Privacy

1. Who controls your data

The controller responsible for personal data processed to operate Molpia is the operator identified below. ElevenLabs and Paddle may also act as independent controllers for limited processing they determine themselves, as explained in their own notices.

Controller: Molpia
Country: Republic of Serbia
Privacy contact: support@molpia.com

2. Data we process, purposes and legal bases

Data	Why we use it	Legal basis
Email, optional display name and account identifiers	Create and administer your account, provide support and send service messages	Performance of our contract; legitimate interests in support and administration
Password hash, session token hash and password-reset records	Authenticate you and protect the account	Performance of our contract; legitimate interests in security
Submitted text, selected voice, language, model and settings	Generate speech, maintain your history and calculate quota usage	Performance of our contract
Generated audio, file size, duration, status and timestamps	Deliver playback and downloads, operate retention and troubleshoot failures	Performance of our contract; legitimate interests in reliability
IP address, user agent, request ID, route, response status, errors and security events	Prevent abuse, investigate incidents, diagnose faults and keep audit records	Legitimate interests in security, fraud prevention and service integrity; legal obligations where applicable
Administrator actions on your account, the reason given for them, and the administrator's IP address and request ID	Keep access to your account and content accountable and investigable	Legitimate interests in security, accountability and service integrity; legal obligations where applicable
Terms/privacy version, acceptance time, IP address and user agent	Record your agreement and demonstrate compliance	Performance of our contract; legitimate interests in legal compliance and claims
Plan, quota and transaction/subscription references received from Paddle	Activate paid access, reconcile purchases, handle support, refunds and disputes	Performance of our contract; legal obligations; legitimate interests in payment administration and fraud prevention

Where processing is required to provide the service, failing to provide the data may mean we cannot create an account, generate audio or complete a purchase. We rely on consent only when we specifically ask for it; withdrawing consent does not affect processing already carried out lawfully.

3. What is sent to ElevenLabs

To synthesize speech, we send ElevenLabs the submitted text, voice identifier, language, model and technical synthesis settings. We do not intentionally include your Molpia email, display name or password in that API request. ElevenLabs returns generated audio and technical response data.

ElevenLabs' standard service terms permit it to retain and use content to provide, secure and improve its services, including model development, unless the account owner uses an available data-use opt-out. Zero Retention Mode is a separate Enterprise feature and should not be assumed to apply. Review the ElevenLabs Privacy Policy, DPA and retention documentation.

Do not submit health information, government identifiers, passwords, confidential information or another person's personal data unless you have a lawful basis and the necessary authority to send it to us and ElevenLabs.

4. Paddle checkout and payments

When checkout is enabled, we give Paddle your account identifier and email address to connect a purchase to your account. Paddle collects billing contact details, country, tax information and payment data directly in its checkout. We do not receive or store your full card number or card security code.

Paddle acts as merchant of record and independently determines how it processes buyer data for payment, tax, invoicing, fraud prevention, refunds and legal compliance. See Paddle's Privacy Notice.

5. Other recipients

We disclose data only as reasonably necessary to:

hosting, storage, infrastructure and email-delivery providers that operate the service;
professional advisers, insurers and auditors under confidentiality duties;
courts, regulators, law enforcement or other authorities where required by law or necessary to protect rights, safety and service integrity;
a buyer or successor in a merger, financing, reorganisation or sale, subject to appropriate confidentiality and notice requirements.

We do not sell personal data and do not share it for behavioural advertising.

6. Cookies and browser storage

Molpia uses an essential session cookie to keep you signed in. It is HttpOnly, SameSite=Lax, lasts for at most 7 days and is cleared when you sign out. It is necessary to provide an authenticated account and does not require advertising consent.

Paddle may set or access its own cookies and similar storage when its checkout opens. Paddle is responsible for the notices and choices that apply to its checkout. We do not currently use analytics, advertising pixels or cross-site profiling tools in the Molpia interface.

7. Retention

Generated audio: Free: up to 7 days, Pro: up to 90 days, Studio: up to 365 days. The current plan controls the applicable maximum period.
Text and generation history: until you delete the recording or close the account, unless limited retention is required for a dispute, security incident or law.
Sessions: until sign-out, revocation or expiry, no later than 7 days after issue.
Password-reset records: until used or expired, then removed by maintenance.
Application logs: kept while the newest entries fit the space reserved for them, then overwritten oldest first, so busier periods shorten the window. System and hosting logs may follow the infrastructure provider's schedule.
Administrator audit record: kept for the life of the service. Every administrative action on an account, including the reason given for opening a recording, is written to a separate append-only record that is never rotated or trimmed, so that access to your data stays accountable.
Account and acceptance records: for the life of the account; limited audit or transaction evidence may remain afterwards for tax, accounting, fraud prevention, legal claims or other mandatory retention periods.

Audio can disappear earlier if you delete it, close the account, move to a plan with a shorter period, or if deletion is reasonably necessary for security, legal compliance or storage integrity. Molpia is not a backup service; download anything important.

8. International transfers

ElevenLabs, Paddle and infrastructure providers may process data outside your country, including in the United States and other jurisdictions whose privacy laws may differ. Where required, transfers are supported by an adequacy decision, standard contractual clauses, an applicable data-privacy framework or another lawful safeguard. You may ask us for information about the safeguard relevant to your data.

9. Security

We use measures designed to protect data, including scrypt password hashing with random salts, hashed session and reset tokens, access controls, CSRF protections, HTTPS in production, rate limits, structured security logging and restricted administration. No internet service can guarantee absolute security. Notify us immediately if you suspect unauthorised account access.

A small number of administrators can reach account data through an internal administration area. Submitted text and generated audio are not shown there by default: opening a recording requires an administrator to state a reason first, that access expires shortly afterwards, and both the reason and the access are written to a permanent audit record. Administrator access is used only for support, security, abuse investigation and legal obligations - never to train models and never to browse content out of interest.

10. Your rights

Depending on applicable law, you may request access, correction, deletion, restriction, portability or a copy of your data; object to processing based on legitimate interests; and withdraw consent where consent is the basis. You may also close the account or delete individual recordings in the app.

Send requests to support@molpia.com. We may verify your identity and may refuse or limit a request only where the law permits. You also have the right to complain to the Commissioner for Information of Public Importance and Personal Data Protection in Serbia, or to the competent authority where you live or work.

11. Children and automated decisions

The service is not directed to children and accounts may be created only by people who are at least 18 and legally able to contract. We do not use personal data to make solely automated decisions that produce legal or similarly significant effects. Automated security controls may rate-limit or temporarily block suspicious requests; contact us if you believe a control acted incorrectly.

12. Account deletion and legal limits

An account cannot be closed while a paid subscription is still active or paused; cancel the subscription first, after which deletion proceeds normally. Closing your account deletes the active account, sessions, generation records and locally stored audio. Deletion cannot recall data already lawfully processed by a third party, remove data that a provider must retain under its own legal duties, or override records we must keep for tax, fraud, disputes or legal claims. Contact Paddle separately for buyer-data requests under its privacy notice.

13. Changes and contact

We may update this policy when the service, providers or law changes. Material changes will be communicated in the app or by email before they take effect where required. The date at the top identifies the current version.

Questions or privacy requests: support@molpia.com.