Updated 28 February 2025
This Privacy Policy ("Policy") explains how Eleven Labs Inc. and our affiliates (Eleven Labs Ltd. and Eleven Labs Poland sp. z o.o.) (“Courant”, "we", "our", or "us") process Personal Data (defined below) of individuals who use our services, including our platform, websites (e.g., Courant.io), mobile applications, and other online services (jointly, the "Services"). This Policy also explains your rights and choices about how we use your Personal Data, including how you can access or update certain information about you.
In this Policy, "Personal Data" means any information relating to an identified or identifiable individual, such as an individual's name, address, telephone number, or email address. In certain jurisdictions, this may also be referred to as “Personal Information.”
This Policy applies to instances in which we offer our Services, products, and platforms to individual users. For these relationships, Courant acts as a data controller and is governed by this Policy.
This Policy does not apply when we offer our Services and process Personal Data on behalf of enterprise/business customers. We act as a service provider/data processor for those relationships and our use of that data is governed by our customer agreements.
(a) Personal Data You Provide to Us
(b) Personal Data We Collect Automatically From You and/or Your Device
(c) Personal Data We Collect from Third Parties
In some cases, we need to collect your Personal Data to provide you with our Services. In these cases, if you choose not to provide the requested Personal Data, you may not be able to use our Services. We will tell you if providing Personal Data is required by law or under a contract and what are the consequences of failing to provide it.
(a) Purpose and Legal Basis
The table below describes the purposes for which we process your Personal Data when acting as a data controller and the legal bases for such processing. When we rely on legitimate interest as the legal grounds to process your Personal Data, you have the right to object to that processing using the online form set out in Section 7 (“Your Rights”). Please note that where the legal bases specified are not applicable in your country, we will rely on consent or other available grounds to process your Personal Data.
Purpose | Description | Legal Ground (where required under applicable law) |
---|---|---|
Providing the services | We may process your Personal Data to provide the Services you request from us, as described in the applicable Terms of Service. | The processing is necessary for entering into, or performance of a contract to which you are a party |
Collecting your audio recordings and other Voice Data for use in connection with our Services | We collect the audio recordings of your voice that you choose to share with us, as well as any other Voice Data to provide our Services to you. | The processing is necessary for entering into, or performance of a contract to which you are a party |
Generating your voice model or otherwise interpreting your voice if you use it for Services such as speech synthesis, conversational AI, dubbing, or translation | We may process the audio recordings of your voice that you provide to us, which include your Personal Data, such as your Voice Data as well as any Personal Data you choose to provide, to provide conversational AI services or to create a voice model that will generate synthetic audio sounding like your voice, as further described below in Section 2b (“Personal Data and Courant Voice Modeling Services”). | The processing is necessary for entering into, or performance of a contract to which you are a party. |
Allowing others to generate synthetic audio using your voice model | You may decide to make your voice model available in the Voice Library for other users to use to generate synthetic audio sounding like your voice, and we process your Voice Data, including your voice model, for this purpose. | You have provided your consent. |
Verifying that it is your voice featured in the audio recordings provided by you or another user | If you use our professional voice cloning services, we may process an audio recording that you provide us and Voice Data to verify that the voice featured in other audio recordings you provided is yours. Where another user wishes to use your Voice Data with your consent, we may process an audio recording that you provide to us to verify that it is your voice and that you consent to the use of your voice by the third party. We may process your Personal Data to protect against and prevent malicious, deceptive, fraudulent, illegitimate, or illegal activity, and to prevent the generation of “Deep Fakes.” We may use this data to help us defend ourselves in the event of a claim arising out of any attempted unlawful use of our Services. When we process your Voice Data for identity verification purposes, your Voice Data may constitute biometric data under applicable laws and so we will be processing your Special Category or sensitive Personal Data. | The processing may be necessary for our legitimate interests in interest in the prevention of fraud and data subject security in the processes of identification and authentication of registration in electronic systems. Also, the processing may be necessary for the establishment, exercise, or defense of legal claims. |
Personalizing your experience | With your permission, we may process your Personal Data to personalize your experience when you access our Services, including suggesting content and features that could be of interest to you. | We, or a third party, have a legitimate interest in using your Personal Data for the purpose of personalizing your experience. |
Communicating with you |
