Privacy Policy

1. Overview

Ave Audio ("we", "us", "our") respects your privacy. This policy explains what information we collect, how we use it, and your rights regarding your data. By using Ave Audio, you consent to the practices described here.

2. Information We Collect

Account Information

When you create an account, we collect your name, email address, and authentication credentials. If you sign in with Google, we receive your name, email, and profile picture from Google. We store a hashed version of your password if you use email/password authentication.

Payment Information

Payments are processed by Stripe. We do not store your credit card number, CVV, or full card details. Stripe provides us with a customer ID and transaction records. See Stripe's Privacy Policy for details on their data practices.

Content You Create

We store the prayer text you write, the audio files generated from your text, and your playlist configurations. Generated audio files are stored on Amazon Web Services (AWS) S3 servers in the United States.

Usage Data

We collect anonymous analytics through Vercel Analytics, including page views, session duration, and device type. We do not use third-party advertising trackers.

3. How We Use Your Information

• To provide and operate the Service (account management, audio generation, playlist features)
• To process payments and manage your credit balance
• To send transactional emails (welcome, verification, purchase receipts, review notifications) via Resend
• To improve the Service through anonymous usage analytics
• To enforce our Terms of Service and prevent abuse

We do not sell your personal information to third parties. We do not use your data for advertising purposes.

4. Third-Party Services

We use the following third-party services that may process your data:

5. Cookies

We use essential cookies for authentication (session management via NextAuth.js). We do not use marketing or advertising cookies. Vercel Analytics uses privacy-focused, cookieless tracking.

6. Data Retention

Your account data and generated content are retained for as long as your account is active. If you delete your account, we will remove your personal information and generated audio files within 30 days. We may retain anonymized usage data and transaction records as required by law.

7. Data Security

We protect your data with HTTPS encryption (TLS 1.3), secure session tokens, bcrypt password hashing, and Content Security Policy headers. Payment information is handled entirely by Stripe and never touches our servers. Audio files are served via time-limited presigned URLs.

8. Your Rights

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate information via your account settings
• Delete your account and associated data
• Export your generated audio files (via the download feature)
• Withdraw consent for non-essential data processing

To exercise these rights, contact us at support@aveaudioai.com.

9. Children's Privacy

The Service is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us and we will delete it.

10. Changes to This Policy

We may update this policy to reflect changes in our practices or legal requirements. We will notify registered users of material changes via email. The "last updated" date at the top of this page indicates when the policy was last revised.

11. Contact

For privacy questions or data requests, contact us at support@aveaudioai.com.