TTSWP is GDPR compliant. This page explains exactly what data we collect, what goes to ElevenLabs, how long we keep it, and what your rights are as a site owner.
What text we send to ElevenLabs
When you click Generate, TTSWP sends your post text to ElevenLabs for audio synthesis. After the audio is created, the text is not kept on ElevenLabs servers - only the audio file is returned.
We do not store the text long-term on app.ttswp.com either. The only record we keep is a character count in your usage log, so we can bill credits correctly.
What audio files we store and where
On paid plans
Generated audio files are stored on Amazon S3 (our account) and served through Amazon CloudFront for fast global delivery. Files stay until you delete them or cancel your account.
On the Free plan
Audio files are stored on your WordPress server inside wp-content/uploads/text-to-speech-tts/. We do not keep a copy.
If you use cloud storage with your own S3
You can offload audio to your own Amazon S3 bucket. In that case, files live on your infrastructure and you control retention.
See Cloud audio storage.
What visitor data we collect
When a visitor plays an audio file on your site:
- If Enable statistics is on, we record a play count and listening duration in your WordPress database (not sent anywhere external)
- No personal information (email, IP address, user agent) is stored
- No cookies are set by the player
When statistics are off, nothing is recorded about listeners.
What account data we collect
When you create a TTSWP account at app.ttswp.com:
- Your email (for login and billing)
- Your name (only if you provide it)
- Your Stripe customer ID (after you buy a paid plan or top-up)
- Your site domain (to verify the connection)
- Your plan tier and credit balance
We do not sell this data, share it with third parties for marketing, or use it for advertising.
Third-party data processors
TTSWP uses these services to run the product. Each one is GDPR-compliant and we have signed Data Processing Agreements where needed.
| Service | What they process | Purpose |
|---|---|---|
| ElevenLabs | Post text (during synthesis only) | Audio generation |
| Amazon AWS (S3) | Audio files | Storage |
| Amazon AWS (CloudFront) | Audio file requests | CDN delivery |
| Stripe | Your name, email, billing address | Payment processing |
| SES (Amazon) | Your email address, email content | Transactional emails |
How long we keep data
- Account data: for as long as your account is active. If you close your account, we keep records for 30 days (in case you change your mind) and then delete everything.
- Audio files: until you delete them or close your account.
- Usage logs: 24 months for billing and support.
- Stripe payment records: kept as long as legally required (7 years in most jurisdictions) for tax and accounting purposes.
Your rights under GDPR
You have the right to:
- Access your personal data - we send you a copy on request
- Correct your data if it is wrong
- Delete your data - closing your account triggers deletion
- Export your data in a portable format
- Restrict or object to processing
- Withdraw consent where processing is based on consent
- Lodge a complaint with a supervisory authority
To exercise any of these rights, email us at privacy [at] mementor.no. We respond within 30 days.
Your visitors' rights
You are the data controller for your visitors. As their controller:
- You decide what audio is generated from their behavior (usually none)
- You decide whether to enable statistics
- You are responsible for mentioning TTSWP in your privacy policy if you enable statistics
Suggested text for your privacy policy:
We use Text to Speech TTSWP to provide audio versions of our articles. When you play an audio file, anonymous play count and listening duration are recorded in our website database. No personal information about you is stored or shared with third parties by this plugin.
Where data is stored
- App and database: EU region servers (specifically eu-west-2 / London)
- Audio on S3: us-east-1 region (North Virginia), served via global CloudFront edges
- Email via SES: eu-west-2
We do not transfer personal data outside the EU except as necessary for payment processing with Stripe (who maintain EU presence and GDPR compliance).
Sub-processor changes
If we add or change a sub-processor, we update this page and notify paid customers at least 30 days in advance.
Contact
Privacy questions, data access requests, complaints:
- Email:
privacy [at] mementor.no - Postal address: Mementor AS, Norway (full address on request)