Privacy Policy

This Privacy Policy explains what Kodimo, Inc. (“Tazo”, “we”, “us”) collects, how we use it, who we share it with, and the choices you have. It covers the Tazo website (tazolabs.com), the app and playground (app.tazolabs.com), and the Tazo API (the “Services”). It works together with our Terms of Service.

Kodimo, Inc. is the company responsible for the personal data described here, except where a custom agreement with you says otherwise. When you send us audio, you decide what to send and we process it for you to run the Services. For training, quality review, analytics and security, we decide how the data is used.

1. The short version

• We collect your account details, the audio and options you send us, usage records, and payment records.
• We use audio you submit to train and improve our models, unless you opt out or have a custom enterprise agreement. You can opt out by email.
• Audio is encrypted in our systems, kept while your account exists, and deleted after six months of inactivity or removed from our live systems immediately when you delete your account.
• Your audio is processed by our own models on servers we operate. We never send it to outside AI, analytics or advertising companies.
• We do not sell your personal data, and we do not use advertising cookies.
• You can ask us to access, correct or delete your data at any time by emailing support@tazolabs.com.

2. What we collect

Account data. Your email address and, if you sign in with Google, the name and profile information Google shares with us. We also keep sign-in records and the settings you choose.

Audio and content you submit (“Your Content”). The audio clips and live streams you send, the options and instructions you define, and the decisions our models return. Audio can contain people’s voices and anything said in a recording, including personal information about you or other people. You are responsible for having the rights and consents needed to submit it, as explained in the Terms of Service.

Tazo does not build voiceprints to identify who is speaking.

Usage and technical data. Request logs and API metadata (time, audio length, model used, status and errors), your IP address, browser and device type, approximate location from your IP address, and security signals such as the result of our bot check.

Payment data. When you buy credits, Stripe collects your card or payment details, billing address and tax details. We do not see or store your full card number. We receive and keep records of the purchase, such as amount, date, country, invoice details and the version of the terms accepted.

Support messages. What you send to us by email and our replies.

Analytics data. How visitors use our website and app: pages viewed, clicks, device and browser type, and referring page. In the app this includes session replays (section 5). Analytics never include your audio.

3. How we use your data, and why

What we do	Data	Why we may do it (EU and UK law)
Provide the Services, run your account, send service emails	Account data, Your Content, usage data	To perform our contract with you
Take payments, issue invoices, keep tax records, prevent payment fraud	Payment data, account data	Contract, and legal obligations
Train, test and improve our models and Services	Your Content	Our legitimate interests in improving the Services, with an opt-out that you can use at any time
Review quality and fix errors, including review and labeling of audio by authorized Tazo personnel	Your Content, usage data	Legitimate interests; contract
Keep the Services secure and prevent abuse and fraud	Usage data, account data, Your Content	Legitimate interests; legal obligations
Understand how our website and app are used and improve them	Analytics data	Legitimate interests
Answer your questions and handle requests	Support messages, account data	Contract; legitimate interests
Comply with law and respond to lawful requests	Any of the above as needed	Legal obligations

Training on your audio. Unless you opt out, or have a custom enterprise agreement that says otherwise, we may use audio and other Content submitted through your account, in the playground or through the API bought directly from us, to train, test and improve Tazo’s models and Services. Training and labeling are done in-house by Tazo, on servers we operate. Your audio is not seen by any other company: we do not send it to outside AI model providers, to analytics tools or to advertisers, and we do not give it to other companies to train their models.

How to opt out. Email support@tazolabs.com from the email address on your account and ask to opt out of training. We will confirm by reply. An opt-out stops future training use. It does not undo training that already happened, because we cannot remove one person’s data from a trained model, and it does not stop use of Your Content to run the Services, review quality, and keep them secure.

Access to audio. Stored audio is encrypted. It may be accessed, and decrypted for that purpose, for delivering the Services, for quality review and for model training, by authorized Tazo personnel and systems. Personnel who label or review audio are bound by confidentiality obligations.

Automated decisions. Tazo’s models return a decision chosen from options that you define. Tazo does not use these decisions to make legal or similarly significant decisions about you. What you do with the results about other people is your responsibility under the Terms of Service.

4. Who we share data with

We do not sell your personal data, and we do not share it for advertising. We share it only with:

• Service providers that help us run Tazo, under contracts that limit what they can do with it:
  • Amazon Web Services: hosting, storage, databases, sign-in (Cognito) and email delivery.
  • Stripe: payments, invoices, and, where it applies, acting as merchant of record.
  • Cloudflare: bot protection on sign-in (Turnstile) and network security.
  • Google: if you choose “Sign in with Google”.
  • Vercel: hosting of our website.
  • Plausible Analytics: website analytics (section 5).
  • Amplitude: product analytics and session replay in the app (section 5).
• Professional advisers, such as lawyers, accountants and auditors, who are bound by confidentiality.
• Authorities and other parties, when the law requires it, to enforce our terms, to protect our rights, security or safety, or the rights, security or safety of others.
• A buyer or successor, if Tazo is involved in a merger, acquisition, financing or sale of assets. We would tell you and the new owner would have to honor this policy.
• Anyone else you tell us to share with.

