Archived copy. This is Creator Privacy Notice, Version 1.0 — Effective 20 October 2026, exactly as Kavi published it. This page is never edited. SHA-256 of the source text: 066d330d8c647d11cf8455dca9e10384d3fa329b9f1fb24112b4c1f646185e74. Current version: kavi.audio/legal/creator-privacy-notice. All versions: kavi.audio/legal/policies.json.

Creator Privacy Notice

Kavi Media, Inc.
Version 1.0 — Effective 20 October 2026
Published at kavi.audio/legal/creator-privacy-notice


1. About this Notice

1.1 This Creator Privacy Notice is one of the Kavi Creator Policies. It explains what personal data Kavi Media, Inc. collects about creators, why, who receives it, where it is stored, how long it is kept, and the rights you have and how to use them.

1.2 Kavi Media, Inc. is a Delaware corporation with its principal place of business in Alpharetta, Georgia, USA (mailing address: 169 Madison Ave STE 30314, New York, NY 10016, USA) ("Kavi", "we", "us"). Kavi decides why and how your personal data is processed. Under India's Digital Personal Data Protection Act, 2023 (the "DPDP Act"), Kavi is the data fiduciary for your personal data. Under Canada's Personal Information Protection and Electronic Documents Act ("PIPEDA"), Kavi is the organization responsible for it.

1.3 Kavi gives you this Notice before you sign your agreement with Kavi, and it is always available in the Kavi Creator Portal ("Portal") and at the link above.

1.4 Languages. This Notice is in English. If you are resident in India, Kavi will make this Notice, and every other privacy notice and consent request it gives you under the DPDP Act, available in English and in Telugu, and on request in any other language listed in the Eighth Schedule to the Constitution of India, by 13 May 2027.

2. Who this Notice applies to

2.1 This Notice applies to: (a) creators, artists, licensors and authors who sign, or are invited to sign, a Creator Master Agreement, Music Master Agreement or Audiobook Master Agreement (each a "Master"), and the individual behind a company that signs one (for example, a show's host or a company's principal); (b) co-hosts, co-owners and co-authors who sign a joinder, and authors who sign an Author Acknowledgement or initial an AI Narration Consent or other consent under an Audiobook Master Agreement; (c) approved creators who post short-form audio under the Creator Terms — Short-form; (d) royalty nominees and estate or legal representatives whose details a creator gives Kavi; (e) anyone who applies or is invited to join Kavi as a creator; and (f) if Kavi signs a creator, co-host or co-owner under the age of majority under Part B of a Minor / Guardian Rider (section 12.1), that Minor and the Minor's parent or guardian who signs the Rider.

2.2 It does not cover Kavi's listeners, who are covered by Kavi's listener privacy policy. Guests, cast members and writers who appear in or contribute to creators' content are covered by Kavi's Contributor Privacy Notice, as are freelance editors, narrators and translators.

2.3 Kavi signs creators resident in the United States, India and Canada only. It does not yet sign residents of Quebec (see section 12.4).

