Privacy policy

Last updated: 10 July 2026

1. Accountability and identity

AudioForge AI Studio Inc. ("AudioForge AI," "we," "us," or "our") operates audioforgeai.pro and provides AI voice and audio finishing studio services from our Toronto location on Ossington Avenue. We are accountable for personal information under our control and have designated a privacy contact to respond to enquiries and access requests.

AudioForge AI Studio Inc.
76 Ossington Avenue, Suite 103, Toronto, ON M6J 2Y7, Canada
Privacy contact: [email protected]
General enquiries: [email protected]
Phone: +1 (416) 293-7048
BN 792461305 RC0001

2. Scope of this policy

This policy applies to personal information collected through our website, contact forms, email and telephone correspondence, studio engagements, and production workflows at our AI audio studio. It does not govern third-party websites linked from our pages. Signed client agreements may include additional confidentiality and data-handling terms that supplement this policy for active projects.

We provide voice-AI consultancy and audio production to business clients in Canada and internationally. Personal information is collected only for identified purposes consistent with PIPEDA's fair information principles.

3. Categories of personal information

Depending on how you interact with AudioForge AI, we may collect:

• Identity and contact data: name, email address, telephone number, organization name, job title, and business mailing address.
• Project and brief materials: scripts, creative direction, brand guidelines, pronunciation sheets, and scheduling preferences you voluntarily provide for text-to-speech, dubbing, or sound design work.
• Voice samples and reference audio: recordings supplied for neural voice casting, consent-based voice model development, or pronunciation reference. These may constitute personal information where they identify an individual.
• Voice-consent and likeness records: written consent forms, talent agreements, publicity-rights documentation, and correspondence required for licensed or consented voice cloning and audio branding work.
• Billing and commercial data: invoicing contacts, purchase order references, tax identifiers where applicable, and payment-related details processed through accounting systems.
• Technical and usage data: IP address, browser type, device information, pages visited, referral URLs, and cookie identifiers as described in our Cookie Policy.
• Communications: records of emails, form messages, and call notes needed to respond to enquiries, deliver services, and maintain business records.

4. Purposes of collection and use

We collect personal information for purposes that a reasonable person would consider appropriate, including:

• Responding to enquiries and preparing CAD project quotes and retainer proposals;
• Delivering AI-assisted voiceover, narration, dubbing, localization, sound design, mixing, and mastering services;
• Managing neural voice casting, human-in-the-loop review sessions, revision rounds, and deliverable handoff;
• Documenting usage rights, licensing, and consent for synthetic voice outputs and audio branding deliverables;
• Processing invoices, maintaining books, and meeting tax and regulatory obligations;
• Improving website performance and security through analytics where you have consented;
• Protecting against impersonation requests, fraudulent briefs, and misuse of voice synthesis tools;
• Complying with legal obligations and establishing, exercising, or defending legal claims.

We will identify additional purposes at or before collection when required. We do not use personal information for incompatible purposes without consent unless permitted by law.

5. Legal bases and consent

PIPEDA requires meaningful consent for collection, use, and disclosure of personal information. Consent may be express — such as checking the PIPEDA consent box on our contact form, which is never pre-selected — or implied where appropriate and permitted by law.

You may withdraw consent for optional activities such as marketing communications or non-essential analytics, subject to legal or contractual restrictions. Withdrawal may limit our ability to provide certain services. For voice samples and consent records tied to active licensing obligations, retention may continue as described in Section 9.

For voice talent and custom voice design, we require explicit written consent before using an individual's voice for speech synthesis or consent-based voice cloning. Clients who supply reference audio represent that they have authority to provide it and that use for the agreed generative purpose is permitted.

If you upload images or audio containing personal information about third parties, you represent that you have obtained necessary consents and licences for us to process that material for the contracted audio-AI purpose.

6. Voice samples and production-sensitive data

Voice samples and reference recordings receive heightened handling because they may identify individuals and feed generative-AI pipelines. We store these files on access-controlled systems, limit access to production staff with a need to know, and delete or return materials according to project agreements.

We do not sell voice samples. We do not use client voice data to train public models unless explicitly agreed in writing. Sub-processors involved in speech synthesis infrastructure are selected with contractual privacy, security, and data governance requirements.

If a project is declined — for example, because it requests impersonation without consent — we delete submitted materials that are not subject to legal hold, typically within thirty days of notification.

