ElevenLabs
Updated 30 April 2024
This Privacy Policy ("Policy") explains how Eleven Labs Inc. ("we", "our", or "us") processes Personal Data of individuals who use our services, including our platform, websites (e.g., elevenlabs.io), mobile applications, and other online services (jointly, the "Services"). This Policy also explains your rights and choices about how we use your Personal Data, including how you can access or update certain information about you.
In this Policy, "Personal Data" means any information relating to an identified or identifiable individual, such as an individual's name, address, telephone number, or email address.
This Policy does not apply when we offer our Services and process Personal Data on behalf of enterprise/business customers. We act as a service provider/processor for those relationships and our use of that data is governed by our customer agreements.
For additional information, if you are located in California (USA), please also review our U.S. States privacy notice.
The information collected via Cookies may include information such as unique identifiers, system information, your IP address, web browser, device type, and the web pages that you visit just before or just after you use the Services, as well as information about your interactions with the Services, such as the date and time of your visit, and where you have clicked.
In some cases, we need to collect your Personal Data to provide you with our Services. In these cases, if you choose not to provide the requested Personal Data, you may not be able to use our Services. We will tell you if providing Personal Data is required by law or under a contract and what are the consequences of failing to provide it.
Depending on the country in which you are located, we will only process your Personal Data based on a valid legal ground. The table below describes the purposes for which we process your Personal Data and the legal grounds.
Purpose | Description | Legal ground (where required under applicable law) |
Providing the services | We may process your Personal Data to provide the Services you request from us, as described in the applicable Terms of Service | The processing is necessary for entering into, or performance of a contract to which you are a party |
Collecting your audio recordings and other Voice Data for use in connection with our Services | We collect the audio recordings of your voice that you choose to share with us, as well as any other Voice Data to provide our Services to you | The processing is necessary for entering into, or performance of a contract to which you are a party |
Generating your voice model or otherwise interpreting your voice if you use it for Services such as speech synthesis, dubbing, or translation | We may process the audio recordings of your voice that you provide to us, which include your Personal Data, such as your Voice Data, to create a voice model that will generate synthetic audio sounding like your voice, as further described in Section 6 "Voice Processing Notice" below | The processing is necessary for entering into, or performance of a contract to which you are a party |
Allowing others to generate synthetic audio using your voice model | You may decide to make your voice model available in the Voice Library for other users to use to generate synthetic audio sounding like your voice, and we process your Voice Data, including your voice model, for this purpose | You have provided your consent |
Verifying that it is your voice featured in the audio recordings you provided | To the extent that you use the professional voice cloning services, we may process an audio recording that you provide us and Voice Data to verify that it is your voice featured in other audio recordings you provided. We may process your Personal Data to protect against and prevent malicious, deceptive, fraudulent, illegitimate, or illegal activity, and to prevent the generation of “Deep Fakes.” We may use this data to help us defend ourselves in the event of a claim arising out of any attempted unlawful use of our Services. When we process your Voice Data for identity verification purposes, we process your Special Category Personal Data | The processing is necessary for the establishment, exercise, or defense of legal claims |
Personalizing your experience | We may process your Personal Data to personalize your experience when you access our Services, including suggesting content and features that could be of interest to you | We, or a third party, have a legitimate interest in using your Personal Data for the purpose of personalizing your experience |
Communicating with you | We may process your Personal Data to communicate with you, provide you with updates and other information relating to our Services, provide information that you request, respond to your comments and questions, and otherwise, provide customer support | The processing is necessary for entering into, or performance of a contract to which you are a party |
Billing and accounting | We may process your Personal Data to handle any payments from you or to you as described in the applicable Terms of Service, including keeping records of payments | The processing is necessary for entering into, or performance of a contract to which you are a party |
Preventing fraud | We may process your Personal Data to protect against and prevent fraud, and protect against malicious, deceptive, fraudulent, or illegal activity, including to prosecute those responsible for such activity | We, or a third party, have a legitimate interest in using your Personal Data to protect against and prevent fraud |
Safety | We may process your Personal Data to safeguard our platform and services, and to ensure security and safety | We, or a third party, have a legitimate interest in using your Personal Data to ensure security and safety |
Providing technical support | We use Personal Data to provide technical support, including diagnosing and resolving any issues you report | The processing is necessary for entering into, or performance of a contract to which you are a party |
Understanding usage | We may process your Personal Data to understand the usage of our Services, to understand trends and preferences, to improve and repair errors in the Services, and to develop new products, services, features, and functionalities. This includes the use of tools to look at mouse movements, clicks, keystrokes, data or text entered, and the pages you visit | We, or a third party, have a legitimate interest in using your Personal Data for the purpose of understanding usage |
Aggregated Data Generation | We may process your Personal Data to generate anonymized or aggregate data that we may use for any lawful purposes such as to publish reports | We, or a third party, have a legitimate interest in using your Personal Data to generate anonymized or aggregate data |
Administrative and legal | We may use your Personal Data to address any administrative or legal issues pertaining to ElevenLabs, including but not limited to intellectual property infringement, defamation, rights of privacy issues, to enforce our Terms of Service, or as necessary to establish, exercise or defend our legal rights | We, or a third party, have a legitimate interest in using your Personal Data to address administrative and legal issues |
Compliance | We may process your Personal Data for compliance with legal obligations to which we are subject, for instance, to comply with accounting and tax rules, or as mandated by a court order, judicial process, or governmental agency | We need it to comply with a legal obligation, for instance, to comply with a court order |
Research and development of AI models | We may process your Personal Data to research, develop and improve our AI models | We have a legitimate interest in using your Personal Data for the purpose of research and development of AI models |
Other purposes | If we intend to use your Personal Data for other purposes, we will provide specific notice at the time the Personal Data is collected | Please consult the relevant specific notice |
We only rely on our or a third party's legitimate interests to process your Personal Data when we determine that these interests are not overridden by your rights and interests. When we are using your information because we or a third party have a legitimate interest to do so, you may have the right to object to that use.
