Is Fish Audio Safe? Verified with Official Information | Who Should Use It and When to Avoid It

Hi, I’m Hoda!

Fish Audio is a popular service known for expressive AI text-to-speech and voice cloning. At the same time, many people have concerns: “Is it OK to upload my own voice?” “Can I trust the company behind it?” “Is it fine to use for monetized videos?”

So in this article, I reviewed Fish Audio’s official website, privacy policy, terms of service, Enterprise page, and developer documentation to organize its safety. The content is based on official information as of October 26, 2026.

Bottom Line: Generally Fine to Use, but Choose What You Input

Fish Audio is a legitimate service run by a real company. The terms and privacy policy name a US company, Hanabi AI Inc., while the seller information on the Japanese-language site names a Tokyo company, 39・AI合同会社 (a Japanese limited liability company, or godo kaisha). The company name differs depending on where you look, which is worth noting (details below), but both have published terms, sales conditions, and contact points. Within the scope of what I checked, I found no reports of a serious data breach at the hosted service.

For creator uses such as YouTube narration, game character voices, and video production, I think it is fine to use as long as you keep these four points in mind.

• Don’t upload highly confidential audio or scripts (under the terms, content you input may be used to train and improve AI models)
• If you monetize, use a paid plan and also check your rights to the voice you use
• Clone only your own voice or a voice you have written permission to use, and keep the voices you create private
• If you handle company confidential information or customer audio, consider Enterprise, which offers options such as Zero Data Retention

Fish Audio Safety Checklist

Here is the overall picture in a table first. The ratings are my own judgment after reading the official information.

Items marked “Caution” don’t mean you can’t use the service. They mean there are points to watch depending on what you use it for. I’ll go through them in order.

The Operating Company and Track Record

Fish Audio is a brand name, and the service grew out of the open-source speech synthesis model “Fish Speech.” The name of the operating company differs depending on where you look.

Hanabi AI Inc. can also be confirmed by name in publicly available US state registration records, so it is a real legal entity. However, I could not find an independent corporate site that introduces only Hanabi AI Inc.

How the three company names are related (a name change, or a parent company and a Japanese entity) is not explained on the official pages, and I could not confirm it for this article. So I won’t assert a relationship here.

For users in Japan, one reassuring point is that the Japanese-language site has a page for the legal notice based on Japan’s Act on Specified Commercial Transactions, listing the seller’s name, address, person responsible for sales, contact information (support@39-ai.com), and payment methods (credit card, Apple Pay, Google Pay, PayPay, and convenience store payment). On the other hand, the notice states that purchases can’t be returned after payment. Also note that the substance of the contract, such as how AI training is handled, the governing law (California law), and arbitration, is based on the terms written for Hanabi AI Inc. Before signing up for a paid plan, it’s a good idea to read the legal notice page (fish.audio/ja/japan-legal-information/) as well.

The official site says it is used by over 8 million users, and introduces integrations with companies such as HeyGen, Retell AI, Sanas, and LiveKit. In July 2026, it announced a $52 million seed round, so it is run by a company that has already raised funding rather than being a personal hobby project.

A track record and funding don’t mean its data handling can be called safe. Still, it is clearly not a “suspicious unknown service.”

How Personal Information Is Handled (Privacy Policy)

The privacy policy took effect on August 28, 2024. Here I focus on the points users should know.

Information Collected

This covers registration information such as email address and name, text you enter and files you upload (user content), IP address and device information, and usage analytics data. For payment information, the policy says Stripe collects and processes card information, and lists items collected on Fish Audio’s side such as card type, last four digits, and billing address.

It Does Not Sell Personal Data

The policy states clearly that it “does not sell personal data and has not sold it in the past 12 months.” However, it lists categories of parties it shares information with, such as service providers, advertising partners, analytics partners, and business partners. You can think of this as a scope of sharing comparable to a typical web service.

Cookies and Advertising

The policy explains that it uses cookies for analytics and advertising, and it does not respond to the browser’s “Do Not Track” setting. If this concerns you, you can control cookies from Fish Audio’s cookie settings page (fish.audio/setting) or from your browser settings.

Retention Periods Are Not Fixed

For retention, profile and login information is kept while the account exists, payment data is kept as long as needed for processing, and content is kept “as long as necessary for the system to operate properly.” No fixed period, such as a number of days until deletion, is stated. It’s good to understand this together with the next section on AI training.

Exercising Rights Such as Deletion

Rights such as access, correction, and deletion are exercised by emailing support@fish.audio. For users in the EU, the UK, Brazil, South Korea, and other regions, there are also regional addenda.

Will the Audio and Text You Input Be Used for AI Training?

This is the most important point when considering Fish Audio’s safety.

