Privacy Policy
Last updated 23 October 2026
We collect as little as we can. This page explains exactly what we collect, why, who helps us handle it, how long we keep it, and what you can ask us to do.
1. Who is responsible
Cylindricle decides why and how your personal data is used (the "data fiduciary" under India's Digital Personal Data Protection Act, 2023). Contact: support@cylindricle.com.
2. What we collect and why
| Data | Why we need it | How long we keep it |
|---|---|---|
| Email address and sign-in details (including your Google account email and name if you sign in with Google) | To create and secure your account, send receipts and service emails | Until you delete your account. Deleting it (Account → Delete my account) removes your sign-in and your email from our systems straight away |
| Your text | To make your audio | Deleted from our database when your audio job ends. It is never added to your history |
| Audio files, subtitles and their settings (voice, speed, pauses) | So you can listen and download | 3 days on the Free plan, 30 days on paid plans, then deleted automatically |
| Usage records (characters used, audios made, test clips, time, cost of processing) | To apply plan limits, prevent abuse and run the service | While your account exists. When you delete your account, your usage records are removed or anonymised |
| Payment records (order and payment IDs, amount, plan, status, time) | To give you your plan, send receipts, handle refunds and meet accounting duties | Kept as long as tax and accounting law requires (generally up to 8 years), even if you delete your account. They are then held apart from your profile, with only a masked email |
| A one-way scrambled (hashed) form of your normalised email and IP address | To enforce the one-time free allowance and stop automated abuse. The hash cannot be turned back into your email or IP | IP hashes are cleared within 48 hours. The scrambled email, together with the fact that the free allowance and free test clips were used, is kept after you delete your account so they cannot be claimed a second time. A deleted account does not get a new free allowance |
| Messages you send to support | To reply and keep a record | Up to 3 years |
We do not collect your card or bank details (Razorpay does), your precise location, contacts, or any voice recordings. We do not accept voice samples at all.
3. Your audio and your text are private
Your text and the audio you make belong to you. We do not listen to your audio and we do not read your text. Files are tied to your account and only you can open them, through private links that expire. Our team does not browse, sample or review users' audio, and we do not use it to train AI.
There is one narrow exception. If someone reports a specific file as abusive or illegal, or the law or a court requires it, or we must fix a security problem, we may open that specific file and only that file. We cannot honestly promise more than this: we have to be able to act on reports of harm, such as impersonation or child-safety content.
4. The legal basis for using your data
We use your data because you asked for the service and agreed to these terms and this policy (your consent), to meet legal duties (such as tax records), and for limited legitimate uses the law allows, such as keeping the service secure and preventing fraud. You can withdraw consent for optional uses at any time; withdrawing may mean we can no longer provide the service.
5. Who we share data with
We use trusted service providers who process data only on our instructions and only to run Cylindricle. We do not sell personal data. The kinds of providers we use are:
- Cloud hosting and database providers: to run the website, sign you in and store your account records
- Cloud storage and computing providers: to make your audio and keep your files until they expire
- A payment provider: to take payments. Your card or bank details go straight to it and never reach us
- Email providers: to send receipts and service emails, and to receive your support emails
- Google: only if you choose "Continue with Google" to sign in
Write to us if you would like the names of the providers we use.
We may also disclose data when the law or a valid government or court order requires it, or to protect people's safety and our legal rights.
6. Where data is processed
Our providers run servers in several countries, so your data may be processed outside India. We choose providers with strong security practices and contracts that protect your data, and we transfer data only as the DPDP Act allows.
7. Cookies and similar technologies
- Essential sign-in cookies (named cyl_at, cyl_rt and cyl_pkce) keep you signed in and protect the sign-in flow. The site does not work without them.
- A bot check runs a privacy-friendly test on sign-up and some actions.
- Local storage (cyl_studio_v1) remembers your studio settings on your own device, so you do not lose your work if you reload.
- We do not use advertising cookies, analytics trackers or social-media pixels.
8. Security
We use encryption in transit, access controls, row-level database security, hashed identifiers, signed time-limited download links, and bot and rate-limit protection. No system is perfectly secure. If a breach affects your personal data, we will tell you and the Data Protection Board of India as the law requires, without delay.
9. Your rights
You can download a copy of your data and delete your account yourself from the Account page. You can also ask us to: tell you what data we hold and how it is used; correct or complete it; erase it; and give it to you in a usable form. You can also nominate someone to exercise these rights for you if you die or cannot act. Write to support@cylindricle.com from your account email; we acknowledge within 24 hours and respond within 7 days. Some records (such as payments) must be kept by law and cannot be erased until the legal period ends. If we do not resolve your complaint, you may complain to the Data Protection Board of India.
10. Children
Cylindricle is for people aged 18 and over. We do not knowingly collect data from anyone under 18. If you think a child has given us data, write to us and we will delete it.
11. Changes to this policy
If we change this policy in a way that matters, we will update the date at the top and tell you by email or in the product before it takes effect.
Questions about this page? Write to support@cylindricle.com. See also our terms, privacy policy, refund policy and AI voice policy.