The short version
- Voice modeling, training, cleanup, stem splitting, mastering, and conversion run locally on your computer. Your audio is not uploaded for processing.
- We collect a minimal set of account and product data, email, build version, anonymized error reports, described in detail below.
- We do not sell user data and we do not train Xport models on user audio unless you explicitly opt in.
- You can request export or deletion of your account data at any time by emailing privacy@xportstudio.com.
1. Who we are
Xport Studio is operated by Xport Audio (the "Company"). For contact and legal notices: privacy@xportstudio.com.
2. Data we collect
Account data
Email address (for beta access, billing, and product updates), name (optional), and password hash (if account is created).
Product data
App version, operating system, device type, anonymous install identifier. Used to ensure the app works correctly across platforms and to power auto-update.
Audio data
Audio files stay on your local machine in your ~/XportStudio directory (and the equivalent on Windows). We do not upload your audio for processing, training, or storage. The only exception is if you explicitly choose to use a future cloud-backed feature, which will be opt-in with clear messaging.
Crash reports
If enabled, anonymized crash diagnostics are sent through Sentry. These do not include audio. You can disable crash reporting in Settings → Privacy.
Analytics
Aggregate, non-personal product usage (which tools are opened, install success rate). Used to prioritize fixes and features. You can opt out in Settings → Privacy.
Marketing
Email submissions to the waitlist, feedback form, or affiliate form are processed by ConvertKit (Kit), our email provider, under their privacy policy.
3. Training data
We do not train Xport Studio models on user audio unless you explicitly grant permission through a separate, clearly labeled consent flow. Voice models you train inside the app are yours, they live in your local Library and are not transmitted to us.
4. Payments
When subscriptions or paid plans launch, payments will be processed by Stripe. Card data is collected and stored by Stripe under their privacy policy, Xport Studio receives only a billing token and minimal transaction metadata.
5. Third-party services
- Stripe, payment processing (future).
- ConvertKit / Kit, email marketing and waitlist.
- Sentry, crash diagnostics (opt-out available).
- GitHub Releases, application download distribution and auto-update.
- Cloudflare, site hosting and DNS.
6. Your rights
You may request export or deletion of your personal data at any time by emailing privacy@xportstudio.com. We respond within 30 days. If you are in the EU, UK, or California, you have additional rights under GDPR / UK GDPR / CCPA, those rights are honored worldwide.
7. Security
Account credentials are stored hashed. Production servers (when used) are hosted in industry-standard secured environments. We don't pretend to be SOC-2 compliant, we're a beta-stage company, but we apply standard hardening and we'll publish a formal security page when we reach commercial release.
8. Children
Xport Studio is not directed at children under 13. We don't knowingly collect personal information from anyone under 13.
9. Changes
If we change this policy materially, registered users will receive an email notice at least 14 days before the change takes effect. The latest version is always at xportstudio.com/privacy.
Draft notice. This document is a good-faith working draft published during beta. It will be reviewed and finalized by legal counsel before commercial release. If anything is unclear, email privacy@xportstudio.com.