FishXpress

Privacy Policy

Last updated October 25, 2026

This policy explains what FishXpress (“we”) collects when you use the FishXpress studio at fishaudio.site and the FishXpress Studio Connector Chrome extension, why we collect it, and what we do with it. We only collect what we need to run the service, and we never sell your data.

What we collect

  • Account details — your email address, the name you give us and your password (stored as a secure hash by our authentication provider). We also record which invite token you redeemed.
  • Your Fish Audio API key — needed to generate speech and clone voices on your own Fish Audio account. It is encrypted (AES-256-GCM) before it is stored and is only used to run your own requests.
  • Voices and scripts — the names and descriptions of voices you create or save, and the scripts you generate.
  • Generated audio — clips you generate are stored for 7 days so you can play and download them, then deleted automatically.
  • Voice samples — audio you upload or record to clone a voice is sent directly to Fish Audio to create the clone. We do not keep a copy.
  • Basic usage records — for example, when a clip was generated or downloaded, so we can show your history and keep the service running reliably.

The Studio Connector extension

The extension exists for one purpose: to connect your Fish Audio account to the FishXpress studio in one click.

  • It only acts when you click “Connect engine” in the studio. At all other times it does nothing.
  • During that connection it opens the Fish Audio sign-in page, reads your Fish Audio session from that page once, and uses it to fetch (or create) an API key on your Fish Audio account. That key is passed to the FishXpress studio in the same browser tab and stored encrypted on our servers, as described above.
  • The extension keeps only a masked hint of the key (for example “ab12••••yz89”) so its popup can show that you are connected.
  • It does not read your browsing history, other websites, or any page outside fish.audio and the FishXpress studio.
  • It does not collect analytics and does not send data anywhere other than Fish Audio and FishXpress.

How we use your data

  • To run the studio: sign you in, generate audio, clone voices and show your history.
  • To keep the service secure and working, and to fix problems.
  • To contact you about your account when necessary.

We do not sell or rent your data, use it for advertising, or use it to train AI models.

Services we rely on

We share data only with the providers that run the service, and only what each one needs:

  • Fish Audio — speech generation and voice cloning, on your own Fish Audio account.
  • Supabase — accounts and database.
  • Cloudflare R2 — temporary storage of generated audio.
  • Vercel — website hosting.

How long we keep it

  • Generated audio: 7 days, then deleted automatically.
  • Account data and your encrypted API key: until you disconnect your engine or ask us to delete your account.

You can disconnect your audio engine at any time in Settings, which deletes your stored API key. To delete your account and all associated data, contact us.

Security

Data is sent over HTTPS, API keys are encrypted at rest, and access to your data is restricted to your own account.

Contact

Questions or requests about your data: our support page.