AudioAvenue Privacy Policy

1. Introduction

This Privacy Policy explains how AudioAvenue ("we", "our", "us") collects, uses, shares, and protects your personal information when you use our AI-powered platform ("Service").

We comply with applicable privacy laws, including:

• GDPR (EU/EEA)
• CCPA/CPRA (California)
• Other global data protection standards

Your privacy, data ownership, and trust are central to how we operate.

2. Information We Collect

2.1 Account Information

• Name
• Email address
• Authentication credentials (passwords are salted & hashed using industry-standard methods)
• Google Authentication profile data (name, email, profile photo — if you choose to authenticate with Google)

2.2 User Content & AI Data

This includes any content you upload, enter, or generate, such as:

• Prompt projects & scene descriptions
• Creative preferences & style settings
• Generated outputs
• Model parameters & version history
• Workspace and collaboration activity
• Media or text you manually upload

AI Interaction Logs

We collect limited interaction metadata:

• Prompts sent to AI models
• Generated responses
• Tokens, timestamps, and model type

2.3 Technical Information

Collected automatically:

• Device, OS, and browser type
• IP address
• General location (city/region only)
• Error logs & diagnostic data
• Cookies, local storage, and analytics events (via Google Analytics)

3. How We Use Your Information

3.1 Service Delivery & Functionality

• Generate AI prompts and creative outputs
• Maintain your workspace, projects, and account
• Ensure API/model functionality and platform reliability

3.2 Improving the Service

We may use aggregated, anonymized patterns to improve the product.

3.3 Customer Support

• Diagnose issues
• Handle billing or account support

3.4 Security & Abuse Prevention

• Detect spam, fraud, or abuse
• Maintain platform integrity and safety

3.5 Communication

We may send:

• Account notices
• Security alerts
• Product updates
• Optional marketing emails (you can opt out at any time)

4. Legal Bases for Processing (GDPR)

We process your information under:

• Contract necessity — operating your AudioAvenue account
• Legitimate interests — security, analytics, and service improvement
• Consent — certain cookies, marketing emails, optional training data
• Legal obligations — compliance with regulatory requests

5. How We Share Information

We share information only in the following situations:

5.1 Subprocessors (Service Providers)

We use trusted service providers under strict data-processing agreements:

Current Subprocessors:

1. Cloudflare CDN — content delivery, security, edge caching
2. Google Analytics — aggregated, pseudonymous analytics data
3. Google Authentication (OAuth) — identity and login services
4. Cloud hosting provider(s) (e.g., Vercel/AWS/GCP) — infrastructure
5. AI Model Providers (United States) — prompt processing for generation

An up-to-date list of subprocessors is maintained here: https://www.audioavenue.com/subprocessors

5.2 Legal Requirements

We may disclose information if required by:

• Law or regulation
• Court order
• To protect users or prevent harm

5.3 Business Transfers

If we merge, acquire, or sell assets, your data will remain protected under this Policy.

6. Data Minimization & Purpose Limitation

We collect only data necessary to operate AudioAvenue and do not process data for purposes unrelated to those described in this policy.

7. User Content Ownership

You retain full ownership of:

• Your prompts
• Your uploaded media
• Your generated outputs
• All creative projects

You grant us only the minimal license necessary to operate the Service (storing, processing, displaying your content to you and your collaborators).

8. AI Model Providers (United States)

When you generate content, your prompts may be sent to AI model providers located in the United States for the sole purpose of generating responses.

• Providers may not use your content to train their models unless you opt in.
• All data is processed under strict confidentiality and security requirements.

9. Data Retention

• Account data — deleted upon account closure
• Projects & content — you may delete at any time
• AI logs — retained for up to 180 days, then anonymized
• Backups — encrypted and automatically purged within 30–90 days
• Analytics — aggregated & anonymized

10. Your Rights

Depending on your location (GDPR, CCPA/CPRA), you may:

• Access your data
• Correct inaccurate data
• Request deletion
• Download your data (portability)
• Restrict processing
• Object to certain uses
• Opt out of "selling" or "sharing" (CPRA)
• Withdraw previously given consent

To request your rights, contact: [email protected]

We respond within 30 days.

11. Cookies & Tracking Technologies

We use:

• Essential cookies — authentication, security
• Preference cookies — saving settings
• Analytics cookies — via Google Analytics
• LocalStorage — saving non-personal settings

You may disable cookies in your browser. Essential cookies are required for login and basic functionality.

12. International Data Transfers

Your data may be processed in:

• United States
• EU/EEA
• Regions where our subprocessors operate

Transfers are protected by:

• Standard Contractual Clauses (SCCs)
• Data Processing Agreements
• Industry-standard security controls

13. Data Security

We implement multiple layers of security:

• Encryption in transit (TLS)
• Encryption at rest
• Strict access controls
• Network-level protections (Cloudflare)
• Regular audits & monitoring

No system can guarantee 100% security, but we take all reasonable measures to protect your data.

14. Data Breach Notification

If a data breach occurs that may affect your rights, we will:

• Notify you without undue delay
• Notify relevant regulatory authorities
• Provide information on mitigation steps

15. Automated Decision-Making

We do not perform automated decision-making that produces legal or similarly significant effects on users.

16. Children's Privacy

AudioAvenue is not intended for children under 13. We do not knowingly collect information from children.

If a child has provided data, contact us to request deletion.

17. Changes to This Policy

We may update this Privacy Policy. Material changes will be communicated via:

• Email
• In-app notifications
• Updated "Last updated" date

18. Contact Us

For privacy questions or requests: