Privacy Policy

1. Introduction

Audibound ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our audiobook creation platform.

This policy complies with the General Data Protection Regulation (GDPR) and other applicable privacy laws.

2. Information We Collect

2.1 Personal Information

We collect the following personal information:

• Account Information: Email address, username, password (encrypted)
• Payment Information: Processed securely through Stripe (we do not store credit card numbers)
• License Information: License keys, activation dates, device information
• Contact Information: Email address for support communications

2.2 Content You Upload

• Audio Files: M4B, MP3, and other audio formats you upload or create
• Cover Art: Images you upload for audiobook covers
• Metadata: Book titles, authors, descriptions, genres
• Text/Scripts: Manuscripts and other content you provide for audiobook production
• Voice Recordings (invitation only): If you are invited to clone your own voice, the recordings you provide and the voice created from them. This is biometric data: we process it only with your explicit consent, use it only for you, and delete it when you delete your account (see section 6).

2.3 Usage Data

• Application Logs: Error reports and performance data. Logs may include your email address so our support team can help you quickly; access is limited to Audibound staff.
• Analytics (only if you accept analytics cookies): Page views, feature usage, session duration and the campaign that brought you to us (identified by an account ID, not your email)
• Device Information: Operating system, app version, device type
• IP Address: For security and fraud prevention

3. How We Use Your Information

We use your information for the following purposes:

• Provide Services: Process audiobook conversions, manage cloud storage, deliver features
• Account Management: Create and maintain your account, authenticate users
• Billing: Process payments, manage subscriptions, send invoices
• Customer Support: Respond to inquiries, troubleshoot issues
• Service Improvement: Analyze usage patterns, fix bugs, develop new features
• Security: Prevent fraud, detect abuse, protect against security threats
• Legal Compliance: Comply with legal obligations, respond to legal requests
• Communications: Send transactional emails (license keys, receipts), product updates (optional)

3.1 AI Processing & Model Training Policy

Audibound does not train proprietary artificial intelligence, machine learning, or voice synthesis models on your uploaded manuscripts, text files, voice files, or completed audiobooks. When using our Cloud or Studio web services, your files are processed securely through third-party service providers and sub-processors to perform automated conversion validation, formatting, voice synthesis, and audio generation. This processing is subject to those providers' respective terms, and we do not claim any ownership rights to your inputs or outputs.

3.2 Local-First Desktop Processing

The Audibound desktop application processes all content files locally on your own machine. Your manuscripts, audio files, and cover art are not uploaded to our servers or stored in our cloud infrastructure when using the desktop application.

4. Legal Basis for Processing (GDPR)

Under GDPR, we process your data based on:

• Contractual Necessity: To provide the services you've subscribed to
• Legitimate Interests: Improve services, prevent fraud, ensure security
• Consent: For marketing communications (you can opt out anytime)
• Legal Obligation: Comply with tax, accounting, and legal requirements

5. Third-Party Services

We use trusted third-party services to provide our platform. Your data may be shared with:

5.1 Payment Processing

• Stripe: Secure payment processing (PCI-DSS compliant)
• We do not store credit card information - Stripe handles all payment data

5.2 Service Providers

To provide our services, we share your content and data with carefully selected service providers, including AI service providers, cloud hosting and infrastructure providers, and security providers. They process your data only on our instructions and to deliver our services. A list of our sub-processors is available on request from [email protected].

5.3 Analytics

• Google Analytics and PostHog: Usage analytics, identified by an account ID rather than your email
• Error reports: if something breaks in your browser or on our servers, a report of the error (what failed, the page, your browser type) is sent to PostHog so we can fix it. This happens whether or not you accept analytics, without cookies and without identifying you.
• Everything else in PostHog and Google Analytics only runs if you accept analytics cookies. You can change your choice at any time in the cookie settings (see our Cookie Policy).

5.4 Email Delivery

• Resend: Transactional email delivery (license keys, receipts, notifications)

6. Data Retention

We retain your data for the following periods:

• Account Data: Until you delete your account. Your name, email address and password are removed as soon as you delete it.
• Cloned Voices and Voice Recordings: Deleted as soon as you delete your account. They are only ever available to you.
• Projects, Manuscripts and Audiobook Files: Until you delete them. If you delete your account, they are kept in anonymised form (no longer linked to you) for up to 12 months so we can investigate misuse of the service, then permanently deleted.
• Payment Records: 7 years (for tax and accounting compliance)
• Application Logs: 90 days (for support, debugging and security)
• Analytics Data: Up to 14 months

Backups of our systems are overwritten on a rolling basis, so deleted data also leaves our backups within 90 days.

7. Your Rights (GDPR)

You have the following rights regarding your personal data:

7.1 Right to Access

Request a copy of all personal data we hold about you by emailing [email protected]. We will respond within one month.

7.2 Right to Rectification

Update or correct your personal information in your account settings.

7.3 Right to Erasure ("Right to be Forgotten")

Delete your account using "Delete My Account" in your account settings, or by emailing [email protected]. What happens to each kind of data is set out in section 6. Payment records are kept for 7 years for legal compliance.

7.4 Right to Data Portability

Download your audiobooks and projects at any time from your account, or email [email protected] for a copy of your personal data in a machine-readable format.

7.5 Right to Object

Opt out of marketing communications, and decline or withdraw analytics cookies in the cookie settings.

7.6 Right to Withdraw Consent

Withdraw consent for data processing at any time (e.g., unsubscribe from marketing emails).

To exercise these rights, contact us at [email protected]. You can also delete your account yourself in your account settings.

8. Data Security

We implement industry-standard security measures:

• Encryption: HTTPS/TLS for data in transit, encryption at rest for stored files
• Password Security: Bcrypt hashing for password storage
• Access Control: Role-based access control (RBAC), 2FA for admin accounts
• Audit Logging: Track access to sensitive user data
• Regular Updates: Security patches and software updates
• Data Minimization: Collect only necessary data, pseudonymize logs

However, no system is 100% secure. You are responsible for maintaining the confidentiality of your account credentials.

9. Cookies and Tracking

We use the following cookies:

• Essential Cookies: Required for authentication and security (cannot be disabled)
• Analytics Cookies: Google Analytics for usage tracking (can be disabled)
• Preference Cookies: Remember your settings (theme, language, etc.)

You can manage cookie preferences through our cookie consent banner or browser settings.

10. Children's Privacy

Our Service is not intended for children under 16 years of age. We do not knowingly collect personal information from children. If you are a parent and believe your child has provided us with personal data, please contact us to have it removed.

11. International Data Transfers

Your data may be transferred to and processed in countries outside your jurisdiction. We ensure adequate safeguards are in place through:

• Standard Contractual Clauses (SCCs) with third-party processors
• GDPR-compliant data processing agreements
• Hosting in EU/EEA regions where possible

12. Changes to Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or platform notification. The "Last Updated" date at the top indicates the most recent revision.

13. Contact Us

For privacy-related questions or to exercise your GDPR rights, contact us at:

Email: [email protected]

You also have the right to lodge a complaint with your local data protection authority.