3. Personal data Kavi collects

Category Examples Where it comes from
Account and contact data Legal name, professional or stage name, email address, phone number, postal address, country and state, province or territory of residence and tax residence, Portal sign-in identifiers You; Kavi's sign-in service
Identity verification data The result of identity checks, including the result of the IRS check of the name and US taxpayer identification number (TIN) on a Form W-9; where Kavi itself needs to see an identity document, a copy of it (kept only as section 8 says) You; Kavi's tax-form provider
Tax data Form W-9, W-8BEN or W-8BEN-E (or another form US tax law requires for a particular payment or payee, such as Form W-8IMY, W-8ECI or 8233) and the details on it (such as a US Social Security number or EIN, a foreign tax identification number, the Indian PAN, treaty claims); GST or GST/HST registration status and numbers; GST non-registration declarations; for India-resident payees, evidence you give on request that Indian tax was paid (such as a filed income-tax return and its acknowledgement), used only to deal with Indian tax authorities (India Addendum Section 14.5) You, only through secure Portal forms, which Kavi's tax-form provider collects for Kavi
Payout data The bank details you enter in Kavi's secure Portal form, which the Portal sends directly to Wise, Kavi's payout provider (Kavi keeps only the reference Wise gives your payout account and its status, not your bank account details); payment history; currency and exchange-rate records You; Wise
Contract and signature data Signed agreements, schedules, joinders and consents; e-signature audit trails (name, email, phone number used for one-time passwords, IP address, device information, timestamps); eSign certificates for India signers who sign by eSign; e-stamp details; records of each Policy Acknowledgement You; DocuSeal; Leegality
Content, voice and likeness The episodes, shows, music, audiobook texts and short-form items you deliver (which contain your voice and anything you say about yourself), artwork, approved photographs and biography, credits, metadata You
Documents about your content Clearance logs and licenses, guest and cast releases, AI disclosures, sponsorship disclosures, child-performer permits, society memberships You
Voice Data and Voice Models (only if you sign an AI-Voice & Digital Replica Consent) Recordings of your voice used to make a voice model, and the voice model itself; whether you belong to a performers' union or guild, and the name of any lawyer who advised you, if you choose to tell Kavi in that Consent You; your delivered content
Raw material for editing (only if you elect editing support) Raw recordings, stems, scripts, notes and glossaries You
Royalty and performance data Qualifying Streams and Qualifying Minutes (listening time) by Listener Market and Listener Country, royalty and revenue-share calculations, holds and their reasons, invalid-stream determinations, statements, tax withheld Kavi's systems
Compliance data Sanctions-screening results; records of copyright notices, complaints, moderation decisions and appeals Kavi's checks; third parties who complain about content
Communications Emails, Portal messages, support requests, grievances, privacy requests, approval requests (for example, sponsor spots) You
Technical data IP address, device and browser information, sign-in and security logs, cookies and similar technologies needed for sign-in and security in the Portal Your device
Affiliate program data (only if you join Kavi's affiliate program) Your referral link or code, referral clicks and sign-ups attributed to you, commissions and their payment You; Rewardful
Equipment data (only if you sign an Equipment Agreement) Shipping address and equipment records You
Studio data (only if you use Kavi Studio) Bookings, Booking Confirmations and registered guests; your signed Studio Use Agreement; incident reports; any emergency contact; doorbell-camera footage of arrivals; in the online studio, your display name, Recordings, markers, editor notes, join-screen consent record, participant identifier, IP address, browser and logs You; Kavi's systems
Nominee and representative data Name, relationship and contact details of a royalty nominee or estate representative You or them

Kavi never asks for, and does not store, your Aadhaar number. If you sign by Aadhaar-based eSign, the eSign is carried out through Leegality and the certificate attached to the signed document records the signature details that eSign service includes in it.

4. Why Kavi uses your personal data, and on what basis

Purpose Data used Basis
Deciding whether to sign you and entering into your agreement Account, contact, contract and signature data; residence Your agreement; your consent where the law requires it
Running your Portal account and keeping it secure Account, technical data Your agreement; Kavi's legitimate need to protect its systems; your consent where required
Receiving, reviewing, distributing and promoting your content as your agreement allows; crediting you Content, voice and likeness, documents about your content Your agreement
Editing support, if you elect it Raw material for editing Your agreement (Editing Support Agreement)
Calculating and paying royalties and revenue shares; statements; audits Royalty, payout, tax data Your agreement
Meeting tax obligations (collecting tax forms; verifying US taxpayer identification numbers with the IRS; withholding, including US backup withholding where the law requires it; Forms 1099 and 1042-S; Indian tax certificates where required) Tax, identity verification, payout, royalty data Legal obligation
Detecting stream manipulation and fraud Royalty and performance data; technical data Your agreement; Kavi's legitimate need to prevent fraud
Sanctions screening Name and residence of payees and nominees Legal obligation
Handling copyright notices, complaints, legal orders and moderation Content; compliance data; communications Legal obligation; your agreement
Making voice models and replica outputs, only for the uses you tick Voice Data and Voice Models Your separate, signed and separately ticked consent (AI-Voice & Digital Replica Consent)
Training, fine-tuning and evaluating Kavi's own AI models (section 7.5) Content, voice and likeness (never music) Consent, if you live in India, Canada, Illinois, Texas or Washington; otherwise your agreement and Kavi's legitimate interest, subject to your right to opt out at any time
Running the affiliate program, if you join Affiliate program data Your consent and the program's terms
Making a Brand Introduction you ask for (Sponsorship Disclosure Policy, section 8.5) Contact data, and the information about you and your content that you approve Your request and consent
Communicating with you, giving notices, handling requests Contact data; communications Your agreement; legal obligation
Keeping records to establish, exercise or defend legal claims Contract, signature, royalty and compliance data Kavi's legitimate need; legal obligation

India. For people resident in India, Kavi processes the data you provide to enter into, perform and be paid under your agreement, and to meet tax and legal duties, as a legitimate use under section 7 of the DPDP Act (data voluntarily provided for a specified purpose; compliance with law). Kavi relies on consent only for the optional uses marked 'consent' in this section, which it asks for in a separate step. Until the DPDP Act's duties apply to Kavi, you also give, by signing the India Addendum (or, under the Audiobook Master Agreement, as its clause 22.1 provides), the written consent that India's Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 require for Kavi and its payout and tax-form providers to collect and use your bank account details and any voice data covered by those Rules, and to transfer them outside India (India Addendum, Section 16.2).

