Privacy Policy

Flow TTS is operated by 3P Labs LLC ("Flow TTS", "we", "us"). We are responsible for the personal data described in this policy.

This policy applies to both the Flow TTS Chrome extension and this website. Where the two behave differently, the section says so.

Speech is generated on your computer for supported local voice models. Account setup, usage checks, license status, and model downloads use network services.

Local speech does not mean the product is fully offline, and it does not mean we collect nothing. We do collect your email address, usage totals, and license details. We do not collect the words on the pages you listen to.

Page text used to generate speech is processed on your device. We do not upload that text to our servers to read a page aloud, and we do not store it.

We do not build a browsing history profile, and we do not use extension data for advertising.

The extension can run on websites you visit so it can read the page you asked it to speak. It may access:

• Readable text on the current page
• Text you select, when you choose Read Selection
• Page title, URL, and element selectors when you save a Flow Template

That page content stays on your device. We do not send page text, page URLs, or Flow Template selectors to our servers as part of usage or account checks.

Chrome shows these permissions when you install Flow TTS. Each one is used only to run the reader, not to sell or advertise with your data.

• Read and change all your data on all websites: needed to extract readable text, selections, and Flow Templates on the page you asked to hear. Flow TTS uses this access to read pages aloud, not to collect browsing history.
• Storage: saves preferences, your sign-in token, Flow Templates, pronunciation rules, and pending usage counts on this device.
• Tabs: finds the tab you are reading so the player, side panel, and playback controls stay attached to that page.
• Web navigation: notices when a site changes pages without a full reload, so reading state can reset on the new view.
• Scripting: injects the in-page player and reading overlays on pages you choose to listen to.
• Side panel: opens the reading panel and Flow Templates manager beside the page.
• Context menus: adds right-click actions such as Read Selection and Open Flow Templates.
• Alarms: periodically syncs usage counts and checks license status in the background.
• Offscreen documents: runs local speech synthesis in a hidden page so audio can play without interrupting the tab you are reading.
• Optional CPU and memory: requested only if you enable diagnostics. Hardware details stay on your device unless you copy them for support.

Playback requires a signed-in account. When you create or verify an account, we collect:

• Your email address
• Your timezone, so daily usage limits apply in local time
• A sign-in code, which we store only as a hash and never in readable form
• Your IP address at the time you request a sign-in code, used to rate-limit requests and block abuse

Sign-in codes expire after 10 minutes and allow a limited number of attempts. After you verify, the extension stores a sign-in token in Chrome sync storage so you stay signed in across devices using the same Chrome profile.

Free accounts are subject to a daily character limit. To enforce that limit, the extension periodically sends usage summaries to our servers. Those summaries include:

• Character counts and listening time
• Which voice model and voice you used
• Your timezone

Usage summaries do not include the words that were read, the page URL, or Flow Template selectors.

Premium checkout is handled by Lemon Squeezy, which acts as the merchant of record. Card numbers and other payment details are processed by Lemon Squeezy and never reach Flow TTS servers.

After a purchase, we store license and customer metadata needed to unlock premium features and confirm that a license is still valid.

The extension keeps some data in the browser so it can work the way you set it up:

• Chrome sync storage: sign-in token, email, and preferences such as theme, player position, and reading mode
• Chrome local storage: Flow Templates (selectors, title, and URL), pronunciation rules, and pending usage counts
• Browser storage for downloaded voice models and related files

Uninstalling the extension removes this local data from that browser.

Some voices ship with the extension. Others download when you choose them. Those downloads come from Hugging Face and are cached on your device.

Model downloads do not include the page text you are reading. They are files needed to generate speech locally.

Hardware diagnostics are off by default. If you enable them in Settings, Chrome may grant optional access to CPU and memory information so you can inspect it locally or copy it for support.

We do not automatically upload diagnostics to our servers. You can revoke this permission at any time in Settings or in Chrome.

If you are in the European Economic Area, the United Kingdom, or Switzerland, we rely on these legal bases:

• Performance of a contract: creating and maintaining your account, enforcing usage limits, and providing premium features you purchased.
• Legitimate interests: preventing abuse and spam, keeping the service reliable and secure, and understanding aggregate interest in the product.
• Consent: joining the waitlist, enabling optional hardware diagnostics, and analytics storage where consent is required. You can withdraw consent at any time.
• Legal obligation: keeping records related to purchases and taxes.

We use a small set of providers to run the product. They process data on our instructions under their data processing terms. We do not sell personal data, and we do not share it for cross-context behavioral advertising.