We may process your Personal Data to communicate with you, provide you with updates and other information relating to our Services, provide information that you request, respond to your comments and questions, and otherwise, provide customer support. | We have a legitimate interest in using your Personal Data for communicating updates and providing support. In addition, such communications may be necessary in accordance with our contract with you. |
Communicating with you | For potential users, we may process your Personal Data to send Marketing Communications including emails to provide information regarding products or Services that may interest you. | You have provided your consent. |
Billing and accounting |
We may process your Personal Data to handle any payments from you or to you as described in the applicable Terms of Service, including keeping records of payments. | The processing is necessary for entering into, or performance of a contract to which you are a party. |
Preventing fraud |
We may process your Personal Data to protect against and prevent fraud and money laundering, and protect against malicious, deceptive, fraudulent, or illegal activity, including to prosecute those responsible for such activity. | We, or a third party, have a legitimate interest in using your Personal Data to conduct due diligence and take appropriate measures to protect against and prevent fraud. In addition, such processing may be necessary to fulfil obligations under our contract with you. |
Data Storage | We may store your Personal Data, including Voice Data, using third-party cloud services. | We have a legitimate interest to store your Personal Data for providing our Services and maintaining our relationship with you. In addition, such storage may be necessary to fulfil obligations under our contract with you. |
Safety |
We may process your Personal Data to safeguard our platform and services, and to ensure security and safety, which may include administering a responsible disclosure program. | We, or a third party, have a legitimate interest in using your Personal Data to ensure security and safety. In addition, processing your personal data to safeguard our platform and services, and to ensure security and safety, may be necessary to fulfil obligations under our contract with you. |
Providing technical support |
We use Personal Data to provide technical support, including diagnosing and resolving any issues you report. | The processing is necessary for entering into, or performance of a contract to which you are a party. |
Understanding usage |
We may process your Personal Data to understand the usage of our Services, to understand trends and preferences, to improve and repair errors in the Services, and to develop new products, services, features, and functionalities. | We, or a third party, have a legitimate interest in using your Personal Data for the purpose of understanding usage. |
Understanding usage | Our understanding of your usage may include the use of tools that look at mouse movements, clicks, keystrokes, data or text entered, and the pages you visit. | We obtain your consent to the placement of tracking technologies that are used for these purposes. |
Aggregated Data Generation |
We may process your Personal Data to generate deidentified or aggregate data that we may use for any lawful purposes including product and service improvement activities, research, and other similar purposes. We will maintain and use data in an anonymous or deidentified format. Unless required by law, we will not attempt to reidentify the information. | We, or a third party, have a legitimate interest in using your Personal Data to generate anonymized or aggregate data. |
Administrative and legal |
We may use your Personal Data to address any administrative or legal issues pertaining to Courant, including without limitation intellectual property infringement, defamation, rights of privacy issues, to enforce our Terms of Service, or as necessary to establish, exercise or defend our legal rights or to respond to requests or communications from law enforcement agencies, regulatory bodies and public authorities. |
We, or a third party, have a legitimate interest in using your Personal Data to address administrative and legal issues. |
Compliance |
We may process your Personal Data for compliance with legal obligations to which we are subject, for instance, to comply with accounting, tax rules or anti-money laundering rules, or as mandated by a court order, judicial process, or governmental agency. |
We need it to comply with a legal obligation, for instance, to comply with a court order. |
Research and development of AI models |
We may process your Personal Data to research, develop, train and otherwise improve our AI models. This may include processing audio files and text (including metadata) that you provide or that are collected by Courant when using Instant Voice Cloning, Professional Voice Cloning, Conversational AI, and Speech to Text. Our training practices disassociate (or completely remove) data included in the training dataset that could identify you with your audio files. |
We have a legitimate interest in using your Personal Data for the purpose of research and development, specifically to improve our AI models and make them more effective for our users. |
Other purposes |
If we intend to use your Personal Data for other purposes, we will provide specific notice at the time the Personal Data is collected. |
Please consult the relevant specific notice. |
We only rely on our or a third party's legitimate interests to process your Personal Data when we determine that these interests are not overridden by your rights and interests. When we use your information because we or a third party have a legitimate interest to do so, you may have the right to object to that use.