Canada. For creators resident in Canada, Kavi collects, uses and discloses personal information with your consent for the purposes in this Notice, as the Canada Rider records. That consent does not cover using your voice recordings to train, fine-tune or evaluate a generative AI model, building a model that can reproduce your voice, or replicating your voice; those need the separate consents and opt-ins described in section 7, including the Kavi model training consent in section 7.5.

United States. For creators resident in the United States, Kavi uses personal data for the purposes in this Notice under your agreement, to comply with law, and for Kavi's legitimate business needs described above.

What Kavi does not do. Kavi does not sell your personal data. Kavi does not share it for cross-context behavioral advertising. Kavi does not use your personal data or your content for any purpose not described in this Notice or your agreement.

5. Who Kavi shares personal data with

5.1 Service providers. Kavi uses the following service providers to process creator personal data for Kavi. Each may use the data only to provide its service to Kavi (or, for Kavi's payout provider and tax-form provider, also to meet its own legal obligations under its own terms).

Provider Role Data involved
Amazon Web Services (AWS) Hosting and computing (EC2), Portal sign-in (Cognito) and Kavi's database (RDS), in a US region All categories Kavi stores
Wise Kavi's payout provider: payouts to creators and other payees resident in the United States, Canada and India Account data (name, address, country of residence); payout data, including bank details
TaxBandits (SPAN Enterprises LLC) Kavi's tax-form provider: collecting Forms W-9, W-8BEN, W-8BEN-E and other tax forms for Kavi, and checking US taxpayer identification numbers with the IRS Account data; identity verification data; tax data, including tax identification numbers
DocuSeal Electronic signature of agreements, schedules and consents Contract and signature data
Leegality Aadhaar-based or other e-KYC eSign, and e-stamping, for signers resident in India; e-KYC identity checks for Guardians who live in India (section 12.5) Contract and signature data; identity verification data (the result of a Guardian's e-KYC check)
AI voice vendors on the Approved AI Voice Vendor List (published at kavi.audio/legal/ai-voice-vendors and in the Portal) AI voice, narration and dubbing tools, used only as your agreement allows (see section 7) Content; Voice Data and Voice Models only under an AI-Voice & Digital Replica Consent or, for a voice actor, a Voice License Agreement
Rewardful Tracking referrals and commissions under Kavi's affiliate program, if you join (commissions are paid through Kavi's payout provider) Affiliate program data; contact data
Google (STUN) and Metered (TURN relay); jsDelivr, cdnjs (Cloudflare), npmcdn and GitHub Pages (code libraries the Studio app loads) Setting up and relaying the encrypted live call in Kavi Studio online (the relay cannot read the call); serving parts of the Studio app to your browser IP address; encrypted call traffic in transit
Equipment retailers and shipping carriers Delivering, servicing and collecting equipment under an Equipment Agreement, if you sign one Equipment data (name, shipping address, phone number)

5.2 Other recipients, by category: (a) Editors, translators and narrators Kavi engages (located in the United States, India or Canada; Kavi will tell you before using editors in any other country), who work on content under written confidentiality and data-processing terms, only where your agreement allows (for example, if you elect editing support or Kavi produces a translated version or an audiobook); (a1) AI tool providers Kavi and its editors use for transcription, captions, search, recommendations, noise reduction and loudness processing, content moderation, fraud detection, detecting and labeling synthetic audio and training Kavi's own models (section 7.5), each bound as section 5.3 describes (those in use are listed in Part B of the Approved AI Voice Vendor List); (b) email, communication and office software providers Kavi uses to run its business; (c) music rights organizations and copyright societies, to the extent needed to check a society's written license or consent that you upload, or to respond to a society's claim about your content; (d) tax authorities (for example, the US Internal Revenue Service), as tax law requires; (e) courts, regulators, law enforcement and government agencies, where the law requires or to respond to a valid legal order; (f) people who complain about your content, to the extent the law requires (for example, a counter-notice is sent to the person who sent the copyright notice); (g) your co-hosts, co-owners and payees, to the extent needed to administer shared content and splits; (h) Kavi's professional advisers (such as accountants and lawyers), under confidentiality; (i) a buyer or successor of Kavi's business or of the Service, with your agreement, as your agreement allows; (j) listeners and the public: your name, professional name, approved photographs, approved biography and credits are shown with your content as your agreement allows; and (k) brands, only when you ask Kavi to make a Brand Introduction (Sponsorship Disclosure Policy, section 8.5), and only the details you approve.

