Privacy Policy

Last updated: 15 August 2026

Credufy Technologies Limited ("Credufy Voice", "we", "us") provides voice AI infrastructure to businesses and individuals in Nigeria and beyond. This policy explains what personal data we collect, why we collect it, where it is stored, and the rights you have over it under the Nigeria Data Protection Act 2023 (NDPA).

What we collect

  • Account data — name, email address, and business details you provide when you register.
  • Usage data — call minutes, session logs, and API request metadata.
  • Payment data — handled by Paystack (Naira) and Paddle (US dollars); we do not see or store your card details.
  • Voice data — audio you upload for voice cloning, and consent recordings captured during the cloning flow (see "Voice recordings and consent" below).

Why we collect it

  • To operate your account, agents, and billing.
  • To generate synthetic voice output you request through Voice Studio or the API.
  • To monitor abuse of the platform, including unauthorised voice cloning.
  • To meet our own legal and tax obligations.

Where your data is stored

We use the following infrastructure providers to store and process your data:

  • MongoDB Atlas — account records, agent configuration, and usage logs.
  • Cloudflare R2 — uploaded audio, cloned voice samples, and Voice Studio output files.
  • Fly.io (Johannesburg region) — application servers and real-time voice processing.

These providers may replicate data across regions for reliability. We select providers that offer data residency options within or near Africa where practical, and we do not sell your data to third parties.

Voice recordings and consent

When you clone a voice, we require you to record or upload an explicit consent statement before the clone is created. That consent recording is stored alongside the resulting voice model as an audit record — proof that consent was given for that specific clone. We retain consent recordings for as long as the associated cloned voice exists in your account, and for a reasonable period afterward to respond to disputes.

You are responsible for ensuring you have the legal right to clone any voice you submit — your own, or someone else's with their explicit consent. See our Acceptable Use Policy for what is prohibited.

Retention

We retain account and usage data for as long as your account is active, and for a limited period after closure to meet accounting and legal obligations. You may request deletion at any time, subject to the exceptions below.

Payments and international customers

US dollar payments are processed by Paddle.com Market Ltdas merchant of record. Paddle collects the billing details needed to take payment and meet its own tax obligations, and is an independent data controller for that information under its own privacy notice. We receive only the transaction result and the subscription details needed to grant your plan. Naira payments are processed by Paystack on the same basis.

If you are in the United Kingdom or the European Economic Area, you may also have rights under the UK GDPR or EU GDPR — including access, correction, erasure, portability and objection. Use the contact address below and we will handle your request on the same terms as the rights set out here.

Your rights under the NDPA

As a data subject under the Nigeria Data Protection Act 2023, you have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate or incomplete data.
  • Request deletion of your data, including uploaded voice samples and consent recordings, subject to legal retention requirements.
  • Object to or restrict certain processing of your data.
  • Request a copy of your data in a portable format.
  • Lodge a complaint with the Nigeria Data Protection Commission (NDPC).

To exercise any of these rights, email hello@credufy.com with your request. We aim to respond within the timeframes required by the NDPA.

Deletion requests

Closing your account removes your agents, Voice Studio history, and cloned voices from active use. Underlying backups are purged on our standard rotation schedule. If you need immediate deletion for a specific recording — for example, a consent recording tied to a misuse report — contact us directly and we will action it manually.

Changes to this policy

We may update this policy as our infrastructure or legal obligations change. Material changes will be communicated by email or an in-app notice before they take effect.

Contact

Credufy Technologies Limited, a company registered in the Federal Republic of Nigeria, registered office at No. 1 Young Toby Ekechi Street, Kaura District, Abuja, Nigeria. Email hello@credufy.com or call +234 906 988 7022 for any privacy question.