Fineshare

GDPR overview

The privacy policy, last updated 7 April 2022, names FineShare Co., Ltd. as data controller and devotes a full section to GDPR rights for EEA residents. It lists its legal bases (contract performance, consent, legitimate interests, payment processing, legal obligations) and grants access, rectification, erasure, objection, restriction, portability and withdrawal of consent, with the right to complain to a supervisory authority. A separate CCPA section covers Californian residents and states that personal information is not sold. Implementation stops there: no Article 27 EU representative and no data protection officer are designated, no Data Processing Agreement is offered, no subprocessor list is published, and the only contact route is the generic support address. The site never claims GDPR compliance in so many words.

Who owns the data?

The terms place ownership and responsibility on the user. By uploading content you confirm you own it or hold the rights to use it, and the example given is explicit: uploading someone else's voice recording requires the voice owner's permission before cloning or synthesising it. Fineshare states it does not proactively monitor user content and that users are responsible for the files they upload and generate, while reserving the right to remove material that breaches the terms or the law. The DMCA policy adds that content, data and models on the platform come from the community and that Fineshare accepts no liability for uploaded data. Intellectual property in the software itself stays with FineShare Co., Ltd., which grants only a limited, revocable licence.

Reuse rights

No clause on the site claims ownership of the audio, music or video you generate, and none restricts what you may do with your own outputs, so paid users can reuse their results without asking permission. The limits are placed elsewhere: you must genuinely hold the rights to whatever you upload, you must not impersonate people, reproduce someone else's copyrighted material, or infringe rights of publicity and likeness. The free tier is treated differently by the EULA, which allows a watermark to be added to videos processed with a free licence, and the software licence itself is personal, non-transferable and cannot be resold or redistributed. Vora, by contrast, advertises watermark-free video output.

Data retention & training

Hosting summary

Fineshare says little about hosting and nothing about geography beyond one point. The privacy policy warns that information, including personal data, may be transferred to and maintained on computers located outside your state, province or country, where data protection law may differ from your own. It then states plainly that users located outside the United States have their data transferred to the United States and processed there, and that using the service constitutes agreement to that transfer. No hosting provider, region, datacentre or country other than the United States is named, and no regional option is offered to customers. There is no trust or security page, no certification such as SOC 2 or ISO 27001, and no subprocessor list; only Google Analytics and the payment processor Paddle are identified, in the cookie table. Note that the domain resolves to a Cloudflare anycast address, which reflects the content delivery network in front of the site and says nothing about where data is actually processed.