep this hash without any link to an account. We keep these hashes while the Referral Program runs and delete them within 12 months after it ends.
  • Chosen voices: For the lifetime of the account.

Your rights

The rights in Section 10 apply to referral data, including access, erasure and the right to object to processing based on legitimate interests. If you object to the device checks or ask us to delete referral data, you may no longer be able to earn referral rewards or qualify as a referred friend. Voices you have already chosen stay on your account unless you delete the account.

Introductory Offers

New accounts may be offered a time-limited introductory price, for example a day-1 offer, as described in our Terms of Service. Some offers are shown only to a randomly chosen group of accounts so we can compare them with regular prices.

What we process

  • Offer record: Which offer your account received, which group your account was assigned to, what started it (for example your first voice session or first paywall), whether it started in the app or on the website, your pricing market, and when it started and ends.
  • Installation hash: When the Echo desktop app provides its random installation token, our servers turn it into a one-way hash (SHA-256) and store only the hash, never the raw token. We store it with your offer record and, separately and without any link to an account, as a record that this installation has already started the offer.

Why we use it

To show you the correct prices and give each offer only once per account and once per computer, so that creating new accounts on the same computer does not restart an offer. Legal basis: performance of our contract with you (Article 6(1)(b) GDPR) for the offer itself, and our legitimate interest in preventing offer abuse and fraud (Article 6(1)(f) GDPR) for the installation hash. We do not use the hash for advertising or analytics. The Referral Program also compares installation hashes with these records, as described above.

How long we keep it

  • Offer record: For the lifetime of your account. It is deleted when you delete your account.
  • Unlinked installation hash: Kept after account deletion, without any link to an account, while the offer runs, and deleted within 12 months after the offer ends.
  • Offer group assignment: Stored as a salted hash, without a direct link to your account, and kept after account deletion so the comparison between groups stays accurate.

2. Information We Collect

2.1 Information You Provide

  • Account Information: When you register, we collect your email address and display name. If you sign in with Google, Discord or Twitch, we receive your name, email address, and profile picture from that provider. We do not receive or store your password for those services.
  • Purchases: When you buy Echo Pro on our website or from the Echo desktop app, we receive from Stripe your plan, price, currency, payment status, subscription status and renewal dates, your country, and identifiers for the Stripe customer, checkout and payment. Stripe collects your payment details and, where needed for tax, your billing address and an optional business tax ID. We do not receive your full card details.
  • Email Preferences: Your choices about marketing emails, with a record of when and how you made them (country, notice shown and sign-up source).
  • Waitlist Information: If you joined our earlier waitlist, we hold your email address, optionally your name, and the page you signed up from. The waitlist is no longer open.
  • Support Communications & Feedback: If you contact us for support, we collect the content of your messages and any information you provide to help resolve your issue. Feedback, ratings and reviews you send from inside the Echo desktop app are delivered through Sentry and include the app version and language.