Your personal data may be shared with:
Our Services are hosted in the United States. If you choose to use our Services from a different jurisdiction, you are transferring your Personal Data outside of your jurisdiction and into the U.S. for storage and processing. Please note that the data protection laws in your jurisdiction may be different from the laws applicable in the U.S.
If you are located in the European Economic Area, the United Kingdom or Switzerland ("Europe"), we transfer your Personal Data outside of Europe to other countries, including to the U.S. We apply appropriate protections when we transfer your Personal Data to such countries, including by transferring Personal Data to countries which have been found to provide adequate protection by the competent authorities as appropriate (e.g., see the list of countries subject to an adequacy decision by the European Commission here), using contractual protections for the transfer of Personal Data, or transferring to recipients who have certified to participate in the EU-U.S. Data Privacy Framework, or adopted binding corporate rules. For more information about how we transfer outside Europe, or to obtain a copy of the contractual safeguards we use for such transfers, you may contact us using the contact details indicated in the "Contact Us" section below.
We take measures to delete your Personal Data or keep it in a form that does not permit identifying you when this information is no longer necessary for the purposes for which we process it unless we are required or permitted by law to keep this information for a longer period. When determining the specific retention period, we consider various factors, such as the type of service provided to you, the nature and length of our relationship with you, and mandatory retention periods provided by law and any relevant statute of limitations. For additional information about our retention and deletion of Voice Data specifically, please see Section 6 below.
This Voice Processing Notice explains how we collect, use, share, retain, and destroy (collectively, "process") the audio recordings that you elect to provide to us, which includes your Personal Data and Voice Data, to provide the Services. Residents of Illinois and individuals located in Illinois are required to expressly consent to the use of their Voice Data, which may be considered biometric data, for the purposes outlined in this Policy and may not share voices they generate in the Voice Library. For residents of Europe and the UK, our lawful basis for processing Voice Data is described above in section 2 (Purpose and Legal Basis for Processing). We will provide our Services and generate voice models on the basis that the processing is necessary for entering into, or performance of a contract to which you are a party. When we process your voice model to verify that it is your voice featured in the audio recordings you provided, we process your Personal Data based on our need to establish, exercise, or defend legal claims arising from any attempt to unlawfully use our Services.
How do ElevenLabs' voice modeling services work?
ElevenLabs analyzes your audio recordings and generates Voice Data from those recordings using our proprietary, AI-based technologies. ElevenLabs uses Voice Data to provide its voice services, including voice modeling, speech-to-speech, and dubbing services. For voice modeling, when you provide us with recordings of your voice, we utilize our proprietary, AI-based technologies that analyze your speech characteristics to formulate a distinct voice model of your vocal traits. This voice model can be used to generate audio resembling your voice. Depending on where you reside, applicable law may define your Voice Data, as biometric data.
How do we use and disclose your Voice Data?
ElevenLabs processes your audio recordings and Voice Data to provide the Services, including but not limited to: (1) develop a voice model of your voice that can be used to generate synthetic audio sounding like your voice at your request, or with your consent if you choose to make your voice model available in our Voice Library; (2) to the extent that you use the professional voice cloning services, to verify that it is your voice featured in the audio recordings you provided; (3) at your election, to create a mixed voice model based on data from multiple voices; (4) provide speech-to-speech and dubbing services; (5) to research, develop and improve our AI models; and (6) as necessary, to store your Voice Data using third-party cloud services. ElevenLabs will disclose your Voice Data to any acquirer, successor, or assignee, or where required by applicable law.
How long is the Voice Data retained and what happens to it at the end of the retention period?
We retain your Voice Data as long as we need it to fulfill the purposes described above unless there are legal requirements to delete it earlier or to keep it for a longer period (such as a warrant or subpoena). When the retention period ends, your Voice Data is permanently deleted. ElevenLabs will not keep data it generates about your voice longer than 3 years after your last interaction with us, except as required by law.
