Data Processing Addendum

Last updated: March 2026

This Data Processing Addendum ("DPA") supplements the SoundBridge Terms of Service and applies when SoundBridge processes personal data on behalf of a customer organization in connection with the SoundBridge service.

1. Roles

For customer content and listener-related processing, the customer acts as the controller and SoundBridge acts as the processor. SoundBridge may engage sub-processors strictly as needed to provide the service.

2. Subject Matter And Duration

The subject matter of processing is live multilingual translation, listener delivery, account administration, usage metering, and support. Processing continues for the duration of the customer relationship unless otherwise required by law.

3. Types Of Data

• Account and organization contact data
• Listener access metadata
• Live audio and generated transcripts/translations processed in real time
• Voice clone sample files when a customer explicitly requests clone creation
• Operational logs and support records

4. Processing Instructions

SoundBridge processes customer data only on documented instructions from the customer, as reflected in product configuration, service use, and support requests.

5. Security Measures

• TLS encryption for traffic in transit
• Role-based access control in the portal
• Token-based listener access
• Access logging and operational monitoring
• Vendor-scoped processing only for required service functions

6. Sub-processors

SoundBridge currently uses the following sub-processors:

• ElevenLabs — Speech-to-text, text-to-speech, speech-to-speech, and voice cloning
• AWS Translate — Text translation between languages
• Stripe — Payment processing and subscription management
• Supabase — Authentication and database infrastructure
• Resend — Transactional email delivery

Customers may request current sub-processor information by contacting support.

7. Deletion And Return

Real-time audio is not retained after delivery except where sample files are explicitly uploaded for clone creation. Upon termination, customer account data is deleted or returned in accordance with the Terms, applicable law, and operational retention obligations.

8. Assistance

SoundBridge will provide reasonable assistance for data subject requests, security incidents, and customer compliance needs to the extent required by applicable law.

9. Contact

For DPA requests, customer-specific terms, or compliance questions, contact support@soundbridge.ai.