2.2 Information Collected Automatically

  • Website Analytics: Google Analytics and PostHog (EU cloud) help us understand visits, sign-ups, app downloads and purchases. In the EU/EEA, the UK and other countries where prior consent is required, or where we cannot tell your country, optional analytics stay off unless you allow them. Elsewhere, analytics may be on by default and you can turn them off through Privacy preferences. If your browser sends a Global Privacy Control signal, we treat it as turning analytics off. PostHog uses a random analytics identifier and, after sign-in, a separate analytics account identifier that can connect your website and desktop activity. These identifiers are pseudonymous, not anonymous. PostHog may derive an approximate location from your IP address. Analytics events do not include your name, email address, typed text or audio. Google Analytics runs with Google signals and ad personalisation turned off.
  • Optional Website Diagnostics: If you separately allow diagnostics, we may collect additional timing signals and masked recordings of the public download page during temporary investigations. Recordings exclude forms, account and payment pages, typed text, audio, console logs and network bodies. You can withdraw this choice through Analytics preferences.
  • Desktop App Crash Reports & Diagnostics: The Echo desktop app sends crash and error reports to Sentry (EU region) to help us fix bugs. They include the error and stack trace, app version, operating system and hardware details such as the GPU model. The app also sends performance timing for a sample of sessions and, for a sample of sessions and when an error occurs, a replay of the app's interface in which text and inputs are masked. These reports do not include audio or voice recordings, and Sentry is configured not to collect default personal data. The usage telemetry switch below does not currently turn off crash reports and diagnostics.
  • Desktop App Usage Telemetry: The Echo desktop app sends usage events, setup outcomes and bounded failure categories to PostHog (EU cloud) to help us improve the product. Current versions use a random installation identifier and, after sign-in, a separate analytics account identifier, allowing us to understand the journey from the website into the app. These identifiers are pseudonymous, not anonymous. Some routine events are sampled rather than sent every time. Usage telemetry excludes audio, typed text, names and email addresses. You can turn off usage telemetry at any time in Settings → About → Privacy ("Disable Usage Analytics").
  • Introductory Offers: New accounts may be offered a time-limited introductory price (see Introductory Offers). To limit each offer to one per account and one per computer, we may store a one-way hash of the Echo desktop app's random installation token.
  • Desktop Sign-in Device Check: While the Referral Program is running or scheduled, desktop sign-in sends a machine identifier that we store only as a one-way hash, to prevent referral abuse. Turning off usage telemetry does not stop this check. See Referral Program.
  • Mobile App Analytics: The Echo mobile app uses Firebase Analytics and RevenueCat to collect pseudonymous usage metrics, linked to app-instance and purchase identifiers rather than your name, (such as subscription status, active conversion paths, and crash/error reports) to help us troubleshoot errors and improve runtime stability. Device data collected may include device type, operating system version, and GPU/CPU configuration to optimize on-device model execution.
  • Billing Information: Purchases on our website and from the Echo desktop app are processed by Stripe (see 2.1). In some countries, Link, a Stripe company, sells the purchase as merchant of record and processes your payment and billing details under its own privacy policy. In-app purchases and subscriptions on mobile are processed securely by Apple App Store and Google Play Store. Subscription state validation is handled by RevenueCat. We do not directly collect or store your payment card details.

2.3 Information We Do NOT Collect

  • Voice audio: Echo processes all audio locally on your device. Your voice is never transmitted to our servers. We do not listen to, record, store, or analyze your voice data.
  • Microphone access (website): Our browser-based tools request microphone access solely for client-side audio processing (mic test, voice recorder). Audio is processed in your browser and is never uploaded to our servers.
  • Voice models: Voice models you import into Echo are stored locally on your device. We do not have access to your imported models.
  • Third-party app data: We do not access or collect data from third-party applications you use with Echo (Discord, games, streaming software, etc.).

3. How We Use Your Information

We use the information we collect for the following purposes:

  • Account Management: To create and manage your account, authenticate your identity, and provide access to Echo Products.
  • Service Delivery: To provide, maintain, and improve Echo Products, including delivering software updates and new features.
  • Product Improvement: To analyze pseudonymised usage patterns and crash reports to fix bugs, optimize performance, and develop new features.
  • Purchases & Offers: To process Echo Pro purchases, provide Pro access, handle cancellations, refunds and failed payments, keep billing and tax records, and show and limit introductory and promotional offers (see Introductory Offers).
  • Referral Program: To record referrals, award referral rewards and prevent referral abuse and fraud (see Referral Program).
  • Communications: To send product updates, release announcements, offers, checkout reminders and important service notifications. Where the law requires it, we ask for your consent before sending marketing emails; elsewhere, you can opt out when you sign up or at any time. Every marketing email has an unsubscribe link, and you can choose which kinds of email you receive on your account page.
  • Legal Compliance: To comply with applicable laws, regulations, and legal processes.

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), we process your personal data under the following legal bases:

  • Contract Performance: Processing necessary to provide you with Echo Products and manage your account (Article 6(1)(b) GDPR).
  • Legitimate Interests: Processing for product improvement, security, and analytics, where our interests do not override your rights (Article 6(1)(f) GDPR).
  • Consent: Where you have given explicit consent, such as for marketing communications or optional diagnostics (Article 6(1)(a) GDPR). You may withdraw consent at any time.
  • Legal Obligation: Where processing is required to comply with applicable laws (Article 6(1)(c) GDPR).

