Privacy Policy

1. Introduction

AudiBound ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our audiobook creation platform.

This policy complies with the General Data Protection Regulation (GDPR) and other applicable privacy laws.

2. Information We Collect

2.1 Personal Information

We collect the following personal information:

• Account Information: Email address, username, password (encrypted)
• Payment Information: Processed securely through Stripe (we do not store credit card numbers)
• License Information: License keys, activation dates, device information
• Contact Information: Email address for support communications

2.2 Content You Upload

• Audio Files: M4B, MP3, and other audio formats you upload or create
• Cover Art: Images you upload for audiobook covers
• Metadata: Book titles, authors, descriptions, genres
• Text/Scripts: Content you input for AI narration (future feature)

2.3 Usage Data

• Application Logs: Error reports, performance metrics (pseudonymized - no email addresses)
• Analytics: Page views, feature usage, session duration (using user IDs, not emails)
• Device Information: Operating system, app version, device type
• IP Address: For security and fraud prevention

3. How We Use Your Information

We use your information for the following purposes:

• Provide Services: Process audiobook conversions, manage cloud storage, deliver features
• Account Management: Create and maintain your account, authenticate users
• Billing: Process payments, manage subscriptions, send invoices
• Customer Support: Respond to inquiries, troubleshoot issues
• Service Improvement: Analyze usage patterns, fix bugs, develop new features
• Security: Prevent fraud, detect abuse, protect against security threats
• Legal Compliance: Comply with legal obligations, respond to legal requests
• Communications: Send transactional emails (license keys, receipts), product updates (optional)

3.1 AI Processing & Model Training Policy

Audibound does not train proprietary artificial intelligence, machine learning, or voice synthesis models on your uploaded manuscripts, text files, voice files, or completed audiobooks. When using our Cloud or Studio web services, your files are processed securely through third-party service providers and sub-processors to perform automated conversion validation, formatting, voice synthesis, and audio generation. This processing is subject to those providers' respective terms, and we do not claim any ownership rights to your inputs or outputs.

3.2 Local-First Desktop Processing

The Audibound desktop application processes all content files locally on your own machine. Your manuscripts, audio files, and cover art are not uploaded to our servers or stored in our cloud infrastructure when using the desktop application.

4. Legal Basis for Processing (GDPR)

Under GDPR, we process your data based on:

• Contractual Necessity: To provide the services you've subscribed to
• Legitimate Interests: Improve services, prevent fraud, ensure security
• Consent: For marketing communications (you can opt out anytime)
• Legal Obligation: Comply with tax, accounting, and legal requirements

5. Third-Party Services

We use trusted third-party services to provide our platform. Your data may be shared with:

5.1 Payment Processing

• Stripe: Secure payment processing (PCI-DSS compliant)
• We do not store credit card information - Stripe handles all payment data

5.2 Cloud Storage

• Bunny CDN: Secure cloud storage for your audiobook files
• Files are stored in encrypted form

5.3 AI Services (Future)

• Third-party AI Providers: For voice synthesis and narration
• Your text/scripts are processed to generate audio, then deleted

5.4 Analytics

• Google Analytics: Usage analytics (pseudonymized - uses user IDs, not emails)
• You can opt out using browser extensions or cookie settings

5.5 Email Delivery

• Resend: Transactional email delivery (license keys, receipts, notifications)

6. Data Retention

We retain your data for the following periods:

• Account Data: Until you delete your account, plus 30 days for backup retention
• Audiobook Files: Until you delete them or your subscription ends
• Payment Records: 7 years (for tax and accounting compliance)
• Application Logs: 90 days (for debugging and security)
• Analytics Data: 26 months (Google Analytics default)

After these periods, data is permanently deleted from our systems and backups.

7. Your Rights (GDPR)

You have the following rights regarding your personal data:

7.1 Right to Access

Request a copy of all personal data we hold about you. Use the "Export My Data" tool in your account settings.

7.2 Right to Rectification

Update or correct your personal information in your account settings.

7.3 Right to Erasure ("Right to be Forgotten")

Delete your account and all associated data. Use the "Delete My Account" tool in account settings. Note: Payment records may be retained for legal compliance (7 years).

7.4 Right to Data Portability

Export your audiobook files and metadata in a machine-readable format.

7.5 Right to Object

Opt out of marketing communications or analytics tracking.

7.6 Right to Withdraw Consent

Withdraw consent for data processing at any time (e.g., unsubscribe from marketing emails).

To exercise these rights, contact us at: [email protected] or use the GDPR tools in your account settings.

8. Data Security

We implement industry-standard security measures:

• Encryption: HTTPS/TLS for data in transit, encryption at rest for stored files
• Password Security: Bcrypt hashing for password storage
• Access Control: Role-based access control (RBAC), 2FA for admin accounts
• Audit Logging: Track access to sensitive user data
• Regular Updates: Security patches and software updates
• Data Minimization: Collect only necessary data, pseudonymize logs

However, no system is 100% secure. You are responsible for maintaining the confidentiality of your account credentials.

9. Cookies and Tracking

We use the following cookies:

• Essential Cookies: Required for authentication and security (cannot be disabled)
• Analytics Cookies: Google Analytics for usage tracking (can be disabled)
• Preference Cookies: Remember your settings (theme, language, etc.)

You can manage cookie preferences through our cookie consent banner or browser settings.

10. Children's Privacy

Our Service is not intended for children under 16 years of age. We do not knowingly collect personal information from children. If you are a parent and believe your child has provided us with personal data, please contact us to have it removed.

11. International Data Transfers

Your data may be transferred to and processed in countries outside your jurisdiction. We ensure adequate safeguards are in place through:

• Standard Contractual Clauses (SCCs) with third-party processors
• GDPR-compliant data processing agreements
• Hosting in EU/EEA regions where possible

12. Changes to Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or platform notification. The "Last Updated" date at the top indicates the most recent revision.

13. Contact Us

For privacy-related questions or to exercise your GDPR rights, contact us at:

Email: [email protected]

You also have the right to lodge a complaint with your local data protection authority.