Trust
Security at VoiceoverWise
How we protect your account, your scripts, your audio and your payments.
How we protect you
Encrypted in transit
All traffic is served over HTTPS with HSTS. Session cookies are HttpOnly, Secure and SameSite.
Credentials stored safely
Passwords are hashed with bcrypt. API keys are shown once and stored only as SHA-256 hashes. Password reset links are single-use and expire after one hour.
No card data on our servers
Card details are entered in Polar's secure checkout and never touch VoiceoverWise. Payment webhooks are verified with signed HMAC signatures.
Private audio
Audio files are served only to the account or API key that created them, never from public links, and are deleted automatically after 30 days.
Customer isolation
Every query is scoped to your account. Scripts, dictionaries and clips are never visible to other customers.
Responsible voices
No voice cloning, a clear Acceptable Use Policy, rate limits on generation and a channel to report misuse.
How your data is handled
- What we store: your account details, your Scripts and settings, your pronunciation dictionary and generated Audio and subtitle files. Card details are never stored by us; our payment provider handles them.
- Where it lives: in our application database and file storage on servers operated by our hosting provider. Administrative access is limited to the company's owner.
- Who it's shared with: only the service providers needed to run VoiceoverWise, listed in our Privacy Policy. Scripts are sent to our text-to-speech provider through its business API to generate Audio.
- Deletion: Audio files are deleted after 30 days. Deleting a clip or your account removes it from our live systems immediately.
Application security
- A strict Content Security Policy, clickjacking protection and modern security headers on every response.
- Cross-site request protection on every state-changing request, plus rate limits on sign-in, password reset, forms, generation and free tools.
- Changing or resetting your password signs out every other session.
- Credits are reserved and returned inside database transactions, so balances stay accurate even under load.
- An automated end-to-end test suite covering authentication, billing, data isolation, generation and these protections runs before every release.
Report a vulnerability or misuse
If you believe you've found a security issue, email [email protected] with the subject "Security". Please give us reasonable time to fix it before disclosure, and don't access other users' data or degrade the service while testing. To report misuse of a voice, use the subject "Abuse report". We acknowledge reports within two business days.
VoiceoverWise is operated by MERACUR LLC. Learn more about the company or read our Privacy Policy.