(b) Personal Data and Courant Voice Modeling Services
Courant uses Voice Data to provide its voice services, including voice modeling, speech-to-speech, and dubbing services. For voice modeling, when you provide us with recordings of your voice, we utilize our proprietary, AI-based technologies that analyze your speech characteristics to formulate a distinct voice model of your vocal traits. This voice model can be used to generate audio resembling your voice. Depending on where you reside and how we use your Voice Data (as set out in this Policy), applicable law may define your Voice Data as biometric data. We do not use Voice Data to infer characteristics about an individual.
(c) Personal Data and Courant Training Models
Courant uses Voice Data to help our models and products learn about patterns and connections in speech and audio content and to improve our Services. We do not use Voice Data, Personal Data, or publicly available data used for training to profile or target consumers.
(d) Content Moderation and User Suspension
Courant does not undertake to review all Content and expressly disclaims any duty or obligation to monitor or review content. However, to maintain the integrity and security of your data, and for fraud prevention purposes, Courant reserves the right to moderate all voice and text data input into Courant tools and voice or other outputs. In certain circumstances, Courant may share your inputs or outputs, which may include Personal Data, with third parties to support the content moderation and safety initiatives. Users found to have engaged in activity that violates the Prohibited Use Policy may be subject to termination or suspension under the applicable Terms of Service.
Your Personal Data may be shared with:
Our Services are hosted in the United States, the Netherlands and Singapore. This means we may transfer your Personal Data outside your country, state or province of residence, depending on your location at that time. Regardless of your location, all Personal Data will be transferred to the United States for storage.
The data will be transferred for the time required to fulfill the purpose for which it is processed. It can be shared with our service providers and Courant’ affiliates for the purposes listed in Section 2. In such cases, Courant is the controller of the data, and the service providers are processors or joint controllers, as the case may be.
We may transfer personal data to the following categories of recipients:
Recipient Category | Countries | Purpose of Transfer | Data Types Transferred |
---|---|---|---|
Cloud service providers (e.g., Google Cloud) | United States, Netherlands, Singapore | Storage & security | Name, voice data, account details, user history |
Payment processors (e.g., Stripe) | United States | Payment processing | Name, credit card details, billing address |
Marketing analytics platforms (e.g., Google Analytics) | United States | User analytics | IP address, device info, browsing history |
Customer support (e.g., Slack) | United States | Customer service & technical support | Contact details |
Depending on where you are, we apply appropriate protections when we transfer your Personal Data to such countries. These protections may include:
For more information about how we transfer Personal Data, or to obtain a copy of the contractual safeguards we use for such transfers, you may contact us using the contact details indicated in the “Contact Us” section below.
Please note that the data protection laws in the locations where we transfer or process data may differ from those in your area. While the data is in another jurisdiction, it may be accessed by the courts, law enforcement and national security authorities.
We take measures to delete your Personal Data or keep it in a form that does not permit identifying you when this information is no longer necessary for the purposes for which we process it unless we are required or permitted by law to keep this information for a longer period. When determining the specific retention period, we consider various factors, such as the type of service provided to you, the nature and length of our relationship with you, and mandatory retention periods provided by law and any relevant statute of limitations. Courant will not keep data it generates about your voice longer than 3 years after your last interaction with us, except as required by law.
Cookies, pixel tags, SDKs, or similar technologies (“Cookies”) are technologies used to collect information about users and their activities on a website. We and our third-party partners, such as analytics and advertising partners, may collect information about you using Cookies to collect information about your online activities over time and across different services.
The information collected via Cookies may include information such as unique identifiers, system information, IP address, web browser, device type, and the web pages that you visit just before or just after you use the Services, as well as information about your interactions with the Services, such as the date and time of your visit, and where you have clicked. More information about the data categories and elements collected using Cookies can be found in Section 1b.
Types of Cookies
We may use both session cookies and persistent cookies. A session cookie disappears after you close your browser. A persistent cookie remains after you close your browser and may be used by your browser on subsequent visits to our Services. Cookies we or our third-party partners place may fall under one of the following purposes:
Depending on the country in which you are located, you may be asked to provide your consent for our use of Cookies (except for strictly necessary Cookies). In addition, you have the following choices concerning the use of Cookies.
