Privacy Policy

Account information: name, email address, password hash, profile preferences, organization name and role.

User content: prompts, briefs, scripts, uploaded audio, brand kits, voice samples, project metadata and Generated Content (voiceovers, music beds, SFX, mixes, exports).

Payment information: billing name, address, last four digits of card, transaction IDs, currency, amount and status. Full card data is processed and stored by our PCI-compliant payment processors (e.g., PowerTranz); we never see or store full card numbers.

Usage and device data: log data, IP address, device and browser type, language, referring URL, pages viewed, feature interactions, crash reports and approximate location.

Cookies and similar technologies: session cookies, authentication tokens and limited analytics identifiers (see Section 7).

Communications: support requests, feedback, survey responses and correspondence.

• Provide, operate, secure, and improve the Service.
• Generate, store, render and deliver Generated Content.
• Process payments, manage subscriptions, issue receipts, and prevent fraud.
• Communicate with you about your account, security, transactions and product updates.
• Monitor abuse, enforce our Terms and comply with legal obligations.
• Aggregate and de-identify data for analytics, capacity planning and research.

We do not use your prompts, uploaded audio, voice clones or Generated Content to train foundational AI models. We may use de-identified, aggregated metadata (such as feature usage patterns) to evaluate quality, tune prompts, debug, and improve our own product features.

You may opt out of even aggregated, de-identified processing for product analytics from your account settings. Voice cloning requires explicit, verifiable consent from the voice owner; cloned voices are tied to your account and are not pooled into shared model training.

We share information only as needed to operate the Service and as described below. We do not sell personal information.

• AI providers: ElevenLabs and similar vendors process prompts and voice data to render audio, subject to their own terms.
• Payment processors: PowerTranz and equivalent providers handle card data and settlement (in BBD).
• Cloud hosting and storage: Supabase, Cloudflare and similar infrastructure providers host the application and store assets.
• Analytics & error tracking: limited, privacy-respecting providers used to maintain product reliability.
• Legal & safety: when required by law, subpoena, or to protect rights, safety or property.
• Corporate transactions: in connection with a merger, acquisition, financing or asset sale, with appropriate safeguards.

Adly is based in Barbados and our vendors operate globally. Your information may be transferred to and processed in countries other than your own. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses, vendor-level data processing agreements and security certifications.

We retain account and transaction data for as long as your account is active and as needed to comply with legal, tax and accounting obligations. Generated Content and projects are retained until you delete them or your account is closed. Backups are purged on a rolling schedule. You may request deletion as described in Section 8.

We use strictly necessary cookies to keep you signed in and to remember preferences. We use limited analytics to understand aggregate usage. We do not use cross-site advertising trackers. You can control cookies via your browser; disabling required cookies will impair the Service.

Depending on your jurisdiction (including the EEA, UK, California and similar regimes), you may have the right to access, correct, export, restrict or delete your personal information, to object to certain processing, and to withdraw consent. To exercise these rights, contact privacy@adly.studio. We will respond within the period required by applicable law.

We use technical and organizational measures including encryption in transit, encrypted storage, role-based access control, audit logging and Row-Level Security on our databases. No system is perfectly secure; you use the Service at your own risk and should use strong, unique passwords.

The Service is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it.

We may update this Policy from time to time. Material changes will be highlighted in-product or by email. Questions or requests: privacy@adly.studio.