Last updated: April 19, 2026
Speeko ('we', 'us', or 'our') operates the Speeko API platform. This policy explains how we collect, use, and protect your personal data.
We collect information you provide directly (name, email, payment details) and data generated through API usage (request logs, usage statistics, IP addresses). We do not store text content submitted for TTS/video generation beyond the time needed to process your request.
We process your data under the following legal bases: (1) Contract performance (delivering our service), (2) Legal obligations (tax, security), (3) Legitimate interests (service improvement, abuse detection), (4) Your consent (marketing communications). Processing is conducted in accordance with GDPR Article 6.
We use your data to provide and improve Speeko, process payments, send transactional emails, detect abuse, and comply with legal obligations. We do not sell your personal data to third parties. Marketing communications require your explicit consent.
Account data is retained for the lifetime of your account. Usage logs are retained for 90 days. Processed audio/video files are automatically deleted after 48 hours. After account deletion, personal data is deleted within 30 days (except where legally required).
We use Stripe for payments, Resend for email delivery, and cloud providers for hosting. These providers act as data processors and have signed Data Processing Agreements (DPAs) in compliance with GDPR. Each has their own privacy policies.
Your data may be processed outside the EU/EEA. Such transfers are protected by Standard Contractual Clauses (SCCs) or Adequacy Decisions. Transfers comply with GDPR Chapter 5.
We use TLS encryption, hashed API keys, rate limiting, and access controls. No system is 100% secure and we cannot guarantee absolute security. In case of data breach, we notify relevant authorities within 72 hours.
Under GDPR, you have the following rights: (1) Right of access - view your data, (2) Right to rectification - correct inaccurate data, (3) Right to erasure - 'right to be forgotten', (4) Right to restrict processing - limit how we use your data, (5) Right to data portability - transfer your data to another provider. Contact [email protected] to exercise these rights.
For data protection inquiries, contact [email protected]. You have the right to lodge a complaint with your supervisory authority (DPA).
For privacy-related questions, email [email protected]. Response time is 30 days.