5.3 Each AI vendor that processes your content is bound by its written terms, together with the opt-out Kavi has exercised under them, not to train, fine-tune, improve or evaluate any model on it, other than Kavi's own models that a vendor trains solely for Kavi (section 7.5).

5.4 Kavi gives you listener analytics only in aggregated form, except that you can see the names and photos of listeners who follow you, which those listeners make public. Use them only to run your content on Kavi; never contact, profile, sell or share them outside Kavi. Kavi never gives other creators your royalty or contract terms.

6. Where your data is stored and international transfers

6.1 Kavi stores creator personal data in the United States, on AWS in a US region. Your tax form, tax identification numbers and identity details go to Kavi's tax-form provider, and your bank details go directly to Wise, Kavi's payout provider, to be processed in the United States, including if you live in India or Canada. Wise may also process them in the other countries where it and its partner banks operate (for India payouts, including its partner bank in India).

6.2 Some people and providers who work with that data are elsewhere. For example, editors and translators Kavi engages may access content and related data from India or Canada; Kavi's service providers process data in the places they operate; and the Approved AI Voice Vendor List (kavi.audio/legal/ai-voice-vendors, also in the Portal) shows where each approved AI voice vendor, and each AI tool provider that processes your content, processes data.

6.3 While your personal data is outside your country, it is subject to the laws of the country where it is, and may be accessed by that country's courts, law-enforcement and national-security authorities.

6.4 Kavi uses contracts to require its service providers to protect personal data to a standard comparable to the law that applies to you.

6.5 India. Kavi transfers personal data of India-resident creators outside India only as the DPDP Act allows. If the Government of India restricts transfers to a country Kavi uses, Kavi will tell you and will stop transferring your data there or use another lawful means.

6.6 Canada. You may ask Kavi's privacy contact (section 14) for information about Kavi's policies and practices for service providers outside Canada.

7. Voice, AI and synthetic-voice data

7.1 Your delivered content. Your episodes, music and audiobooks contain your voice. Kavi uses AI tools on your content only for the purposes your agreement lists, which are drawn from the following (your agreement may list fewer, and then only those apply; for music, only transcription, captions, search, recommendations, moderation, fraud detection and detecting and labeling synthetic audio): transcription, captions, search, recommendations, content moderation (including safety screening), fraud detection, detecting and labeling synthetic audio, chaptering and metadata, choosing promotional clips and Bites, detecting natural pauses for advertising, training Kavi's own AI models as section 7.5 describes, and translation or dubbing only as your Master and any AI-Voice & Digital Replica Consent allow. Dubbed versions use stock synthetic voices or a Kavi Voice only (a synthetic voice Kavi licenses from a consenting adult voice actor, never modeled on you), never a voice-preserving or voice-matching feature, except for your own voice under a signed AI-Voice & Digital Replica Consent. If you elect editing support, the editing uses the Editing Support Agreement lists also apply. The AI and Synthetic Content Policy describes this in full.

7.2 No model of your voice without your separate consent. Kavi does not use your content in or with any model to reproduce or imitate any person's likeness. Kavi does not use your content in or with any model to reproduce or imitate your voice unless you have signed an AI-Voice & Digital Replica Consent, and then only for the categories and uses you ticked and initialed. Kavi does not create a digital replica of your voice except under that Consent or another signed agreement with Kavi that specifically permits it (such as a Voice License Agreement, which never uses your content). That Consent never covers the voices of guests or cast members in your content; their voices may be used in that way only under the separate consent described in the Guest / Participant Release or the Cast & Writer Release.

7.3 Voice Data and Voice Models. If you sign that Consent, Kavi treats your Voice Data and Voice Model as personal data and as biometric information (a voiceprint). Kavi: (a) uses them only for the uses you ticked; (b) stores them encrypted, with access limited to the people and approved vendors who need it; (c) never sells, leases or trades them, and discloses them only to approved vendors acting for Kavi or where the law requires; (d) does not merge your voice model into any multi-speaker or general-purpose model; (e) does not let any vendor use them to train any model for anyone else; (f) keeps and deletes them on the schedule in section 8; and (g) notifies you by email of any security incident affecting them, without undue delay and in any case within 5 business days after Kavi becomes aware of it. Kavi will give you 30 days' notice by email before adding a vendor to its Approved AI Voice Vendor List (kavi.audio/legal/ai-voice-vendors), during which you may revoke, as that List describes.

