Extension privacy policy
Last updated: September 13, 2026
This policy covers UYDI · Voice Studio for Chrome. It supplements the UYDI service privacy policy, which describes account information, cloud retention, voice-rights records, service providers, and your rights. This page explains the extension-specific behavior, including the complete access token stored on your device. The service stores a cryptographic hash of that token.
1. Information the extension handles
- Authentication: you sign in on the UYDI website using its email or social login options, including Google. Passwords and Google credentials are handled on the website, not in the extension. The extension receives a UYDI access token using a one-time authorization code protected by PKCE. The token, account email, and expiry are stored in this device's Chrome extension local storage. It is sent to https://uydi.com in the Authorization header to authenticate API requests. It is not placed in URLs, shared with visited websites, or stored with Chrome Sync.
- Text and creative content: selected or pasted text, voice names and descriptions, preview text, language and voice choices, and Canvas titles, segments, ordering and pauses.
- Audio and voice-rights declarations: an audio file you explicitly choose for cloning, the declared rights basis, adult-status, authorization and acceptable-use confirmations, and a SHA-256 sample hash used for safe operation recovery. The extension does not record from your microphone.
- Account and operation data: available voices, credits, prices, quotas, project data, generation identifiers, operation status, and generated audio returned by UYDI.
2. When content is read or sent
Selecting text alone does not cause the extension to read it. The selected text is imported after you choose “Read selection with UYDI” or click Get selection. The extension reads the selection in the active page; it does not automatically upload complete pages, page URLs, or browsing history.
Speech text is sent when you choose Generate speech. Design inputs are sent when you submit a design. A cloning sample is previewed locally and is uploaded only when you submit the clone form with the required confirmations. Saving or estimating a Canvas saves its title and segments to UYDI. Rendering sends the saved project version for synthesis. Connecting or reopening a connected panel retrieves the account data needed for these features.
3. Purpose and sharing
Data is used to authenticate requests, provide the voice and audio features you choose, show limits and credits, save your projects, recover pending operations, and prevent duplicate work or charges. The extension sends API requests only to https://uydi.com over HTTPS. UYDI processes submitted content using its service infrastructure and AI voice providers as described in the service privacy policy. Hosting providers also process ordinary connection metadata needed to deliver requests.
UYDI does not sell extension user data or use it for advertising, creditworthiness, or lending decisions. The extension contains no advertising, analytics SDK, or remote executable code. UYDI Voice Studio's use and transfer of information received through the extension adheres to the Chrome Web Store User Data Policy, including its Limited Use requirements. Transfers are limited to providing the user-facing features, necessary security or legal purposes, or a permitted business transfer. Human access is limited to your explicit consent, necessary security or legal purposes, or aggregated and anonymized internal operations as allowed by that policy.
4. Local storage and deletion
The access token, account email, expiry, and selected reading language persist in local extension storage. Selected text, drafts, voice-operation metadata, sample hashes, the selected project, and render state are kept in Chrome session storage for the current browser session. The chosen cloning file itself remains in memory; it is not written to persistent extension storage. Received audio is held as a local Blob for playback and download. Files you download remain wherever you save them.
Sign out revokes the extension's current login token on UYDI before removing local credentials and clearing session drafts and previews. If the network is unavailable, reconnect and retry signing out. Website sign-in is separate and remains active. Older manually entered personal tokens are removed locally and can be revoked in developer settings. Uninstalling removes local data but cannot revoke server access. Sign-out does not delete saved voices, projects, history, or downloaded files. New extension sessions expire after 30 days; sign in again to reconnect.
5. Why browser permissions are needed
| Permission | Purpose |
|---|---|
| identity | Open UYDI website sign-in and return the one-time authorization result securely to the extension. |
| sidePanel | Show the voice studio beside the current webpage. |
| contextMenus | Offer the selected-text reading command. |
| activeTab and scripting | Read the current selection after your action. There are no always-on content scripts. |
| storage | Keep device-local credentials and preferences and session-only drafts and recovery state. |
| https://uydi.com/* | Authenticate UYDI account, voice, Canvas, and audio requests. |
6. Your choices and contact
Review or edit text before generating; choose whether to submit voice samples; save Canvas projects only when ready; and disconnect or revoke access at any time. Use only your own adult voice or an adult voice you are authorized to clone. For access, correction, deletion, privacy questions, or account deletion, contact support@uydi.com. Do not include access tokens in support messages. Changes to this policy will be reflected by the revision date on this page.