Privacy Policy

1. Introduction

At Audiocollab, we respect your privacy and are committed to protecting the audio assets and personal data you entrust to us. This Privacy Policy details how we collect, store, and safeguard your information.

2. Information We Collect

• Account Information: Your email address, producer or artist display name, and optional avatar URL.
• Audio and Production Assets: Master mixes, contributor audio stems, DAW session files, waveform data, and timestamped feedback comments uploaded to Projects.
• Technical Metadata: Audio format specs (duration, sample rate, bit depth, channel layout) extracted via FFmpeg/ffprobe to verify playback integrity.

3. Security and Architecture Standards

We implement architectural defenses to safeguard your creative work:

• Firebase Authentication (ADR 0006): User authentication and TOTP Multi-Factor Authentication (2FA) are managed via Google Cloud Identity Platform. No plain-text passwords or cryptographic secret keys exist in our database.
• S3-Compatible Object Storage (ADR 0007): Audio files are stored using random UUID keys (never original file names) in encrypted S3 object storage (DreamObjects / Cloudflare R2 / AWS S3).
• Signed URLs: Direct audio playback and downloads are served through temporary, cryptographically-signed URLs that expire after short windows, preventing unauthorized hotlinking.

4. Third-Party Service Providers

We partner with trusted third-party cloud infrastructure providers to deliver Audiocollab services:

• Firebase / Google Cloud: Secure identity management and session token verification.
• S3 Object Storage: Encrypted audio storage and CDN streaming previews.
• Stripe: PCI-DSS Level 1 compliant payment processing and subscription billing. No raw credit card numbers touch our servers.
• Resend: Secure delivery of transactional notifications, collaboration invites, and security verifications.

5. GDPR & CCPA Compliance, Data Portability & Right to Erasure

You maintain total control over your personal data. Under GDPR, CCPA, and global privacy standards:

• Right to Access & Rectify: You can view and update your display name and email address at any time in Account Settings.
• Right to Data Portability (Download My Data): You can export a comprehensive machine-readable JSON copy of all your account data, project records, and comments via Account Settings.
• Right to Erasure (Account Deletion): When you delete your account, all Projects owned by you and all uploaded files are permanently deleted. Any feedback or stem contributions in other users' Projects are fully anonymized to "Deleted user" with all personal identifiers purged.
• Zero Audio Tracking / AI Training: Your audio files and intellectual property are never monitored, fingerprinted for advertising, or used to train generative AI models.

6. Contact Data Privacy Officer

For data protection questions or privacy requests, please email us at privacy@audiocollab.com.