7.4 AI training opt-ins. Kavi does not let any third party use your content to train, fine-tune or evaluate an AI model unless you sign a separate opt-in for the specific work (never for music under the Music Master Agreement, which offers no opt-in). You may revoke an opt-in at any time for future uses. For creators resident in India, from 13 May 2027 each opt-in will meet the consent requirements of the DPDP Act.

7.5 Kavi's own AI models. Kavi may use content you deliver under a Creator Master, Audiobook Master or the Short-form Terms, including its audio (such as tone, rhythm and intonation) and its transcript, free of charge, to train, fine-tune, evaluate and improve AI models that Kavi owns or exclusively controls, including speech-recognition, transcription, translation and speech-synthesis (text-to-speech) models. Kavi owns those models and may license them (speech-synthesis models only as a hosted service, never as a copy of the model), but never your content or any dataset containing it. No such model is ever used to imitate or reproduce your voice or anyone else's, and Kavi uses reasonable measures to stop that happening. If you live in India, Canada, Illinois, Texas or Washington, Kavi does this only if you tick the consent box when you sign. Everyone else may opt out. To opt out or withdraw, email privacy@kavi.audio with your name and "AI training opt-out" at any time (any clear request counts): within 30 days after receiving it, Kavi stops using your content in new training and deletes it from its training datasets, but models already trained are not retrained. Kavi never uses for this the voice or words of anyone under 18 (or under the age of majority where they live, if higher), or the voice of a guest, cast member or co-host who has opted out or has not consented. It never applies to music, including music delivered under the Music Master and any excerpt of it in a short-form item. This applies only to agreements and releases signed on version 1.0 (20 October 2026) or later.

7.6 Washington residents. If you live in Washington State, USA, recordings of your voice may be consumer health data under Washington's My Health My Data Act. Kavi collects and shares your delivered content only as needed to provide the service you asked for under your agreement (receiving, reviewing, distributing, promoting and paying for your content). Kavi trains its own models on it only if you tick the consent box (section 7.5), and offers an AI-Voice & Digital Replica Consent to Washington residents only after its Consumer Health Data Privacy Policy is published. That policy (kavi.audio/legal/consumer-health-data-privacy-policy) also applies to you.

8. How long Kavi keeps personal data

Data How long Kavi keeps it
Raw material uploaded for editing (raw recordings, stems, scripts and working files) Deleted 12 months after the edit is approved (or deemed approved). If you reject a proposed cut or withdraw the episode, Kavi returns the material and deletes its copies promptly. The delivered episode audio is kept as long as Kavi's license runs.
Your content in Kavi's AI training datasets (section 7.5) Until you opt out or withdraw (removed within 30 days), or until 30 days after Kavi's license of that work ends, whichever is first. Models already trained are kept and are never used to imitate your voice.
Account records and royalty, payment and tax records 7 years after the last payment Kavi makes to you, or longer where tax or other law requires. Kavi's payout provider and tax-form provider keep their own records for as long as the law that applies to them requires.
Signed agreements, schedules, joinders, consents and releases, their e-signature audit trails, and records of each Policy Acknowledgement For as long as any license or other right under the agreement concerned remains in effect, plus 7 years (the IP address and device information in an acknowledgement record are deleted 7 years after the acknowledgement)
Identity documents Kavi itself receives Deleted 90 days after verification; only the result of the verification is kept
Voice Data and Voice Models Until the earliest of: the date your revocation of your AI-Voice & Digital Replica Consent takes effect (30 days after your notice; for a withdrawal under India's DPDP Act, or if you live in Washington State, USA, the date of your notice); Kavi no longer holding a license to any covered work; 23 months after the later of the date you signed the Consent's schedule and the date of the last replica output; 23 months after you last logged in to the Portal, sent Kavi a message or received a payment from Kavi; or Kavi learning of your death (unless the person then entitled to your voice rights consents in writing to Kavi keeping the model). Kavi then deletes them from its own systems, and instructs its vendors to delete them, within 30 days; backup copies are deleted or overwritten in the holder's normal backup cycle and never restored or used.
Content you deliver under a Master For as long as Kavi's license in it runs. If a work is withdrawn, Kavi deletes its copies within 30 days, except any copy the law requires Kavi to keep, which it does not use.
Equipment shipping address and phone number (only if you sign an Equipment Agreement) Only while needed to ship, service or recover the equipment or resolve an open claim, then deleted; equipment charge and reimbursement records are kept with your royalty records (7 years after the last payment)
Kavi Studio online session files (tracks, markers, session information, editor notes) 90 days after the recording stops, unless sent for editing under an Editing Support Agreement (then the raw-material rule above) or needed for a legal reason
Studio join-screen consent records and booking records 3 years after the session, or as long as the release records where content containing the Recording is published
Physical studio: doorbell-camera footage; Recordings left on Kavi's Studio Equipment; health or access information you choose to give Footage up to 30 days; Recordings deleted 30 days after handover; health or access information deleted within 30 days after the Session (each kept longer only if an incident, the law or a pending dispute requires it)
Short-form items you delete Kavi stops making them available within 30 days; backup copies are overwritten in the normal backup cycle
Support messages, grievances, privacy requests and Portal security logs 3 years after the matter is closed, or longer if a dispute or legal requirement needs it