5. Who We Share Your Data With

We do not sell your personal data. We may share limited data with the following categories of service providers, solely to operate Echo Products:

  • Supabase — database hosting (account data, hashed passwords, purchase and entitlement records, email preferences, referral and offer records)
  • Stripe — payment processing, subscriptions, invoices, tax calculation and fraud prevention for purchases on our website and from the desktop app
  • Link (a Stripe company) — merchant of record for purchases sold through Stripe Managed Payments in some countries; Link processes those payments as an independent controller under its own privacy policy
  • PostHog — website, desktop, Echo Lite and supported mobile app product analytics, plus optional masked website recordings, using its EU cloud
  • Vercel — website hosting and serverless function execution
  • Cloudflare — network delivery and security in front of our website (including the visitor country used for analytics consent and pricing), storage of app downloads, community voices and community effects (R2), and bot protection for community submissions (Turnstile)
  • Sentry — crash reports, error and performance diagnostics, masked interface replays, and in-app feedback and reviews for the desktop application, using its EU region
  • Firebase (Google) — mobile app analytics, performance monitoring, and crash reporting
  • RevenueCat — in-app subscription state validation and purchase analytics (mobile)
  • Apple App Store & Google Play Store — processing in-app purchase payments (mobile)
  • Resend — email delivery (account and transactional emails, product updates, offers and reminders you have not opted out of, and support messages you send through our website)
  • Google — sign-in provider (only when you choose Google sign-in); website analytics
  • Discord and Twitch — sign-in providers (only when you choose them)
  • Hugging Face and jsDelivr — when you use certain browser tools, your browser downloads models and code directly from these services, which receive your IP address; your audio and text are not sent to them

Service providers that process data on our behalf are contractually required to process it only on our instructions and to maintain appropriate security measures. Sign-in providers, app stores, Link, Hugging Face and jsDelivr handle the data they receive under their own privacy policies. We do not share your data with advertisers or data brokers.

We may disclose your data if required by law, court order, or governmental regulation, or if necessary to protect our rights, property, or the safety of our users or the public.

6. Data Storage & Security

Your account data is stored on Supabase infrastructure with encryption at rest and in transit. Passwords are hashed using industry-standard algorithms. All data transmission between your browser and our servers uses HTTPS/TLS encryption.

While we implement commercially reasonable security measures, no system is 100% secure. In the event of a data breach that may affect your personal data, we will notify you and the relevant supervisory authority in accordance with applicable law.

7. Data Retention

We retain your personal data for as long as necessary to provide Echo Products and fulfill the purposes described in this policy. Specifically:

  • Account data: Retained for the lifetime of your account. When you delete your account from your account page, we delete your account and the personal data linked to it from our database straight away, except as listed below. Copies in our database provider's routine backups expire within 30 days.
  • Billing and tax records: Records of purchases, payments, refunds and invoices are kept for as long as tax and accounting law requires, even after you delete your account. In our own database they are detached from the deleted account but keep the payment references and the customer details an invoice requires. Payment records held by Stripe (and by Link, for purchases sold through Link) remain with those providers under their retention rules.
  • Pricing and checkout records: Records of the prices we showed and the checkouts that were started are kept, without a link to your account, to reconcile payments and evaluate pricing.
  • Referral program data: As described in Referral Program. Hashes of computers that earned a referral reward are kept, without any link to an account, after account deletion.
  • Introductory offer data: As described in Introductory Offers. Installation hashes and offer group assignments are kept, without a direct link to an account, after account deletion.
  • Community contributions: Approved community effects you published may stay available without your name after you delete your account.
  • Waitlist data: Retained until you request removal or delete your account.
  • Crash reports and diagnostics: Kept in Sentry for up to 90 days for debugging purposes, then deleted.
  • Analytics data: Pseudonymised: linked to random analytics identifiers, not to your name or email address. Kept in PostHog and Google Analytics for as long as it is useful for product analysis.

Deleting your account does not automatically delete analytics data in PostHog or diagnostics in Sentry. To have them deleted as well, contact [email protected]. We may retain certain data beyond these periods where required by law (e.g., tax records, legal obligations).

8. International Data Transfers

Escalera Labs S.L. is based in Spain (EU). Some of our service providers operate in the United States and other countries. When your data is transferred outside the EEA, we ensure adequate protection through:

  • European Commission Standard Contractual Clauses (SCCs)
  • Adequacy decisions by the European Commission
  • Appropriate contractual safeguards with each provider

9. Cookies & Tracking

We use a minimal set of cookies:

  • Essential cookies: Required for authentication (session tokens) and core website functionality. These cannot be disabled.
  • Analytics cookies: Cookies and local storage support usage analytics. We request consent where required and respect your saved choice. You can turn off analytics and optional diagnostics through Privacy preferences.