The terms of service (effective August 18, 2024) provide that usage data and content may be used to develop, train, and improve the AI and machine learning models included in Fish Audio’s services, and that the user authorizes processing for that purpose.

For content you post, you grant Fish Audio a “royalty-free, perpetual, sublicensable, irrevocable, worldwide” license. Ownership itself does not transfer; you are granting a license. The terms also say that even if you delete your account, the content may not be completely removable from records, and that posts you made public may remain after the account is deleted.

How to Delete Your Fish Audio Account | What to Check Before Deleting and Alternatives

In practical terms, it is safest to think of it this way:

• Narration scripts you are fine making public, your own voice, and audio for your own original characters are easy to use without problems
• Don’t upload unpublished scripts, audio from customers or business partners, employees’ voices, or meeting recordings
• If you must handle them, sign a separate contract for the Enterprise plan described below (with Zero Data Retention and more)

Where Data Is Stored and Enterprise Safeguards

The Enterprise page describes the following data handling for businesses.

• Storage location: The US by default, using Google Cloud and Cloudflare R2. Inference is served from edge locations in the US and Asia-Pacific (including Tokyo)
• Zero Data Retention: Can be enabled under an enterprise contract, so that request text and audio are not written to disk
• Self-hosting: You can choose to run the model in your own VPC, on-premises, or in an air-gapped environment
• HIPAA: Supports HIPAA-aligned configurations, and a BAA can be signed for eligible healthcare workloads
• Access control: Team-level and workspace-level role management (RBAC), and SSO supports Google and GitHub OAuth

Security certification needs some care. The Enterprise column on the pricing page says “SOC2 Compliance,” but the Enterprise page explains that the SOC 2 Type II audit is currently in progress and that the report will be provided under an NDA once it is complete. So at this point you can’t say it “has obtained SOC 2,” and you should confirm the status until the audit is complete.

Also, the standard plans for individuals and small teams (Free, Plus, Pro, and Max) are not described as including Zero Data Retention. Understand this feature as being for Enterprise.

If a company handles customer or employee voice recordings, check your internal personal data handling rules and consult your legal and IT departments, including the fact that data is processed and stored in the US. A voice can count as personal information when it can identify an individual.

Security Incidents and Reputation

Within the scope of what I checked, I found no news reports or official announcements of a large-scale data breach at Fish Audio’s hosted service. However, “I didn’t find one” is not proof that none has occurred, so check the latest information before adopting it.

Separately, the CVE database lists a medium-severity vulnerability, published in July 2024, for an open-source repository related to Fish Audio (Bert-VITS2). That concerns self-hosted open-source software and is separate from the hosted Fish Audio service. If you self-host the models yourself, it is a good idea to keep up with repository updates.

Voice Cloning Safety (Rights and Misuse)

Voice cloning is one of Fish Audio’s big attractions, and also a feature that easily causes trouble if used wrongly. The official developer documentation sets out these rules:

• Clone only your own voice, or the voice of someone who has given you written permission
• Don’t use audio from the internet without permission
• Don’t use the voice of a celebrity or public figure without permission

Voice Visibility

For the voices you create, you can choose private, unlisted, or public. If you make a voice public, it is listed in the voice library and anyone can use it. For a clone of your own voice, it is safest to keep it private unless you have a specific reason.

Be Careful with Commercial Use of Voice Library Voices

Fish Audio has over 2 million community voices. This is convenient, but not every voice in the library is necessarily licensed for commercial use. Avoid using voices that resemble celebrities, voice actors, or existing characters in monetized content. Unauthorized use of a voice can raise issues such as right of publicity and likeness rights. If you need a legal judgment, consult a professional.

Disclosing AI-Generated Content

The terms prohibit using generated content in a way that makes people believe it was “entirely created by a human.” They also encourage voluntarily disclosing that something was made with AI. When using it for something like a YouTube video, adding a short note in the description is a good precaution.

Notes on Commercial Use

Commercial use is an area where Fish Audio’s wording is inconsistent.

• The Free plan card on the pricing page shows “Commercial use”
• The FAQ on the same page explains that the free plan is only for personal, non-commercial projects
• The terms of service also say that personal and non-commercial use is the rule, and that users of paid plans can obtain a license for commercial use

Since the terms and the FAQ agree, it is safest to assume that you should use a paid plan if you monetize. Also note that the pricing page FAQ says commercial use on paid plans applies to verified voices that you own. Voices from the library and cloned voices of other people require separate rights checks.

Account and Payment Safety

• Card information is processed by the payment processor Stripe
• Don’t reuse passwords, and if you sign in with a service such as Google, turn on two-step verification on that account
• Don’t share your API key with others or write it into code or public repositories (the terms also prohibit selling or transferring API keys)
• Paid plans renew automatically, and under the terms, canceling partway through a period does not get you a prorated refund. Keep track of your renewal date

Points to Know in the Terms of Service

These are mostly legal matters, but it is worth reading them once if you are considering business use or monetization.

