Privacy Policy

Effective Date: September 8, 2026 Last Updated: September 8, 2026

Mahogany Voice AI Inc. ("Mahogany Voice," "we," "our," or "us") respects your privacy and is committed to protecting the personal data — including voice and biometric data — that you share with us. This Privacy Policy explains how we collect, use, disclose, and protect information when you visit our websites (https://www.mahoganyvoice.com and

https://www.mahoganyvoice.ai), use our AI Songwriter platform, our AI Employee services, or otherwise interact with us (collectively, the "Services").

Please read this policy carefully. Because our Services involve voice recording, voice cloning, and AI-generated content, this policy covers categories of data — including biometric identifiers — that many generic privacy policies do not address. By using the Services, you agree to the practices described here.

1. Who We Are

Mahogany Voice AI Inc. is a Florida corporation.

Mailing Address: 39 Hastings C, West Palm Beach, FL 33417

Privacy Contact: [email protected]

2. Information We Collect

2.1 Information You Provide Directly

Identity data: name, email address, phone number, business/company name

Account credentials

Payment and billing information (processed by our third-party payment processor — we do not store full card numbers)

Communications you send us (support requests, feedback, correspondence)

Content you upload or generate through the Services (lyrics, prompts, style inputs, project files)

2.2 Voice and Biometric Data

Because our AI Songwriter and AI Employee products process spoken input and, where applicable, generate or clone voice characteristics, we may collect:

Voice recordings you submit or record through the Services

Voiceprints or voice-derived identifiers used to enable voice-based features

Metadata associated with voice submissions (timestamps, device/session information)

Voice and voiceprint data are treated as sensitive biometric information. We collect and use this data only with your affirmative consent, obtained at the point of collection, and as described in Section 4 and Section 7 below.

2.3 Information Collected Automatically

IP address, device and browser type, operating system

Pages visited, features used, time and date of visits, referring URLs

Cookies and similar tracking technologies (see Section 8)

2.4 Information from Third Parties

Information from service providers who help us operate the Services (e.g., authentication, analytics, payment processing)

Information from business clients on whose behalf we operate AI Employee services, where applicable to that engagement

3. How We Use Your Information

We use the information we collect to:

Provide, operate, and maintain the Services, including AI Songwriter generation and AI Employee functions

Process voice input and, where you have separately consented, generate voice-based or voice-cloned outputs

Process payments and manage accounts and subscriptions

Respond to inquiries and provide customer support

Improve, secure, and troubleshoot the Services

Send administrative communications, updates, and — where you have opted in — marketing communications

Enforce our Terms and Conditions and comply with legal obligations

Detect, investigate, and prevent fraud, abuse, or security incidents

We do not use your voice recordings or voiceprint data to train models beyond what is necessary to deliver the Service you requested, unless you have given separate, explicit consent for broader model-training use. Where we seek such consent, we will describe the specific training use, retention period, and your right to withdraw consent.

4. Voice Cloning and AI-Generated Content — Special Provisions

Consent is required before any voice cloning feature is applied to your voice or a voice you upload. You confirm that you have the legal right to submit any voice sample you provide (i.e., it is your own voice, or you have obtained the necessary rights/consent from the individual whose voice it is).

We do not knowingly clone or replicate the voice of any identifiable third party without documented consent from that individual.

AI-generated lyrics, prompts, and audio outputs are provided "as-is." You are responsible for independently verifying that any output you intend to publish, distribute, or commercialize does not infringe third-party rights (see also the Terms and Conditions, Section on AI-Generated Content).

You may request deletion of voice samples and derived voiceprints at any time by contacting us at the address in Section 11, subject to Section 6 (Data Retention) and any technical or legal constraints.

5. How We Share Information

We do not sell or rent your personal information, including voice or biometric data, to third parties for their own marketing purposes.

We may share information with:

Service providers who perform functions on our behalf (hosting, cloud storage, payment processing, analytics, customer support tools), under contractual confidentiality and data-protection obligations

Professional advisors (legal, accounting) as necessary to operate our business

Law enforcement or regulators where required by law, subpoena, or legal process, or to protect the rights, property, or safety of Mahogany Voice, our users, or the public

A successor entity in connection with a merger, acquisition, financing, or sale of assets, subject to this policy or a comparable one

Biometric identifiers (voice/voiceprint data) are never disclosed to a third party for the third party's independent use without your separate, explicit consent, except where required by law.

