ScriptVoiceStudioBack to sign in

Regional Data Protection Notices

Last Updated: August 12, 2026

These Regional Data Protection Notices supplement the Privacy Policy. They summarise how ScriptVoiceStudio handles personal data for users in Singapore, Taiwan, Malaysia, the Philippines, the United Arab Emirates, India, the United States, the United Kingdom, Canada, Australia, New Zealand, Indonesia, Kenya, and South Africa.

These notices are operational summaries, not a promise that every law applies to every user or transaction. Where a local law applies and gives you mandatory rights, we will respect those rights.

1. Organisation and Contacts

ScriptVoiceStudio is operated by KYC Global Pte. Ltd.. Privacy and data protection requests may be sent to dpo@kycglobal.one. Support, billing, and abuse reports may be sent to support@kycglobal.one.

2. Common Privacy Commitments

3. Singapore PDPA Notice

Singapore is our primary operating baseline. We align with Singapore PDPA obligations including accountability, notification, consent, purpose limitation, accuracy, protection, retention limitation, transfer limitation, access and correction, and data breach notification. You may request access to personal data in our possession or control, request correction, withdraw consent with reasonable notice, or submit a complaint by contacting the privacy address above.

4. Taiwan Personal Data Protection Notice

For Taiwan users, we provide notice of the purposes, categories, period, territory, recipients, and methods of personal data use where applicable. You may have rights to inquire about and review personal data, request copies, supplement or correct data, request cessation of collection, processing, or use, and request deletion where applicable.

5. Malaysia PDPA Notice

For Malaysia users, we align our notice with the Personal Data Protection Act principles of general consent, notice and choice, disclosure, security, retention, data integrity, and access. You may request access or correction, withdraw consent where applicable, and object to direct marketing where used. We do not currently rely on direct marketing as a core processing purpose for the Service.

6. Philippines Data Privacy Notice

For Philippines users, we treat users as data subjects under the Data Privacy Act where applicable. You may have rights to be informed, object, access, rectify, erase or block, data portability, damages where applicable, and file a complaint with the National Privacy Commission. We process personal data for declared purposes and use reasonable organisational, physical, and technical safeguards.

7. UAE Personal Data Protection Notice

For users in the United Arab Emirates, we align with the federal UAE Personal Data Protection Law where applicable. We process personal data for service delivery, billing, support, security, legal compliance, and user-requested purposes. You may have rights to information, access, correction, deletion, restriction, objection, transfer, and withdrawal of consent where applicable. Free-zone privacy laws such as DIFC or ADGM rules may apply separately in some contexts.

8. India Digital Personal Data Protection Notice

For India users, where the Digital Personal Data Protection Act applies, we provide notice of personal data and purposes, process digital personal data for lawful purposes, support consent withdrawal where consent is the basis, provide grievance handling, and support applicable rights to access information, correction, completion, updating, erasure, and nomination. Some recurring payments may depend on Indian payment rules and payment-provider support.

9. United States Privacy Notice

For United States users, privacy rights vary by state. Where applicable, you may have rights to know or access categories and specific pieces of personal information, delete, correct, obtain portability, opt out of sale or sharing, opt out of targeted advertising, limit sensitive personal information, and avoid discrimination for exercising privacy rights. We do not intentionally sell personal information or share it for cross-context behavioural advertising.

10. United Kingdom Privacy Notice

For United Kingdom users, where UK GDPR applies, our privacy information is intended to be concise, transparent, intelligible, and accessible. You may have rights to be informed, access, rectification, erasure, restriction, portability, objection, withdrawal of consent where used, and rights relating to automated decision-making. You may complain to the UK Information Commissioner's Office if you believe your rights have not been respected.

11. Canada Privacy Notice

For Canada users, where PIPEDA or substantially similar provincial laws apply, we align with fair information principles including accountability, identifying purposes, consent, limiting collection, limiting use, disclosure and retention, accuracy, safeguards, openness, access, correction, and challenging compliance. You may request access to and correction of personal information, subject to legal exceptions.

12. Australia Privacy Notice

For Australia users, where the Privacy Act and Australian Privacy Principles apply, we collect personal information only where reasonably necessary for the Service or related functions, use lawful and fair means, provide notice, use and disclose information for stated purposes, apply reasonable safeguards, and support access and correction rights. We aim to minimise personal data collection and avoid collecting sensitive information unless consent or an exception applies.

13. New Zealand Privacy Notice

For New Zealand users, where the Privacy Act 2020 applies, we align with information privacy principles covering purpose, source, notice, fair collection, storage and security, access, correction, accuracy, retention, use, disclosure, overseas disclosure, and unique identifiers. We provide notice for direct collection and, where applicable, indirect collection.

14. Indonesia Personal Data Protection Notice

For Indonesia users, where Law No. 27 of 2022 on Personal Data Protection applies, we process personal data for lawful service, billing, support, security, legal, and user-requested purposes. You may have rights to information, access, correction, completion, updating, deletion, withdrawal of consent, objection to certain automated decisions, restriction or delay of processing, and remedies where applicable. We aim to minimise collection and avoid sensitive or regulated data unless you have confirmed that your use is lawful.

15. Kenya Data Protection Notice

For Kenya users, where the Data Protection Act applies, we provide notice of processing purposes, collect and use personal data for stated service-related purposes, apply reasonable safeguards, and support applicable rights to be informed, access personal data, object to processing, correct false or misleading data, and request deletion of false or misleading data.

16. South Africa POPIA Notice

For South Africa users, where the Protection of Personal Information Act applies, we align with lawful-processing conditions including accountability, processing limitation, purpose specification, further-processing compatibility, information quality, openness, security safeguards, and data-subject participation. You may have rights to know whether personal information is held, request access, request correction or deletion, object to certain processing, withdraw consent where consent is used, and report concerns to the Information Regulator.

17. Requests, Timing, and Verification

Email dpo@kycglobal.one with your account email, country, request type, and enough information for us to verify identity and locate data. We aim to respond within 30 calendar days unless a different period applies, verification is incomplete, the request is complex, or legal exceptions apply.

18. Provider-Controlled Data and International Transfers

Some personal data may be independently controlled by ElevenLabs, Stripe, identity providers, hosting providers, banks, card networks, or support tools. ElevenLabs may act as an independent controller for account, security, product, research, legal, or business processing, or as a processor where an applicable data-processing agreement governs the processing. KYC Global cannot fulfil a request for data controlled solely by another provider; you may need to exercise rights directly with that provider.

When you initiate voice generation, scripts, extracted text, voice identifiers, settings, and related information are transmitted to ElevenLabs, and generated audio is returned. ElevenLabs states that it may moderate input and output and may use content and personal data for service improvement or model research and development, subject to its terms, applicable law, and account-level choices. Review the current ElevenLabs Privacy Policy and manage any available training preference directly in your ElevenLabs account.

ElevenLabs currently states that it maintains hosting or server locations in the United States, the Netherlands, and Singapore and transfers personal data to the United States for storage. These provider practices may change. KYC Global applies appropriate safeguards to transfers for which it is responsible and relies on each independent provider to apply safeguards to transfers that provider controls.

19. Adults Only

ScriptVoiceStudio is available only to people who are at least 18 years old and have reached the age of legal majority where they live. It is not available to minors, including with parental or guardian consent. We do not knowingly permit children's personal or voice data to be submitted for generation.

For privacy queries, contact dpo@kycglobal.one.