It is worth keeping in mind that the terms and privacy policy are still dated August 2024. New features such as image and video generation have since been added, so check the latest versions before using it.

Checklist for Using It Safely

1. Start with a script you wouldn’t mind making public. Don’t input confidential audio or scripts
2. If you monetize, use a paid plan and check your rights to the voice you use (your own voice, or permission obtained)
3. Clone only your own voice or a voice with written permission. After creating it, set its visibility to private
4. Don’t use voices that resemble celebrities, voice actors, or existing characters in commercial content
5. Label generated audio as AI-made, or at least don’t let people mistake it for a human voice
6. Manage your API key and account properly, and keep track of your renewal date
7. If using it in a company, check with your legal and IT departments, then review the Enterprise contract terms
8. Before signing up for a paid plan, check the legal notice (seller, payment methods, no returns)
9. To cancel your account or delete data, request it from your registered email address at support@fish.audio

Judgment by Use Case

Pros and Cons

Frequently Asked Questions

Is Fish Audio a suspicious service?

No. The operating company is real, and it publishes terms, a privacy policy, a support contact, and a legal notice for Japan based on the Act on Specified Commercial Transactions, and it has a track record of adoption by companies. It is not a suspicious service. However, use it with an understanding of the cautions in the terms, such as use for AI training.

Why is the operating company listed as both Hanabi AI Inc. and 39・AI合同会社?

The terms and privacy policy name Hanabi AI Inc., the footer of the Japanese-language site and the legal notice name 39・AI合同会社, and the corporate site and other places name 39 AI, Inc. The relationship among the three companies is not explained on the official pages, so I could not confirm it for this article. The fact that a domestic company name and address are published as the sales contact for Japan can be seen as a positive. If you are concerned, the surest approach is to ask before signing up, at support@fish.audio or support@39-ai.com.

Will the audio and text I input be used for AI training?

Under the terms, usage data and content may be used to train and improve AI models. Don’t input anything highly confidential. If you need strict data management, check Zero Data Retention and similar options in an Enterprise contract.

Can I use audio made on the free plan in monetized videos?

I don’t recommend it. The card on the pricing page says commercial use, but the FAQ on the same page and the terms of service say the free plan is only for personal, non-commercial use. If you monetize, use a paid plan.

Is it OK to clone my own voice?

If it is your own voice, yes. Setting its visibility to private means you don’t have to worry about others using it. For someone else’s voice, only do so when you have written permission.

What if I want to delete my account or data?

The privacy policy says requests such as deletion are accepted by email to support@fish.audio. However, the terms also say that content may not be completely removable from records, and that posts you made public may remain. If you have created cloned voices, noting their visibility, IDs, and URLs before deleting will make the request go more smoothly.

Can I use it with confidence outside the United States?

The official site offers a Japanese display, but the main text of the privacy policy and terms of service is written in English. The policy has several regional addenda, but I could not find one for Japan. For business use, check with your internal legal and IT departments, keeping in mind that data is stored and processed in the US by default.

Summary

Fish Audio is an AI voice service with a track record, run by a real company. The company name differs between the provider in the terms (Hanabi AI Inc.) and the seller on the Japanese-language site (39・AI合同会社), which is worth noting, but the sales conditions for Japan are published. It states that it does not sell personal information, and the official guide covers rights for cloned voices.

On the other hand, there are points to know in advance: multiple company names are used, the terms allow input data to be used for AI training, data is stored in the US by default, SOC 2 Type II is still under audit, and the wording on commercial use of the free plan is inconsistent.

So for creator uses with scripts you are fine making public and your own voice, you can use it with confidence as long as you use a paid plan and confirm permission when cloning. Only if you handle customer audio or confidential scripts should you consider individual arrangements such as Enterprise.

Official Sources Referenced (Checked October 26, 2026)

• Fish Audio official website: https://fish.audio/
• Privacy policy (effective August 28, 2024): https://fish.audio/privacy/
• Terms of service (effective August 18, 2024): https://fish.audio/terms/
• Pricing page: https://fish.audio/plan/
• Legal notice based on Japan’s Act on Specified Commercial Transactions (Japanese-language site): https://fish.audio/ja/japan-legal-information/
• 39 AI, Inc.: https://39-ai.com/
• Enterprise page: https://fish.audio/enterprise/
• Voice cloning best practices: https://docs.fish.audio/developer-guide/best-practices/voice-cloning
• Managing voices (visibility): https://docs.fish.audio/features/manage-voices