• Extension: our API and database host, for accounts, usage limits, and license status.
• Extension: an email delivery provider, for sign-in codes.
• Extension: Lemon Squeezy, for premium checkout and license activation.
• Extension: Hugging Face, for optional voice-model downloads.
• Website: Google Analytics 4, for site traffic measurement.
• Website: Cloudflare, for site hosting, waitlist storage, and spam protection.

The Chrome extension does not include advertising or third-party analytics SDKs such as Google Analytics, Sentry, or Mixpanel. Analytics on this website is not connected to your extension account or your usage data.

Flow TTS is operated from the United States, and our providers store and process data on servers in the United States and other countries.

If you are located outside the United States, your personal data will be transferred there. Where required, we rely on our providers' data processing terms, including the European Commission's standard contractual clauses or an equivalent transfer mechanism.

This marketing site is separate from the extension. It uses Google Analytics 4 (GA4) to understand traffic and product interest:

• Page views and session activity
• Feature interactions (for example: sample play, waitlist CTA clicks)
• General device, browser, and approximate location data

If you join the waitlist, we store the email address you submit and any optional fields you provide, such as first name, use case, and referral source. We may also store browser, WebGPU support, locale, the page you came from, and approximate country. We use this to notify you about launch access and to reduce spam. We will not send you unrelated marketing, and you can ask us to remove your email at any time.

If you submit uninstall feedback, we store the reason you write, the optional email you provide, the extension version sent with the page, your locale, and approximate country. We use this to understand why people leave and to improve Flow TTS. Email is optional. We will not send you unrelated marketing, and you can ask us to remove your feedback at any time.

Waitlist and uninstall-feedback submissions are protected with Cloudflare Turnstile, which receives your IP address to verify that you are not a bot. Our hosting provider also processes your IP address to serve the site securely. GA4 and site functionality may use cookies or similar local browser storage to remember session state and measure traffic.

You can opt out of Google Analytics using the Google Analytics Opt-out Browser Add-on, or by blocking cookies in your browser.

• Sign-in codes: 10 minutes, stored as a hash, then invalid.
• Duplicate-request records used to avoid double-counting usage: deleted after 48 hours.
• Sign-in tokens: expire after a limited period and are cleared when the session is no longer valid.
• Account, license, and usage records: kept while your account exists, and until you ask us to delete them.
• Waitlist entries: kept until launch outreach is complete, or until you ask us to remove you.
• Uninstall feedback: kept to understand why people leave, or until you ask us to remove it.
• Data on your device: kept until you delete it in the extension or uninstall.

Depending on where you live, you may have the right to:

• Access a copy of the personal data we hold about you
• Correct data that is inaccurate or incomplete
• Delete your account and associated data
• Receive your data in a portable format
• Object to or ask us to restrict certain processing
• Withdraw consent you previously gave
• Opt out of the sale or sharing of personal information

To make a request, email us at 3p.labs.team@gmail.com from the address on your account, so we can verify who you are. We will respond within the time required by applicable law. Exercising these rights is free, and we will not deny you service for using them.

If you are in the EEA, UK, or Switzerland, you also have the right to complain to your local data protection authority. Uninstalling the extension removes local data from that browser, but it does not delete your account on our servers — ask us if you want that removed too.

Flow TTS is not directed to children under 13, and we do not knowingly collect personal data from them. If you believe a child has given us personal data, email us at 3p.labs.team@gmail.com and we will delete it.

We use HTTPS for data in transit, store sign-in codes only as hashes, limit access to production systems, and keep payment card data entirely with our payment provider.

No online service can be completely secure. If a breach affects your personal data, we will notify you and the relevant authorities where the law requires it.

Our handling of data received from the Chrome extension follows the Chrome Web Store User Data Policy, including its Limited Use requirements. In particular:

• We use the data only to provide and improve the reading features you use
• We do not sell the data or transfer it for advertising or ad targeting
• We do not use the data to determine creditworthiness or for lending purposes
• We do not allow people to read your data, except with your permission for support, to protect security, or where the law requires it

• You can choose not to join the waitlist, or ask us to remove your email.
• You can skip the uninstall form, or send feedback without leaving an email.
• You can block cookies, use tracking protection, or opt out of Google Analytics.
• You can leave diagnostics off, or revoke the permission in Settings.
• You can uninstall the extension to remove local extension data.
• You can contact us to access, correct, or delete your account data.

We may update this policy as the product changes. When we do, we will revise the "Last updated" date above. If a change materially affects how we handle your personal data, we will provide additional notice where the law requires it.

For privacy requests or questions, contact 3P Labs LLC by email at 3p.labs.team@gmail.com.

Email is the fastest way to reach us about access, correction, or deletion requests. Please write from the email address on your account so we can verify your identity before acting on the request.