Privacy Policy

Effective Date: 19 October 2026

Cotsiasane, accessible via https://cotsiasane.com/, provides an AI text-to-speech platform that helps creators and businesses generate realistic, multilingual voiceovers. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you access our website, use our SaaS applications, or purchase our services. Our platform operates on a one-time billing model with no recurring payments required.

1. Introduction

This Privacy Policy explains how we handle personal and technical data and outlines our commitment to protecting customer privacy.

It applies to all users, visitors, clients, and partners accessing our website and associated services. The effective date appears at the beginning of this document. We may update the policy to reflect operational, legal, or regulatory changes, and users are encouraged to review it periodically.

2. Company Information

Registered Business Name: Cotsiasane Limited
Official Website: https://cotsiasane.com/
Nature of Business: AI text-to-speech platform for generating realistic, multilingual voiceovers
Jurisdiction: Cyprus
Contact Email: support@cotsiasane.com
Registered Address: Themistokli Dervi, 6, Flat/Office D4, 1066, Nicosia, Cyprus

3. Scope of the Privacy Policy

This policy covers the following categories of users and services:

Website visitors browsing landing pages and informational resources.
Registered users and customers using AI voiceover tools.
Business partners collaborating with the company.
Job applicants submitting resumes, portfolios, and personal information.
Newsletter subscribers receiving updates and promotional communications.
API users integrating text-to-speech functionality into third-party software.
SaaS customers using the cloud-based dashboard and generation tools.
Users accessing official responsive or native mobile applications.

4. Information Collected

We may collect personal, technical, usage, and payment-related information necessary to operate the platform and provide services.

Personal information may include your full name, email address, optional phone number, company name, job title, billing address, shipping address where applicable, country of residence, account details, encrypted passwords, display name, and profile preferences.

Technical information may include:

IP address for geographic and security analytics.
Browser type, version, device information, hardware architecture, screen resolution, and operating system.
Language preferences and referral URLs.
Session identifiers used to maintain secure, authenticated sessions.

Usage information may include pages visited, features used, time spent on pages, login history, authentication attempts, click behavior, audio download history, and searches performed within the platform or help centre.

Payment information may include transaction IDs, billing information, invoices, and payment gateway data required to process transactions. Raw payment card numbers are not stored by the platform, and card information is processed through third-party payment providers. We use a one-time billing model without recurring subscriptions. Tax information, including VAT or GST identification numbers, may also be collected where applicable.

5. Methods of Collecting Data

Information may be collected directly from you or automatically through your use of our services.

Common collection methods include:

Contact, registration, and quote request forms.
Newsletter subscriptions and communication preference settings.
Cookies and similar tracking technologies.
Live chat conversations and customer support tickets.
APIs that process authentication headers, request payloads, and usage metrics.
Authorized third-party integrations connecting external accounts.
Marketing campaigns that measure engagement, click-through rates, and lead submissions.

6. Purpose of Data Collection

We use collected information for purposes related to service delivery, account management, security, and business operations, including:

Providing AI text-to-speech generation and related technology services.
Managing customer accounts, authentication, and dashboard preferences.
Delivering consultancy and tailored enterprise solutions.
Processing orders under our one-time billing model.
Providing technical support and resolving reported issues.
Monitoring cybersecurity threats and preventing fraud.
Improving products, algorithms, features, and platform performance.
Meeting applicable legal and regulatory obligations.
Sending marketing communications and promotional offers where explicit consent is required and obtained.
Analysing user behaviour, traffic patterns, and market trends.
Preparing internal reports to support business planning and resource allocation.

7. Legal Basis for Processing (GDPR)

Where the General Data Protection Regulation (GDPR) applies, we process personal information under the relevant legal basis for each activity.

Consent: For marketing communications and optional cookies where consent is required.
Contract performance: To provide purchased services and fulfil customer orders.
Legitimate interests: To secure systems, prevent fraud, and improve platform functionality, provided these interests do not override your rights.
Legal obligations: To retain required financial records and respond to lawful government or judicial requests.
Vital interests: In exceptional circumstances where processing is necessary to protect someone’s life or physical safety.
Public interest: Where processing is required under applicable statutory or regulatory provisions.

8. AI Data Processing

Our AI systems process submitted text and configuration settings to generate realistic, multilingual voiceovers. Automated processing is primarily used for audio generation and resource management, while human oversight may be used to investigate system anomalies, handle complex support issues, and review output quality.

We do not use user-uploaded scripts or custom voice models to train public models without explicit consent. Uploaded datasets and private audio assets are protected through access restrictions and isolation measures, with zero-retention policies applied where required.

Our engineering practices aim to support responsible AI use, minimize algorithmic bias, and encourage responsible synthetic media generation.

9. Data Sharing

Personal information may be shared with trusted third parties when necessary to operate the platform, provide services, or meet legal obligations.

These parties may include:

Cloud hosting, storage, and database providers.
Certified payment processors that handle financial transactions.
Customer relationship management (CRM) and support service providers.
Analytics providers that supply aggregated insights into website traffic and engagement.
Security monitoring vendors that help protect against DDoS attacks and unauthorized access.
Legal authorities acting under valid subpoenas, court orders, or other binding legal processes.
Professional advisers, including legal counsel and certified accountants, subject to confidentiality obligations.