6. Data Retention

We retain personal data, including voice and biometric data, only as long as necessary to:

Fulfill the purpose for which it was collected,

Comply with legal, tax, or accounting obligations, or

Resolve disputes and enforce our agreements.

Biometric identifiers are subject to a defined retention and destruction schedule: absent your extended consent, voice/voiceprint data is retained no longer than is necessary to provide the requested feature, and in any event is deleted upon the earlier of (a) your deletion request, (b) the purpose for which it was collected being satisfied, or (c) 12 months of account inactivity.

7. Your Privacy Rights

Depending on your location, you may have the right to:

Access the personal data we hold about you

Correct inaccurate data

Delete your personal data (including voice/biometric data)

Withdraw consent for voice processing, cloning, or model-training use at any time, without affecting the lawfulness of processing before withdrawal

Object to or restrict certain processing

Data portability, where applicable

Opt out of the sale or "sharing" of personal information (we do not sell personal information; see Section 5)

California residents: You have rights under the California Consumer Privacy Act / California Privacy Rights Act (CCPA/CPRA), including the right to know, delete, correct, and limit use of sensitive personal information (which includes biometric data). To exercise these rights, contact us using the details in Section 11.

Illinois, Texas, and Washington residents: Voice/voiceprint data may qualify as a biometric identifier under Illinois' Biometric Information Privacy Act (BIPA), the Texas Capture or Use of Biometric Identifier Act (CUBI), and/or Washington's biometric privacy law. We collect such data only with informed written consent and adhere to applicable retention and destruction requirements as described in Section 6.

EU/UK/EEA residents (if applicable): Where GDPR or UK GDPR applies, our legal bases for processing include your consent, performance of a contract, and our legitimate interests in operating and securing the Services. You have the rights listed above plus the right to lodge a complaint with your local supervisory authority.

To exercise any of these rights, contact us at [email protected]. We may need to verify your identity before fulfilling a request.

8. Cookies and Tracking Technologies

We use cookies and similar technologies for authentication, essential site functionality, analytics, and performance measurement.

Essential cookies (required for the Service to function, such as login sessions) are set automatically and do not require consent.

Non-essential cookies (analytics, performance, and any future advertising/marketing cookies) require your affirmative opt-in consent before they are set. When you first visit our Sites, you will be shown a cookie consent banner allowing you to accept all, reject all, or customize your preferences by category. You may withdraw or change your consent at any time through the cookie preference settings available via the link in our site footer. If you do not provide consent, only essential cookies will be used, and non-essential cookies will remain off.

You can also control cookies through your browser settings; disabling cookies may limit some functionality of the Services.

9. Children's Privacy

The Services are not directed to, and are not intended for use by, individuals under the age of 18. We do not knowingly collect personal or biometric data from children. If we learn that we have collected such data from a minor without appropriate consent, we will delete it promptly. Parents or guardians who believe we may have collected such data should contact us immediately.

10. Data Security

We implement reasonable administrative, technical, and physical safeguards designed to protect personal and biometric data against unauthorized access, use, alteration, or disclosure. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

11. Third-Party Links

The Services may contain links to third-party websites or services. We are not responsible for the privacy practices or content of those third parties. Review their privacy policies independently.

12. International Data Transfers

If you access the Services from the European Economic Area, United Kingdom, or Switzerland, your information will be transferred to, stored, and processed in the United States. Where required by GDPR or UK GDPR, we rely on appropriate safeguards for such transfers, such as the European Commission's Standard Contractual Clauses (or the UK International Data Transfer Addendum), and we will provide further detail on the safeguards used upon request to [email protected].

13. Do Not Track and Security Incident Notification

Do Not Track. Our Services do not currently respond to "Do Not Track" browser signals. We will update this section if that changes.

Security Incident Notification. In the event of a data security incident affecting your personal or biometric data, we will notify affected individuals and, where required, applicable regulators, without unreasonable delay and in accordance with applicable law, using the contact information on file for your account.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with a revised "Last Updated" date, and, where required by law, we will provide additional notice.

15. Contact Us

Mahogany Voice AI Inc. 39 Hastings C, West Palm Beach, FL 33417 Email: [email protected]

This policy was drafted to be strong and comprehensive for pre-funding operation. It is not a substitute for review by a licensed attorney. Mahogany Voice AI Inc. intends to have privacy/biometric-law counsel formally review this policy — particularly the state-specific biometric consent and retention provisions in Sections 4, 6, and 7 — as part of its funding-round legal diligence process.