Privacy Policy

1. Introduction

Welcome to G4.Business, operated by Sotor Easy Life Technologies LLP. We respect your privacy and are committed to protecting your personal data. This Privacy Policy outlines how we collect, use, and safeguard your information when you visit our website multilang.g4.business.

2. Information We Collect

We collect several types of information from and about users of our Site, including:

• Account Data: Email address, name, and account preferences provided during registration or account management.
• Billing Information: Payment method details (processed by Razorpay or Stripe; we do not store full card numbers), transaction history, and credit purchase records.
• Media Data: Audio and video files you upload for processing. This includes the original media, generated transcriptions, AI translations, dubbed audio tracks, cloned voice models, and subtitle files.
• Voice Data: Audio samples submitted for voice cloning are processed to create a voice model. Where applicable, voice data may constitute biometric data under the laws of your jurisdiction. See Section 6 for details.
• Technical Data: IP addresses, device type, browser type, operating system, referrer URLs, pages visited, session duration, and usage patterns collected via cookies and analytics tools.
• BYOK Data: Third-party API keys (e.g., OpenAI, Google, Azure) provided by you for BYOK functionality. These are encrypted with AES-256 encryption and are used solely for processing your requests.
• Communications: Messages you send to our support team, feedback you provide, and any correspondence through our contact form.

3. How We Use Your Information

We use the information we collect for the following purposes:

• Service Delivery: Processing your uploaded media through AI transcription, translation, dubbing, voice synthesis, and subtitle generation pipelines.
• Account Management: Creating and maintaining your account, managing subscriptions and credit balances, and authenticating your identity.
• Payment Processing: Facilitating purchases through Razorpay, Stripe, or other payment gateway providers.
• Platform Improvement: Analyzing aggregated, anonymized usage data to improve service quality, fix bugs, and develop new features. We do not use your personal media files or voice data to train our general AI models without your explicit opt-in consent.
• Security: Detecting, investigating, and preventing fraudulent activity, abuse, and security incidents.
• Legal Compliance: Meeting our obligations under applicable laws, responding to legal requests, and enforcing our Terms of Service.
• Communications: Sending transactional emails (receipts, account notifications, processing status), service announcements, and (with your consent) marketing communications.

4. Third-Party Data Processing

To provide our AI services, we share necessary data (audio, video, and text) with the following third-party providers. By using the Platform, you acknowledge and consent to such sharing:

Each of these providers processes data subject to their own privacy policies, data processing agreements, and security practices. We encourage you to review the privacy policies of these providers. The Company is not responsible for data practices of third-party providers beyond what is governed by our agreements with them.

International Data Transfers: Many of our third-party AI and infrastructure providers are based in the United States, European Union, or other countries outside India. By using the Platform, you consent to the transfer of your data to these countries, which may have different data protection standards than India. Where required, such transfers are governed by appropriate safeguards including Standard Contractual Clauses (SCCs) or equivalent mechanisms.

5. Voice Data & Biometric Data Processing

Voice cloning features on the Platform involve the processing of voice samples, which may be classified as biometric data under certain laws (including the Illinois Biometric Information Privacy Act (BIPA), EU GDPR, and the Digital Personal Data Protection Act, 2023, India).

• Voice Model Storage: Voice models created from your samples are stored securely and linked to your account. You may delete your voice models at any time from your account settings.
• Purpose Limitation: Voice samples and voice models are used exclusively to provide the voice cloning service for your own projects. They are not shared with other users and are not used to train general-purpose AI models.
• Third-Party Sharing: Voice data may be shared with ElevenLabs (or equivalent voice AI providers) strictly for the purpose of generating voice clones. Such sharing is governed by ElevenLabs' privacy policy and data processing terms.
• Consent Requirement: If you upload another person's voice for cloning, you are responsible for obtaining and documenting their explicit consent. See our Terms of Service, Section 18, for full requirements.
• Retention: Voice models are retained for as long as your account is active. Upon account deletion, voice models are deleted within 30 days, subject to any legal holds.

