Privacy Policy

Effective February 12, 2025

1. What Canto Does

Canto transforms documents and web articles into audio. The Canto Web Clipper browser extension lets you save articles from the web to your Canto account for text-to-audio conversion.

2. Data We Collect

We collect only what is necessary to provide the service:

  • Account information – email address and name provided at sign-up, used for authentication and account management.
  • Clipped content – when you use the Web Clipper, the article text, title, and page URL are sent to our servers so we can generate audio for you.
  • Authentication tokens – the Web Clipper reads your Canto session cookie to authenticate API requests. This token is never stored by the extension; it is read on-demand and sent only to Canto servers.
  • Uploaded documents – files you upload to Canto for audio conversion are stored on our servers.

3. How We Use Your Data

  • To provide, maintain, and improve the Canto service.
  • To generate audio from your documents and clipped articles.
  • To authenticate you and secure your account.
  • To send transactional emails (e.g., password resets). We do not send marketing email.

4. Data We Do Not Collect

  • We do not track your browsing history. The Web Clipper only accesses the page you explicitly choose to clip.
  • We do not collect health, financial, or location data.
  • We do not monitor clicks, keystrokes, or other user activity.
  • We do not use analytics or tracking SDKs in the browser extension.

5. Data Sharing

We do not sell, rent, or trade your personal data. Data is shared only with:

  • Infrastructure providers – hosting (Vercel), database (Neon), and payment processing (Stripe), solely to operate the service.
  • AI providers – document text is sent to third-party AI services for text-to-speech and content extraction. This data is not used by these providers for model training.

We do not use or transfer user data for advertising, creditworthiness determination, or lending purposes.

6. Data Retention

Your content and account data are retained for as long as your account is active. If you delete your account, we will delete your data within 30 days, except where retention is required by law.

7. Security

We use HTTPS for all data in transit, encrypt sensitive data at rest, and follow industry-standard practices to protect your information. Access to production systems is restricted to authorized personnel.

8. Your Rights

You may at any time:

  • Export your data by contacting us.
  • Delete your account and all associated data.
  • Uninstall the browser extension to revoke all extension permissions immediately.

9. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via the app or email. Continued use of the service after changes constitutes acceptance.

10. Contact

For privacy questions or data requests, email support@getcanto.com.