(a) Data Subject Rights
Depending on where you are located or reside, you may have certain rights regarding the Personal Data we maintain about you and certain choices about what Personal Data we collect from you, how we use it, and how we communicate with you.
You may exercise these rights by using this online form. Please select “Other” and include the right you would like to exercise in the subject (e.g., “Withdraw my Consent”) and note the state, province or country in which you reside in the form. Before fulfilling your request, we may ask you to provide reasonable information to verify your identity. Please note that applicable law may provide for exceptions and limitations to each of these rights.
In addition to the rights listed above, you may also have the right to lodge a complaint with a supervisory authority, including in your country of residence, place of work, or where an incident took place.
(b) United States Residents
Residents of certain U.S. states, including California, Connecticut, Colorado, Utah, Virginia, Oregon, Montana, or Texas, have additional privacy rights disclosures regarding their Personal Information, as described below. In certain U.S. states, you have the following rights in addition to those listed in Section 7a:
Sale of Personal Information, Sharing for Cross-Context Behavioral Advertising, and Targeted Advertising
When we share Personal Information through our targeting cookies or with vendors that provide advertising services to us, that is considered a sale or sharing for cross-context behavioral advertising or targeted advertising under certain U.S. state privacy laws. You can opt out of the sale of your Personal Information, including the sharing of your Personal Information for targeted or cross-contextual behavioral advertising by submitting your request here.
The following types of Personal Information may be processed for purposes of targeted advertising, and may have been “shared” or “sold” in the 12 months prior to the last modified date of the privacy policy:
Each category of Personal Information listed above may be “shared” with or “sold” to the following third parties in connection with our marketing activities:
Due to the fact that our services are intended for users age 18 or over, we do not knowingly “sell” or “share” Personal Information of individuals under the age of 18.
Do Not Track. Our websites and apps are not designed to respond to “do not track” requests from browsers.
Authorized Agents. In those states where it is applicable, your authorized agent may submit a request to exercise any of the above rights on your behalf. Courant may request additional information to verify their authority to act on your behalf before processing any requests.
(c) Residents of India
If you are in India, in addition to the rights in Section 7(a), you also have the following rights regarding your Personal Data:
Our Services may contain links to other websites, products, or services that we do not own or operate. We are not responsible for the privacy practices of these third parties. Please be aware that this Privacy Policy does not apply to your activities on these third-party services or any information you disclose to these third parties. We encourage you to read their privacy policies before providing any information to them.
We implement reasonable security measures to secure and protect your Personal Data. The up-to-date list of measures along with relevant audit certifications can be obtained at: https://compliance.Courant.io/. We note that, as no electronic transmission or storage of information can be entirely secure, we can make no guarantees as to the security or privacy of your information, to the extent permitted by applicable law.
Our Services are not intended for or directed at children under the age of 18 and Courant does not knowingly collect, store, or process Personal Data from children under the age of 18. The Courant mobile application, ElevenReader, (addressed below) is an exception.
If you are under the age of 18, you are not permitted to submit any Personal Data to us for any Service other than ElevenReader. If we become aware that we have inadvertently received Personal Data from a child under the age of 18, we will delete that information from our records.
Additionally, all users are strictly prohibited from uploading, transmitting, emailing, or otherwise making Voice Data from children under the age of 18 available to us or other users or using them for any of our Services. If you believe we may have inadvertently processed such Personal Data, please contact us at [email protected].
ElevenReader is not available for use by children under the age of 16.
Certain Courant’ Service may involve the collection of biometric information. We collect this information for verification purposes. We may disclose this information where necessary to our affiliates, service providers, and /or other collaborators to provide you with and develop our services. We will retain your biometric data until it is no longer needed for the purposes in which it was collected, or after 3 years of the termination of our relationship with you, whichever is sooner.
We may periodically update this Policy. If there are significant changes, we will notify you as required by law.
For any questions regarding this Policy, our processing of your Personal Data, or to exercise your rights, please contact our Data Protection Officer at [email protected] or write us at:
Data Protection Officer
If you are located in the European Economic Area, the UK or Switzerland, the controller for the processing of your Voice Data is