We do not sell, trade, or rent user data to external commercial entities.

10. International Data Transfers

As the platform serves users internationally, personal information may be transferred to or processed in countries outside your country of residence.

Appropriate technical and organizational safeguards are implemented to protect information during international transfers. Where applicable, Standard Contractual Clauses (SCCs) or equivalent legally approved mechanisms may be used for cross-border data transfers.

11. Data Security

We use technical and organizational measures intended to protect personal information against unauthorized access, loss, misuse, or disclosure.

These measures may include:

SSL/TLS encryption to protect data in transit.
Web application firewalls (WAF) to filter malicious traffic.
Multi-factor authentication (MFA) for administrative access to critical infrastructure.
Role-based access controls (RBAC) that limit employee access according to business needs.
Encryption at rest for databases containing sensitive information and system logs.
Automated backups to support data recovery and resilience.
Intrusion detection systems to monitor suspicious network activity.
Vulnerability testing and security audits to identify and address potential weaknesses.
Confidentiality agreements and cybersecurity training for employees and contractors.

12. Data Retention

Personal information is retained only for as long as necessary for the purposes described in this policy, subject to applicable legal requirements.

Account data: Retained while an account remains active or as needed to provide services.
Contracts and legal agreements: Stored for the period required by corporate and commercial law.
Support records: Maintained for a reasonable period to ensure continuity of customer service.
Payment and invoice records: Retained for statutory tax and accounting periods, typically between five and seven years where applicable.
Marketing information: Retained until you unsubscribe or withdraw consent, subject to any other lawful retention requirements.
Analytics and server logs: Anonymized or deleted according to scheduled retention periods.
Dispute and regulatory records: Retained until the relevant matter is resolved and any required retention period has expired.

13. User Rights

Depending on your location and applicable data protection laws, you may have the following rights regarding your personal information:

Access: Request access to the personal information we hold about you and obtain a copy.
Rectification: Request correction of inaccurate, incomplete, or outdated information.
Erasure: Request deletion when the information is no longer necessary or another applicable legal condition is met.
Restriction: Request that processing be restricted in certain circumstances.
Objection: Object to processing based on legitimate interests or for direct marketing.
Data portability: Request a copy of eligible data in a structured format for transfer to another service provider.
Withdrawal of consent: Withdraw consent where processing is based on consent.
Complaint: Lodge a complaint with the relevant data protection supervisory authority.

These rights may be subject to legal conditions and exceptions. Requests can be submitted through the contact details provided in Section 20.

14. Marketing Communications

Marketing communications are sent in accordance with applicable consent and privacy requirements. Where explicit opt-in consent is required, it is collected through registration forms or subscription forms.

Users can manage newsletter preferences through available account settings. Promotional emails include an unsubscribe link, and users may opt out of marketing communications without penalty.

Marketing communications may include information about new AI voice features, platform updates, and creator resources. Opting out of marketing does not prevent essential service-related communications where necessary.

15. Children’s Privacy

Our platform and services are not intended for children below the applicable legal age of majority in their jurisdiction. We do not knowingly collect personal information from minors in violation of applicable law.

If we discover that a child’s personal information has been collected inadvertently, we will take appropriate steps to delete it in accordance with applicable legal requirements.

16. Third-Party Websites

Our website may contain links to external websites, social media platforms, or partner tools. These third parties operate under their own privacy policies and practices.

We are not responsible for the privacy practices, content, or security measures of external websites. Users should review the applicable policies before providing information to third-party services.

17. Cookies Reference

Cookies and similar technologies may be used to support website functionality, remember preferences, and understand platform usage.

For detailed information about the cookies we use, their lifespans, and how to manage your preferences, please refer to the separate Cookie Policy available on our website.

18. Security Incident Response

We use automated and manual monitoring procedures to help detect potential security incidents and data breaches. Suspected incidents are investigated, and corrective measures are taken where necessary.

Our response may include:

Investigating the incident and assessing its potential impact.
Applying security patches and strengthening affected systems.
Notifying affected users and relevant regulatory authorities promptly where legally required, including in the event of a confirmed high-risk breach.
Cooperating with law enforcement and regulatory authorities during formal investigations where appropriate or legally required.

19. Changes to the Privacy Policy

We may update this Privacy Policy to reflect changes in our operations, services, or legal and regulatory obligations.

The effective date of the latest version will be displayed at the top of the policy. Significant changes may be communicated to registered users by email or through a prominent notice on the website dashboard.

Where required by law, users will be notified of material changes or asked to provide consent. Continued use of the platform will be treated as acceptance of revised terms only where permitted by applicable law.

20. Contact Us

For privacy-related inquiries, personal data access requests, or questions about our services and one-time billing model, contact us using the details below.

Email: support@cotsiasane.com

Website: https://cotsiasane.com/

Registered Address:
Cotsiasane Limited
Themistokli Dervi, 6, Flat/Office D4
1066, Nicosia, Cyprus
Registration Number: HE 499116