6. Disclosure to Law Enforcement

7. Data Retention

We retain your data for different periods depending on the type and purpose:

• Account Data: Retained for the duration of your account. Upon account deletion, account data is purged within 60 days, subject to legal retention requirements.
• Uploaded Media Files: Videos and audio files uploaded for processing are retained for a reasonable period to enable re-processing, playback, and download. Files may be purged after a period of inactivity as communicated in your account settings.
• Processed Outputs: Dubbed videos, subtitle files, and audio exports are retained as specified in your plan. Free or PAYG users may have shorter retention windows than subscription users.
• Voice Models: Retained while your account is active. Deleted within 30 days of account deletion.
• Payment Records: Retained for a minimum of 7 years as required by Indian financial regulations.
• Logs & Analytics: Technical logs and anonymized usage analytics may be retained for up to 24 months for security and improvement purposes.

8. Data Security & BYOK Safeguards

We implement industry-standard security measures to protect your data:

• Encryption: Data is encrypted in transit (TLS 1.2+) and at rest. BYOK API keys are encrypted with AES-256-CBC encryption.
• Access Controls: Access to user data is restricted to authorized personnel on a need-to-know basis.
• Security Monitoring: We monitor for unauthorized access, anomalies, and potential security incidents.

Users utilizing BYOK features are responsible for setting appropriate spending and usage limits on their third-party provider dashboards. We do not store BYOK keys longer than necessary for active processing sessions. Rotate your API keys regularly and immediately if you suspect compromise.

No method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security and will notify you of any data breach affecting your personal data as required by applicable law.

9. Cookies & Tracking Technologies

We use cookies and similar technologies to enhance your experience on the Platform:

• Essential Cookies: Required for the Platform to function (session management, authentication, security). Cannot be disabled.
• Analytics Cookies: Used to understand how users interact with the Platform (e.g., Google Analytics or equivalent). Help us improve features and identify bugs.
• Preference Cookies: Remember your settings and preferences (e.g., language, billing cycle preference).

You may disable non-essential cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the Platform.

10. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Correction: Request correction of inaccurate or incomplete personal data.
• Right to Deletion: Request deletion of your personal data, subject to legal retention obligations. To delete your account and associated data, contact us through the Platform's support system.
• Right to Data Portability: Request your data in a structured, machine-readable format where technically feasible.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing emails), withdraw consent at any time without affecting the lawfulness of prior processing.
• Right to Opt-Out of Marketing: Unsubscribe from marketing communications at any time via the unsubscribe link in emails or through your account settings.

To exercise any of these rights, please contact us using the contact form on the Platform. We will respond within a reasonable timeframe as required by applicable law.

11. Children's Privacy

The Platform is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that a user under 18 has registered or provided personal data, we will take steps to delete such data promptly. If you believe a minor has used the Platform, please contact us immediately.

12. Marketing Communications

With your consent at registration or through your account settings, we may send you marketing emails about new features, promotions, and platform updates. You may unsubscribe at any time by clicking the "Unsubscribe" link in any marketing email or by updating your preferences in your account settings. Transactional emails (receipts, processing notifications, account alerts) cannot be unsubscribed and will continue as long as your account is active.

13. Rights & Jurisdiction

This policy is governed by the Laws of India, specifically the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023, and rules made thereunder. Any disputes relating to privacy shall be subject to the exclusive jurisdiction of the courts in Nagpur, Maharashtra, India.

For users in the European Economic Area (EEA) or United Kingdom: We act as a data controller for your personal data. Our legal basis for processing is typically (a) contract performance (to provide services you requested), (b) legitimate interests (platform security, fraud prevention, service improvement), or (c) consent (marketing communications). You may lodge complaints with your local supervisory authority if you believe we have violated applicable data protection law.