ClonyVoicePrivacy Policy
This policy explains how NOVA2G, operating as ClonyVoice, handles personal data for the prospect list, website, one-time purchase, lifetime licence, downloads and support.
Last updated: July 29, 20261. Controller and contact
NOVA2G
101 Rue au Bois Marcel, 50000 Saint-Lô, France
RCS: 999 096 829 R.C.S. Coutances
Email: [email protected]
2. Product and processing scope
ClonyVoice is sold as a one-time lifetime software licence. We do not operate a subscription, credit wallet or metered AI service for the current product.
Voice samples, generated media and projects stay on your computer by default unless you choose an online feature or send files to support. AI-assisted video work uses the official Codex client authenticated to your own eligible ChatGPT/Codex access. ClonyVoice does not request, read or store your OpenAI API key or Codex credentials.
3. Data, purposes and legal bases
| Data | Purpose | Legal basis |
|---|---|---|
| Prospect email address and consent time | Send the ClonyVoice product news and commercial offers requested on the homepage | Consent |
| Encrypted name and email, login and security events | Account access, recovery and security | Contract and legitimate interests |
| Opaque installation identifier, hashed device fingerprint and licence state | Activate, recover and protect the lifetime licence | Contract and legitimate interests |
| Order status, amount, currency, product entitlement and Stripe references | Complete the one-time purchase, deliver the licence, prevent duplicate charges, handle refunds and meet accounting duties | Contract and legal obligations |
| Messages and files deliberately sent to support | Answer and resolve the request | Contract or consent, depending on the request |
| Consent choice and audience measurements | Remember cookie choices and improve the public site | Consent for analytics; legitimate interests for essential security |
4. Codex and third parties
When you explicitly start a Codex-assisted task, the instructions and project material selected for that task may be processed by OpenAI through the Codex session that you control. That access is separate from the ClonyVoice purchase and is governed by the terms and privacy settings attached to your OpenAI account. ClonyVoice does not resell model tokens and does not silently switch to another AI provider.
We also use Stripe for payment and fraud prevention, Cloudflare for hosting, CDN and security, and Google Analytics only after analytics consent. Their own policies apply to data they process.
5. Retention and security
Prospect email addresses are never sold or rented. They are kept until consent is withdrawn or the address is no longer needed for product news and offers, whichever happens first. After withdrawal, the decryptable address is erased immediately. We retain only a pseudonymous cryptographic suppression fingerprint and the minimal consent/withdrawal audit receipt, based on our legitimate interest in honouring the opt-out and demonstrating compliance, only for as long as those purposes require; they are then deleted or irreversibly anonymised. Account and active licence data are retained while needed to perform the contract. Purchase and accounting evidence is retained for the periods required by law. Expired security tokens are deleted or anonymised on a rolling basis; support records are kept only as long as needed for the request and legal claims.
We use encryption for account and prospect email fields, blind indexes for email lookup and deduplication, transport encryption, access controls, signed entitlement responses and audit logs. No system can offer absolute security.
6. Your rights
Subject to applicable law, you may request access, rectification, erasure, restriction, portability or objection, and may withdraw consent to receive product news and offers by email or to analytics at any time. To withdraw simply email [email protected] or use the contact page. You may lodge a complaint with the CNIL or your local supervisory authority.
7. Updates
We may update this policy when the product or legal requirements change. The current public version applies from its publication date.
Last updated: September 4, 2026.