Kavi may keep data for longer only where the law requires it, or where it is needed for a legal claim, investigation or legal hold, and then only for that purpose. Records about child-safety reports are preserved as the law requires.

9. Your rights

9.1 Everyone. Wherever you live, you may ask Kavi to: (a) tell you what personal data Kavi holds about you and how it is used, and give you a copy; (b) correct inaccurate or incomplete data, or update it; (c) delete data Kavi no longer needs; and (d) stop processing based on your consent (section 10). Kavi may decline or limit a request where the law allows, for example where Kavi must keep tax, payment or contract records, where the data is needed to perform your agreement, or where another person's rights would be affected. Kavi will tell you why.

9.2 India (DPDP Act). If you are resident in India, you have the right to: (a) obtain a summary of your personal data being processed and the processing activities, and the identities of the data fiduciaries and processors with whom it has been shared, with a description of the data shared; (b) correct, complete, update and erase your personal data, subject to the law; (c) have your grievances redressed by Kavi (section 11); (d) nominate another individual to exercise your rights if you die or become incapable. You can make or change a nomination by writing to privacy@kavi.audio or through the Portal. A data-protection nomination is separate from the royalty nominee named in your Master, who receives royalties; you may name the same person for both; and (e) withdraw consent (section 10). Kavi applies these rights now. The DPDP Act's duties on notice, consent, security, breach intimation, children's data, data principal rights and transfers bind Kavi by law from 13 May 2027, or any earlier date the Government of India notifies.

9.3 Canada (PIPEDA and, in British Columbia, PIPA). If you are resident in Canada, you may access the personal information Kavi holds about you, challenge its accuracy and completeness and have it amended, withdraw consent (section 10), ask about Kavi's practices for service providers outside Canada, and complain to Kavi and to the Office of the Privacy Commissioner of Canada. If you live in British Columbia, British Columbia's Personal Information Protection Act may also apply, and you may also complain to the Office of the Information and Privacy Commissioner for British Columbia.

9.4 United States. Depending on the state you live in, state privacy laws may give you rights to know about, access, correct and delete your personal data, to obtain a portable copy, and to opt out of the sale of personal data, targeted advertising and certain profiling. Kavi does not sell your personal data or use it for targeted advertising. Kavi honors requests to access, correct and delete from creators in every US state, subject to the exceptions in section 9.1. If Kavi declines your request, you may appeal by replying to Kavi's decision; Kavi will tell you the outcome of the appeal and, where your state's law provides for it, how to contact your state attorney general.

9.5 How to make a request. Email privacy@kavi.audio (kavi.audio/legal/privacy-request explains how), or write to the address in section 14. Kavi will verify your identity before acting on a request, using information it already holds (for example, by asking you to confirm the request from the email address registered in your Portal account). Kavi will not ask you to send identity documents to confirm who you are. You may use an authorized agent where the law allows; Kavi may ask for proof of the agent's authority. Kavi will acknowledge your request promptly and respond within the time the law that applies to you requires. Kavi does not charge for a request, and will not treat you differently because you made one.

10.1 Where Kavi relies on your consent, you may withdraw it at any time, as easily as you gave it, by email to privacy@kavi.audio or through the Portal.

10.2 Withdrawal does not affect processing done before you withdraw, or processing that the law requires or permits without your consent (for example, keeping tax and payment records).

10.3 Except as section 12.5(a) and the Minor / Guardian Rider provide for a Guardian's withdrawal, withdrawal of personal-data consent does not by itself end or narrow any copyright or other contractual license you have granted to Kavi, or any exclusivity under your agreement. India. If you live in India, where consent was the legal basis for processing personal data, Kavi and its processors will stop that processing within a reasonable time after you withdraw, unless continued processing without consent is independently required or authorized under the DPDP Act, its rules, or another applicable law. Kavi may explain any contractual consequence of no longer having data it needs (section 10.4), but performing your agreement does not by itself override a legally effective withdrawal. Canada. If you live in Canada, you may withdraw consent subject to legal or contractual restrictions and reasonable notice, and Kavi may continue to use personal information as needed to perform your agreement, pay you and meet its legal obligations (Canada Rider, Section 13.2).

