What happens to your document and account data
| Action | Data and destination |
|---|---|
| Choose and review a PDF | The original PDF is parsed in your browser. Choosing it does not upload the PDF to this service. You can inspect and edit extracted text before any generation request. Draft text, chapter titles and speech choices are saved in the current browser tab so you can return to editing. |
| Create an account or sign in | The service stores your account name, email and session records to authenticate you. If you set a password, the service stores a hash of that password. Session records can include your IP address, browser information and timestamps. |
| Sign in with Google | If you choose this option, Google shares your account ID, email address, name and profile image when available. We use those details to create your account or sign you in. Cloudflare D1 stores the account link and any authorization tokens Google returns while we keep the linked account. We do not receive your Google password or request access to Gmail or Drive. |
| Buy credits or subscribe | We send your account identifier, email address, selected plan and order reference to Waffo Pancake for checkout. Waffo collects your payment and billing details on its checkout page. We do not receive your full card number or security code. We keep order, payment and subscription records to provide credits, manage renewals and handle refunds. Your PDF and narration text are not sent to Waffo for payment. |
| Confirm an audio job | Check the workspace for current generation availability. A submitted request sends chapter text and titles, voice and speed choices to the service. Saved jobs associate that text, character counts, progress and errors with your account. |
| Generate and download audio | When generation is enabled, confirmed text and speech settings are sent through YIR to the selected speech service. The service stores returned audio for private chapter downloads. This is not an entirely on-device conversion process. Check the workspace for current availability. |
| Create a support ticket | The service stores the title, messages, any supplied attachment references, status and timestamps with your account. You and authorized support staff can access the conversation. Privacy tickets accept text only and are not forwarded to external notification channels. Saving a ticket does not send an email. |
| Email a privacy request, report or appeal | Our email providers route the message to the site operator. We use your reply address, message, relevant evidence and decision record to handle the case. Do not email a full document or private audio link. We keep this information as needed to review the case and comply with applicable law. |
The production service runs on Cloudflare. Cloudflare D1 stores account, credit and task records; private Cloudflare R2 stores the audio. YIR and the selected speech provider process the submitted text to create narration.
Cookies and browser storage
Sign-in uses session cookies. The interface can also store language and appearance preferences in your browser. The workspace uses tab-specific browser storage for its document draft. Use its Clear document action to remove that draft. Clearing browser data may sign you out or remove local text and preferences; it does not delete account records or saved jobs held by the service.
When you arrive with campaign parameters or from another website, first-visit attribution cookies can retain the cleaned source, campaign and referring origin for up to 30 days. These values may be associated with an account at registration. They are separate from the Google Analytics choices described below.
When registration trials are enabled, a signed browser cookie helps prevent repeated claims. It can remain for up to 400 days and does not record analytics consent. Separately, the service stores salted hashes of the browser identifier and trusted connection address to limit duplicate trial allowances. Expiring credits or deleting an account does not create a new trial entitlement.
On the official site, Google Analytics measures public page visits and where visitors come from. We send public page names, allowed campaign parameters and referring sites or public pages. We exclude account pages and private audio results. We do not send uploaded files, extracted text or account details to Analytics, or use Analytics for advertising or personalization.
For visits from Colorado, Texas, and Virginia in the United States, analytics cookies are on by default unless you turn them off. Elsewhere, or if we cannot determine your region, they are off until you allow them. Google can still receive measurement signals without analytics cookies. When enabled, Google Analytics uses cookies such as _ga and _ga_* to recognize browsers and sessions for up to 180 days. Global Privacy Control and Do Not Track block Google Analytics.
This site remembers your choice in a separate cookie for up to 180 days. You can change or withdraw it below. Rejecting after allowing stops Analytics from using its cookies on this site; it does not remove data that was previously collected.
Analytics cookies are off.
How long we keep different records
| Record | Retention and removal |
|---|---|
| Saved job text and audio | Access ends 30 days after job creation, or earlier when a deletion is accepted. Background cleanup removes stored content and retries if storage is unavailable. Download anything you want to keep before access ends. |
| Account and sign-in records | We keep profile and sign-in records while the account is active. To remove them, submit a verified account-data deletion request. We may retain limited billing records for unresolved refunds or required recordkeeping, and limited records for an open dispute or security investigation. We keep the signup trial claim record to prevent repeat grants after an account is deleted. |
| Support conversations | Closed conversations remain available until we remove them after review. Closing a ticket does not start an automatic deletion period. Use the privacy request process below to ask for removal. Privacy requests, billing or dispute records, and attachments are reviewed separately before removal. |
| Service logs and audit records | We do not currently configure routine Workers log storage or export for this site. When enabled, Cloudflare Workers Logs are kept for up to seven days on our current hosting plan. This does not set a deadline for account activity or administrative audit records. We review those separately on a deletion request and may keep records needed for an ongoing billing, security or legal matter. |
| Recovery copies | Cloudflare D1 Time Travel can retain older versions of our active database for up to 30 days. Deleting an active record does not erase earlier recovery copies. Before a restored database serves users again, it must be checked against verified deletions. Separate exports are outside this recovery window. |
The original PDF stays on your device. YIR's privacy policy says its generated files are deleted seven days after job creation. For jobs created on or after October 13, 2026, YIR keeps submitted text while the submitting YIR account exists and provides a contact route to request prompt deletion. YIR says it does not use submitted text or results to train models. The selected speech provider handles text under its own terms. Deleting a job or your account on this site does not automatically remove those providers' copies.
Delete a job or request account-data deletion
Open a saved job from your audio library and choose Delete job when available. Once accepted, deletion removes its text from the active database and revokes downloads. Stored audio may still be awaiting background removal. Contact support if the delete action is unavailable while a job is being processed or investigated. Limited job and credit history can remain for status and allowance adjustments.
Job deletion does not remove your account, support conversations or provider-held copies. It also does not clear your browser draft, original PDF or downloaded files. Clear or delete those copies on your own device.
For access, correction or deletion of account data, open a privacy request and follow the conversation there. If you cannot sign in, use the email route for privacy requests. We verify identity before disclosing, changing or deleting account data. Saving a request does not perform the deletion. If records need to remain, we explain what we retain, why, and the applicable deadline or when we will review them again.
If you use Google to sign in, you can revoke access in your Google Account connections. To remove account data held by this site, use the deletion request above.