Depending on where you are located or reside, you may have certain rights regarding the Personal Data we maintain about you and certain choices about what Personal Data we collect from you, how we use it, and how we communicate with you.
Please be aware that if you opt out of receiving commercial emails from us or otherwise modify the nature or frequency of promotional communications you receive from us, it may take some time for us to process your request and you may receive promotional communications from us that you have opted out from during that period, to the extent permitted by applicable law. Additionally, even after you opt-out from receiving commercial messages from us, you will continue to receive administrative messages from us regarding our Services.
Depending on where you are located or reside, you may have additional rights as described below:
You may exercise these rights by using this online form. Please select “Other” and include the right you would like to exercise in the subject (e.g., “Withdraw my Consent”) and note the state or country in which you reside in the form. Before fulfilling your request, we may ask you to provide reasonable information to verify your identity. Please note that applicable law may provide for exceptions and limitations to each of these rights.
Depending on the country in which you are located, you may be asked to provide your consent for our use of Cookies (except for strictly necessary Cookies). In addition, you have the following choices concerning the use of Cookies.
Our Services may contain links to other websites, products, or services that we do not own or operate. We are not responsible for the privacy practices of these third parties. Please be aware that this Privacy Policy does not apply to your activities on these third-party services or any information you disclose to these third parties. We encourage you to read their privacy policies before providing any information to them.
We implement reasonable security measures to secure and protect your Personal Data. The up to date list of measures along with relevant audit certifications can be obtained at: https://compliance.elevenlabs.io/. We note that, as no electronic transmission or storage of information can be entirely secure, we can make no guarantees as to the security or privacy of your information, to the extent permitted by applicable law.
We do not knowingly collect, maintain, or use Personal Data from children under 18 years of age, and our Services are not directed to children. If you believe that we may have collected any such Personal Data on our Service, please notify us at legal@elevenlabs.io.You are also not allowed to upload, send, email, or otherwise make children’s Voice Data available to us or other users. The use of children’s Voice Data is prohibited on our Services.
We may periodically update this Policy. If there are significant changes, we will notify you in advance or as required by law.
For any questions regarding this Policy or to exercise your rights, please contact our Data Protection Officer at legal@elevenlabs.io or write us at: Data Protection Officer; ElevenLabs Inc.; 169 Madison Ave #2484, New York, NY 10016, United States.
If you are located in the European Economic Area, the UK or Switzerland, the controller for the processing of your Voice Data is Eleven Labs sp. z o.o., Lipska 27/22 Street, 03-908, Warsaw, Poland.
If you are a resident of certain U.S. states, including California, Connecticut, Colorado, Utah, Virginia, Oregon, Montana, or Texas, there are additional disclosures and certain additional rights regarding your Personal Data, as described below. The rights available to you will depend on the laws in the state where you live.
Sale of Personal Data, Sharing for Cross-Context Behavioral Advertising, and Targeted Advertising
When we share Personal Data through our marketing cookies or with vendors that provide advertising services to us, that is considered a sale or sharing for cross-context behavioral advertising or targeted advertising under certain U.S. state privacy laws. You can opt out of the sale of your Personal Data, including the sharing of your Personal Data for targeted or cross-contextual behavioral advertising by submitting your request here.
The following types of Personal Data may be processed for purposes of targeted advertising, and may have been “shared” or “sold” in the 12 months prior to the last modified date of the privacy policy:
Each category of Personal Data listed above is “shared” with or “sold” to the following third parties in connection with our marketing activities:
We do not have actual knowledge that we “sell” or “share” personal information of individuals under the age of 16.
Do Not Track. Our websites and apps are not designed to respond to “do not track” requests from browsers.
Deidentified Information. To the extent we process deidentified information, we will maintain and use the information in deidentified form and will not attempt to reidentify the information unless permitted by applicable law.
Sensitive Personal Information. In the U.S., there may be instances where we process information that is considered “sensitive personal information,” including your Voice Data, as described in Section 6.
Your U.S. privacy rights
In certain U.S. states, in addition to the rights in Section 7, you also have the following rights:
In those states where it is applicable, you or your authorized agent may submit a request to exercise any of the above rights.
For Our California Residents
California Notice
| Categories of Personal Data | Details |
|---|---|
| Categories of Personal Data | We collect the information described in Section 1, Categories of Personal Data We Collect, Personal Data We Collect Automatically From You and/or Your Device, Personal Data We Collect from Third Parties *We do not use Voice Data to infer characteristics about an individual. |
| Sources of Personal Data | Our Sources of Personal Data are you, your browser, publicly available information on third-party sites, and third parties you use to log-in to the Services. |
| Purpose of Collecting Personal Data | We use Personal Data as described in Section 2, Purposes and Legal Basis for Processing |
| Categories of Personal Data Sold/Shared | Online and/or device identifiers |
| Third Parties Sold to | Advertising Vendors |
| Retention Period | We retain Personal Data as described in Section 5, Data Retention |