10.4 If you withdraw consent to data Kavi needs to perform your agreement (for example, your tax or payout details), Kavi may hold the affected payments, which continue to accrue and are not forfeited, or pause the affected features, until you provide that data again. Kavi will explain the likely consequences before acting.

10.5 Withdrawing your AI-Voice & Digital Replica Consent is a revocation under that Consent: it takes effect at the end of its 30-day Revocation Notice Period and Kavi then deletes your Voice Data and Voice Model as section 8 says. If you live in Washington State, USA, or you live in India and your notice says you withdraw consent under the DPDP Act, Kavi stops making replica outputs when it receives your notice, and the 30-day deletion period runs from the date of your notice.

11. Grievances and complaints

11.1 You may raise any privacy concern or grievance with Kavi first:

11.2 Kavi will acknowledge your grievance promptly and respond within the time the law that applies to you requires.

11.3 India. If you are resident in India and you are not satisfied with Kavi's response, you may complain to the Data Protection Board of India after using Kavi's grievance process, as the DPDP Act requires.

11.4 Canada. You may complain to the Office of the Privacy Commissioner of Canada and, if you live in British Columbia, to the Office of the Information and Privacy Commissioner for British Columbia.

11.5 United States. You may contact your state attorney general or other regulator that the law of your state provides.

12. Children, minors and Quebec

12.1 Kavi signs creators under the age of majority where they live (18 in most places, 19 in some Canadian provinces and territories) only if they are aged 13 or older, live in a US state, India, British Columbia or Ontario, and have a signed Minor / Guardian Rider, and does not open Portal accounts for anyone below that age, except an account opened with a signed Minor / Guardian Rider and supervised by the Guardian. If Kavi learns that any other account belongs to someone below that age, it will close the account and delete the personal data, except what the law requires Kavi to keep or needs to pay amounts already earned.

12.2 Minors who appear as guests, or perform or write as cast, are covered by Kavi's Contributor Privacy Notice (section 12 of that notice sets out when a Minor may take part, including guardian signatures, Kavi's approval and permits, and Kavi's verifiable guardian-consent process for a Minor who lives in India or whose contribution will be recorded, edited or stored in India). Kavi never uses a Minor's personal data for tracking, behavioral monitoring, profiling or targeted advertising.

12.3 The AI-Voice & Digital Replica Consent is never available to anyone under the age of majority where they live.

12.4 Quebec. Kavi does not sign Quebec residents. Before it does, Kavi will publish a French Quebec section of this Notice covering the requirements of Quebec's private-sector privacy law, including the person in charge of the protection of personal information, the means of collection, rights of access, rectification and withdrawal of consent, and the communication of personal information outside Quebec. Kavi's person in charge of the protection of personal information is Srihith Pallamreddy (Privacy & Grievance Officer), privacy@kavi.audio.

12.5 Minor creators. Where Kavi signs a creator, co-host or co-owner under the age of majority under Part B of a Minor / Guardian Rider (section 2.1(f)), Kavi collects for that Minor and the Guardian only the categories of data described in this Notice that are needed to perform the agreement and comply with law, plus the Guardian's name, relationship to the Minor and contact details, the Guardian's government identification (for a Guardian who lives in India, the result of the identity check in paragraph (a)(ii) instead), the Minor's date of birth and proof of it, proof of the Guardian's relationship or legal authority, and the India guardian-consent record described below. Kavi uses these extra items only to confirm the Minor's age, to record who consented and their authority to do so, and to prove consent. Kavi never uses a Minor's data for tracking, behavioral monitoring, profiling or targeted advertising, and never offers a Minor an AI-Voice & Digital Replica Consent (section 12.3). (a) India: verifiable guardian consent. For a Minor resident in India, or a Minor whose content will be recorded, edited or stored by a creator, co-host or editor in India, Kavi obtains the Guardian's verifiable consent before processing the Minor's personal data and before the Rider is signed, using the process below, which follows section 12.4 of Kavi's Contributor Privacy Notice: (i) Kavi sends the Guardian a secure link to guardian access in the Portal, with this Notice and the consent request, in the languages section 1.4 describes; (ii) a Guardian who lives in India proves their identity by Aadhaar-based or other e-KYC eSign through Leegality, or with a digital signature certificate; a Guardian who lives elsewhere uploads government identification through the Portal (never by email or messaging app). Kavi receives only the result and the certificate (or the identification), and confirms from the eSign or DigiLocker result, or from the date of birth on the identification, that the Guardian is 18 or older; if it cannot confirm this, Kavi does not proceed. Kavi never receives or stores an Aadhaar number; (iii) the Guardian confirms that they are the Minor's parent or legal guardian with authority to act for the Minor, and that no court order or other person with parental responsibility objects, gives the Minor's name and date of birth, and uploads proof of both through the Portal (never by email or messaging app); if Kavi knows of a custody order, separation or dispute, every person with legal authority must complete the process; (iv) the Guardian gives a separate, specific consent to each purpose, by ticking each one (nothing is pre-ticked), and signs it by eSign (or, for a Guardian who does not live in India, through DocuSeal); Kavi records the Guardian's name, the result of the identity check, the version and language of this Notice, the purposes consented to, and the date and time; and (v) Kavi marks the consent as complete in the Portal. Until step (v) is complete, Kavi uses the Guardian's contact details and the Minor's name, date of birth and proofs only to complete this process, and deletes them if consent is not completed within 30 days. The Guardian may withdraw consent at any time through the Portal or by email to privacy@kavi.audio. Kavi will then stop processing the Minor's personal data, except data the law requires Kavi to keep. Within 30 days after the withdrawal, Kavi removes from the Service the Minor's content that contains the Minor's personal data; no further delivery is required; Kavi's licenses and every exclusivity in that content are suspended while the withdrawal lasts and end if it is not reversed within 12 months; royalties earned before removal are paid; and neither side owes the other any exit payment, damages or refund. If the Guardian gives consent again, the agreement resumes for that content (Minor / Guardian Rider, Section 8.2). Kavi keeps the consent record with the signed agreement (section 8) and deletes identity documents 90 days after verification, keeping only the result. Kavi applies this process now, although the DPDP Act's duties on children's data bind Kavi by law from 13 May 2027.

