1. Local data and accounts
Interface language, theme, and some preferences may stay in your browser or device. In local mode, voices, scripts, audio, images, and logs are stored on the computer running XIVO; that device’s user controls access and backups.
When you use Sign in with Apple, Apple gives the app an identity token and any name or email you choose to share, which may be an Apple relay address. XIVO asks the XIATRE account service to verify the token, then uses the XIATRE user ID, session, display name, and email to separate your cloud data. Apple and XIATRE process identity data under their own policies.
2. Voice samples, source files, and server profile
When media is imported, the file itself must be 3–30 seconds, and XIVO processes the whole clip. The server profile may stage an uploaded source file (currently up to 80 MB), normally releasing it after ingest; an abandoned temporary media session may remain for about six hours. The server profile does not keep the complete source in your long-term voice library, but it keeps the selected reference and prompt clips, voice metadata, and optionally one cropped avatar frame.
Local mode keeps selected clips on the local computer and may also keep a complete source file of 80 MB or less with the voice for later processing. Submit only media and voices you have the right to use, and obtain any consent required before recording or cloning another person.
3. DashScope, CosyVoice, cloning, TTS, and ASR
The current cloud configuration sends the selected reference clip to Alibaba Cloud Bailian DashScope. CosyVoice creates the cloned voice, and Qwen ASR transcribes the prompt clip. XIVO stores the returned remote voice ID and transcript so the voice can be used.
For speech synthesis, line text, the remote voice ID, and necessary language or emotion instructions go to DashScope CosyVoice, which returns audio to XIVO. Audition audio enters the voice library only when you save an audition; performed audio can enter a script when you save it. Providers may retain requests, voice assets, or operational logs under their terms; XIVO cannot promise immediate provider-side deletion or that providers never use them for security and service improvement.
4. Scenes, dialogue, scripts, and LLMs
To generate a scene, XIVO sends the topic, mode, character names and states, system instructions, and relevant prior dialogue to the configured Qwen or another OpenAI-compatible LLM endpoint. The provider returns generated dialogue or narration. Do not put information in a topic or line that you do not want that model provider to receive.
A live scene is handled mainly in runtime memory. XIVO writes script text, cast information, posters, and played audio to your XIVO storage only when you choose to save the script. Saved scripts can be deleted separately.
5. Avatars and images
XIVO can extract and crop a character image from imported video, and accepts uploaded character, script, or account avatars. In the server profile these images are stored in your account area, count toward storage, and appear in the interface. Upload only images you may use.
6. In-app purchases, credit, and shared wallet
Apple processes payment. The iOS app sends a StoreKit 2 signed transaction JWS to XIVO. The server verifies its certificate chain, transaction ID, product, environment, bundle ID, and appAccountToken when present, then records credit grants and use to prevent duplicate credit and fraud.
To share transferable purchased credit across XIATRE products, XIVO may send the XIATRE user ID, product, balance, transaction or grant, debit, refund, and operation identifiers to the XIATRE wallet. We do not receive full payment-card details. Financial, anti-fraud, or legal duties may require some transaction records to remain after account deletion.
7. Logs, IP addresses, and security
Servers process IP addresses, including Cloudflare-forwarded addresses, request time and path, device or client information, model and operation status, errors, and usage to run the service, apply limits, prevent abuse, troubleshoot, and respond to security events. XIVO application file logs rotate at 10 MB and are configured for 14-day retention; hosting, Cloudflare, Apple, and model-provider logs may follow different periods.
We use measures such as HTTPS, session verification, access controls, and per-account isolation. No network or storage system is completely secure. Protect your device and Apple/XIATRE session, and avoid sending sensitive data that is not needed.
8. Retention, deletion, and requests
Saved voices, auditions, images, and scripts generally remain until you delete the item or account, or removal is needed to operate the service and storage. Item deletion removes the corresponding XIVO-managed files. Backups, temporary files, logs, and cloned assets or request records held by third-party providers may not disappear at the same time.
Delete Account in the app requests deletion of the XIATRE identity account and clears the XIVO account directory, registry entry, usage record, and local credit ledger. Some records may remain if a XIATRE or provider request fails or legal and security duties require retention. You may also contact us to ask about access, correction, or deletion.
9. Children
XIVO is not directed to children under 13, or under the digital-consent age where they live. Minors should use it only with a guardian’s permission and supervision. Contact us if you believe a child submitted personal information without appropriate consent.
10. Advertising, analytics, changes, and contact
XIVO currently contains no third-party advertising SDK and uses no third-party behavioural analytics SDK to build advertising profiles. Necessary operational logs, Apple services, Cloudflare, XIATRE account and wallet services, and model providers are not advertising analytics.
We may update this policy when features or providers change and will change the date on this page. For privacy or deletion questions, email [email protected].