We do not use advertising cookies, tracking pixels, or third-party marketing trackers.

10. Your Rights

Regardless of your location, we extend the following rights to all users, based on the protections of the EU General Data Protection Regulation (GDPR):

  • Access: Request a copy of the personal data we hold about you.
  • Rectification: Request correction of inaccurate or incomplete data.
  • Erasure: Request deletion of your personal data ("right to be forgotten").
  • Restriction: Request that we limit processing of your data in certain circumstances.
  • Data Portability: Request your data in a structured, machine-readable format.
  • Objection: Object to processing based on legitimate interests.
  • Withdraw Consent: Withdraw any previously given consent at any time, without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

For EU/EEA residents: You have the right to lodge a complaint with your local data protection supervisory authority. As Escalera Labs S.L. is based in Spain, you may also contact the Agencia Española de Protección de Datos (AEPD).

11. Children's Privacy

Echo Products are not directed at individuals under 16 years of age. We do not knowingly collect personal data from children under 16. If we learn that we have collected personal data from a child under 16 without parental consent, we will delete that data promptly. If you believe a child under 16 has provided us with personal data, please contact us at [email protected].

12. Local Audio Processing

Echo Products' core voice conversion and DSP processing happens entirely on your local device — whether you are using the desktop app, mobile app, or browser-based tools. This section clarifies what this means for your privacy:

Desktop

  • Your microphone audio is captured by Echo, processed by local AI models (RVC/ONNX) and DSP effects, and output to a virtual audio device — all on your computer
  • Voice models (.onnx files) are stored locally on your device and are not uploaded to our servers

Mobile

  • Voice recordings used for speech-to-speech voice conversion (ASR via on-device Whisper and generation via on-device text-to-speech engine) are processed locally on your device
  • Text typed into the text-to-speech engine is processed locally on your device
  • Raw audio input, intermediate transcriptions, and generated output speech files are stored locally in your device's isolated application storage sandbox
  • Your voice recordings and text prompts do not leave your device and are never sent to our servers

Browser

  • Browser-based audio tools (mic test, voice recorder, stem splitter, vocal remover, etc.) process audio client-side using WebAssembly — audio files are not uploaded unless you explicitly choose to share them

This architecture means that even if our servers were compromised, your voice data would not be at risk — because we never had it in the first place.

13. Additional GDPR Disclosures

For the purposes of the EU General Data Protection Regulation (GDPR), Escalera Labs S.L. is the Data Controller for the personal information collected through our website and applications.

We will ensure that any transfer of personal information from countries in the European Economic Area (EEA) to countries outside the EEA will be protected by appropriate safeguards, such as standard data protection clauses approved by the European Commission (SCCs) or other legally accepted transfer mechanisms.

14. Additional Disclosures for California Residents (CCPA)

In the past 12 months, we have collected the following categories of personal information enumerated in the California Consumer Privacy Act (CCPA):

  • Identifiers: Name, email address, unique account ID, IP address, and device ID.
  • Customer Records: Purchase and transaction histories (website, desktop app and in-app) and subscription statuses.
  • Audio/Visual Data: Recorded voice input clips, only if explicitly uploaded by you (e.g., to a shared voice library feature). No audio is collected by default.
  • Usage/Analytics Data: Device configurations, OS versions, crash logs, masked desktop interface replays, and pseudonymised interaction metrics.

We collect and use these categories of personal information for the business purposes described in this policy, including to provide, analyze, and optimize our services.

Right to Know and Delete: If you are a California resident, you have the right to request access to the specific pieces and categories of personal information we have collected about you in the preceding 12 months, and the right to request deletion of your personal information, subject to certain legal exceptions. To exercise these rights, please contact us at [email protected].

15. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or Echo Products. Material changes will be communicated via email or a prominent notice on our website or application. The "Last updated" date at the top of this page indicates when the policy was last revised.

We encourage you to review this policy periodically. Your continued use of Echo Products after changes take effect constitutes acceptance of the updated policy.

16. Contact

If you have questions about this Privacy Policy or wish to exercise your data rights:

Data Controller: Escalera Labs S.L., Calle Obispo Muñoz 73, 46100 Burjassot (Valencia), Spain
Privacy inquiries: [email protected]
General legal: [email protected]