ElevenLabs Privacy Policy

This document is ElevenLabs' privacy policy governing the collection, use, storage, and sharing of personal data across its AI voice generation platform, with legal bases including consent, contractual necessity, and legitimate interests as applicable under GDPR and equivalent frameworks. The policy states that ElevenLabs collects identifiers, contact information, payment data, usage data, device and browser information, voice recordings and voice models, and user-generated content, and the terms authorize sharing this data with service providers, analytics partners, advertising partners, payment processors, and business partners. The policy includes provisions authorizing the use of user-submitted voice data to train and improve ElevenLabs AI models, subject to consent where required; the scope of this authorization and its interaction with biometric data regulations (such as Illinois BIPA and similar state-level laws) warrants legal review, as the document asserts broad rights over voice data that may be constrained by applicable law. The policy engages GDPR for EU/EEA users, CCPA/CPRA for California residents, and potentially Illinois BIPA, Texas CUBI, and Washington MY Health MY Data Act given the biometric and voice data dimensions; material compliance considerations include whether consent mechanisms for voice model training satisfy the specificity requirements under GDPR Article 7 and BIPA Section 15, and whether cross-border data transfers to the United States are supported by adequate transfer mechanisms such as Standard Contractual Clauses.