13. Security

13.1 Kavi uses reasonable technical and organizational measures to protect personal data, including encrypted connections to the Portal, access controls that limit data to the people who need it, encrypted storage of Voice Data and Voice Models, collecting identity, tax and bank details only through secure Portal forms that pass them to Kavi's tax-form provider and payout provider (never by email), and written security terms with its service providers.

13.2 No system is perfectly secure. If a personal data breach affects your data, Kavi will notify you without undue delay, and will notify regulators, as the law requires.

13.3 Kavi will never ask you for your password, or for tax, identity or bank details, by email, direct message or phone.

14. Contact

15. Changes to this Notice

15.1 Kavi changes this Notice only as the Policy Acknowledgements describe: (a) at least 14 days' notice by email to the address in your Portal account and by a notice in the Portal, with a summary of what changed; (b) shorter notice, or immediate effect, only where required by law, a court or regulator order, an app store or payment provider, or needed to deal with an urgent safety, security, fraud or child-safety risk, and only to the extent that requirement or risk demands, with an explanation as soon as practicable. Shorter notice affects only when the change takes effect, and paragraph (f) applies to it in full; (c) a change in your favor, or a purely administrative change (such as an updated contact detail), may take effect when posted, with notice; (d) a change that expands what Kavi may do with your personal data (including AI uses) is a material change: Kavi will ask you to acknowledge this Notice again in the Portal, and where the change needs your consent, Kavi will ask for that consent separately and will not rely on the acknowledgement alone. Until you acknowledge, the earlier version keeps applying to content under any Schedule, Release Schedule or Book Schedule signed before the change, as your Master provides, and Kavi will not hold back uploads of that content, royalties already earned, or exploitation of or payment for content already delivered. Kavi may ask you to acknowledge the new version before you sign a new Schedule; (e) if you do not accept a material change, your Master says what you may do; and (f) a change does not apply to data processing that took place before it took effect, and does not apply as a new acceptance criterion or an increased production or delivery burden to content under a Schedule, Release Schedule or Book Schedule signed before the change, except to the extent applicable law requires immediate application. A court or regulator order is implemented to the extent it legally binds Kavi. An app store or payment provider requirement, or an urgent safety, security, fraud or child-safety risk, may justify only action that your signed agreement or applicable law already authorizes; it does not itself amend your signed agreement or make a new obligation in this Notice apply to earlier content or processing.

15.2 No change to this Notice can reduce your royalty rates, change your payment terms, or change the rights you have granted or kept under your signed agreement.

15.3 Every past version stays available in the Portal.

16. Your signed agreement prevails

If this Notice conflicts with your signed agreement (your Master, its Schedules, Rate Card, exhibits, joinders, riders and addenda, your AI-Voice & Digital Replica Consent, and any other signed document with Kavi, or, for short-form, the Creator Terms — Short-form), your signed agreement prevails. Nothing in this Notice limits a right the law gives you that cannot be limited by agreement.