7. Disclosure to third parties

We may disclose personal information to:

• Service providers and sub-processors who assist with hosting, email delivery, analytics (with consent), accounting, and generative-AI tooling — under contracts requiring comparable protection;
• Professional advisers bound by confidentiality duties;
• Regulators, courts, or law enforcement when required by law or to protect rights and safety;
• Potential successors in a business transaction, with notice where required by law.

We do not disclose personal information for third-party marketing lists. Cross-border processing may occur when sub-processors operate outside Canada; we assess risks and use contractual safeguards appropriate to the sensitivity of the data, including data processing agreements where available.

8. Privacy Officer and internal practices

Our privacy contact coordinates compliance reviews, staff guidance on consent practices, and responses to individual access requests. Production teams receive orientation on handling voice samples, scripts containing personal data, and client confidentiality obligations. Vendor onboarding includes privacy and security review for tools that process client or talent information.

9. Retention schedules

We retain personal information only as long as necessary to fulfil the purposes described or as required by law:

• Contact form submissions: up to twenty-four months unless an engagement proceeds;
• Active project files and deliverables: duration of the engagement plus seven years for business records;
• Voice-consent records: for the licensed usage period plus seven years, or longer if litigation or regulatory requirements apply;
• Cookie consent preferences: six months, as stated in our cookie banner;
• Server and security logs: typically ninety days unless needed for investigations.

When retention ends, we securely delete or anonymize information where feasible.

10. Security safeguards

We implement administrative, technical, and physical safeguards proportionate to the sensitivity of personal information, including access controls, encrypted transport (HTTPS), staff training on responsible AI and consent practices, and vendor review for AI tool providers. No method of transmission or storage is perfectly secure; we encourage clients to avoid sending highly sensitive data through unsecured channels.

Production workstations used for voice direction and audio post-production are access-restricted. We disable unnecessary cloud sync on machines that temporarily hold voice samples. Password policies and multi-factor authentication protect administrative accounts. When a security incident affects personal information, we will notify affected individuals and regulators as required by applicable law.

11. Cross-border data processing

AudioForge AI is based in Ontario, Canada. Some sub-processors — including generative-AI speech synthesis vendors and email delivery services — may process data in the United States or other jurisdictions. Before engaging vendors, we review data processing agreements, security certifications where available, and whether information will be subject to foreign legal access regimes. We limit transfers to what is reasonably required to deliver studio services and configure tools to minimize identifiable data where feasible.

Clients with contractual restrictions on cross-border processing should raise them during onboarding so we can discuss architecture options and supplemental safeguards.

12. Individual access, correction, and portability

Under PIPEDA, you may request access to personal information we hold about you and ask for corrections if it is inaccurate or incomplete. Submit requests to [email protected] with enough detail to verify your identity. We will respond within thirty days unless an extension is permitted, and we may charge a reasonable fee for manifestly unfounded or excessive requests as allowed by law.

We may refuse access in limited circumstances — for example, where disclosure would reveal confidential commercial information of another party, threaten security, or is prohibited by law. We will explain the reason when refusal applies. Where feasible and appropriate, we will provide copies of project-related personal data in common formats upon verified request.

13. Complaints and regulatory contact

If you have concerns about our privacy practices, contact our privacy contact first. We will investigate and attempt to resolve complaints fairly.

If you remain unsatisfied, you may contact the Office of the Privacy Commissioner of Canada:

Office of the Privacy Commissioner of Canada
30 Victoria Street, Gatineau, QC K1A 1H3
Toll-free: 1-800-282-1376
Website: www.priv.gc.ca

14. Cookies and similar technologies

Our website uses cookies as described in the Cookie Policy. Optional analytics and marketing cookies are set only after you accept them through our banner or customise preferences. You may change consent at any time by clearing cookies and revisiting the site, or by contacting us.

15. Minors

Our services are directed to business clients and adults. We do not knowingly collect personal information from children under thirteen without appropriate parental or guardian consent in the context of a contracted production such as youth educational content.

16. Changes to this policy

We may update this policy to reflect legal, technical, or operational changes. Material updates will be posted on this page with a revised "Last updated" date. Continued use of the website after changes constitutes notice; for active engagements, we will provide additional notice when appropriate.

17. Change log

• 10 July 2026: Initial publication aligned with PIPEDA and AudioForge AI foundry studio operations.