5. Analytics and session replay

Analytics tell us how people use Tazo, so that we can improve the experience. They measure behavior on our website and in our app, such as pages opened and buttons clicked. They never receive your audio, and we do not run them on your audio or the contents of your recordings.

• Website (tazolabs.com). We use Plausible Analytics to count page views and see which pages are useful. It does not use cookies and does not follow you across other websites.
• App (app.tazolabs.com). We use Amplitude to see which pages you open and what you click, and your device and browser type. Amplitude uses cookies and similar browser storage to recognize your browser between visits. It also makes session replays, which are recordings of what is shown on your screen in the app and how you interact with it. A replay can show anything that appears on your screen, such as your email address, results and billing details.

To exclude your account from session replay, email support@tazolabs.com from the email address on your account.

We do not use advertising cookies, and we do not use your data for targeted advertising today. If we ever start using advertising cookies, we will update this policy first. You can block cookies in your browser settings, but some features may stop working.

6. How long we keep data

Data	How long
Audio and other Content	While your account exists. Deleted after six months of inactivity (no sign-in and no API requests). Removed from our live systems immediately when you delete your account. You can also ask us to delete it at any time.
Account data	While your account exists, then deleted, except records below.
Payment, invoice and tax records	Kept as long as the law and our accounting require, even after account deletion.
Usage and security logs	For a limited period needed to run and protect the Services, then deleted or de-identified.
Support messages	As long as needed to help you and handle any later dispute.

What deletion covers. Deleting your account or your audio removes it from our live systems immediately. Copies in backups are removed on our normal backup cycle, within 180 days. Models that were trained on your Content before deletion or opt-out may continue to be used, as explained in section 3.

Where the law requires it, we may keep limited data to meet legal obligations, settle disputes, prevent fraud, and enforce our agreements.

7. International transfers

Tazo is based in the United States, and our service providers operate in several countries, so your data may be processed in the United States and in other countries. Where the law requires safeguards for those transfers (for example from the EU, EEA or UK), we use approved ones. These are standard contractual clauses: contract terms approved by the European Commission, together with the UK addendum for the United Kingdom. They are part of our agreements with our service providers. Business customers can email support@tazolabs.com to ask for a data processing addendum that includes them.

8. Security

We encrypt audio stored in our systems, encrypt data in transit, restrict access to personal data to people and systems that need it, use bot protection and sign-in controls, and review our practices. No system is perfectly secure, so we cannot guarantee that your data will never be accessed. If a breach affecting your data occurs, we will notify you and the authorities as the law requires.

9. Your rights and choices

You can email support@tazolabs.com at any time to:

• access the personal data we hold about you and get a copy;
• correct data that is wrong;
• delete your data (including your audio) or close your account;
• opt out of training on your audio (section 3);
• opt out of session replay (section 5);
• object to or restrict some processing, or withdraw consent where we rely on it;
• receive your data in a portable format, where the law gives you that right.

All privacy questions, requests and complaints, from any country, go to this address, and we will direct them to the right specialist. We will verify that the request comes from your account email before acting. We reply within the time the law requires (generally within 30 days) and will not treat you worse for using your rights.

Customers in the EU, EEA and UK have the rights above under the GDPR and UK GDPR, and can complain to their local data protection authority.

Residents of California and other US states with privacy laws can ask to know, access, correct and delete their personal information, and to opt out of the “sale” or “sharing” of personal information. We do not sell or share personal information as those laws define it. We do not discriminate against you for using your rights.

Customers in India have the rights given by the Digital Personal Data Protection Act, 2023, including access, correction, erasure and grievance redressal. Send any complaint to support@tazolabs.com, and we will respond within the time the law requires.

Other people’s audio. If your voice is in audio that a Tazo customer submitted, that customer chose to send it and is responsible for having the right to do so. Contact the customer first. You may also write to us at support@tazolabs.com, and we will help where we can.

10. Children

The Services are for businesses and developers, and for people aged 18 and over. We do not knowingly collect personal data directly from children under 18. If you think a child has given us personal data, email support@tazolabs.com and we will delete it. If you submit audio that contains children’s voices or data, you are responsible for having the permissions the law requires, as explained in the Terms of Service.

11. Changes to this policy

We may update this policy. For material changes, we will give at least 30 days’ notice by email or in the app before they take effect. We will change the effective date and version at the top. Older versions stay available at tazolabs.com/privacy with their version dates.

12. Contact

Questions, requests or complaints about privacy: support@tazolabs.com

Kodimo, Inc.
251 Little Falls Drive
Wilmington, Delaware 19808
United States