Privacy Policy – Audioleaf

1. Introduction

Audioleaf (“we”, “us”) is committed to protecting personal data in accordance with the EU General Data Protection Regulation (GDPR).

This Privacy Policy explains how personal data is processed, for what purposes, and under which legal roles.

2. Roles and Responsibilities

Audioleaf operates under different GDPR roles depending on the category of personal data:

2.1 Audioleaf as Data Controller

Audioleaf acts as Data Controller for the processing of:

• Account and identity data
• Payment and transaction metadata
• Security, access, and audit logs
• Moderation data, including risk scores, strikes, and sanctions

These data are processed for Audioleaf’s own legitimate purposes, including platform security, compliance, fraud prevention, and service integrity.

2.2 Audioleaf as Data Processor

Audioleaf acts as Data Processor for:

• Creator-provided content data
• Text, manuscripts, and generated works processed on behalf of creators

Such data is processed strictly in accordance with creator instructions and applicable agreements.

3. Data Categories

Audioleaf processes the following categories of personal data:

• Account Data: name, email, user ID
• Transactional Records: payment references, purchase metadata
• Content Data: creator-submitted or generated content
• Moderation & Risk Metadata: flags, scores, sanctions
• Security & Audit Logs: access events, system actions (pseudonymized)

4. Legal Bases

Processing is based on:

• Contractual necessity
• Legal obligations
• Legitimate interests (security, fraud prevention, platform integrity)
• Consent, where applicable

5. Data Retention

Retention periods are defined per data category and detailed in the Retention Policy.

6. Data Subject Rights

Users may request:

• Access
• Rectification
• Deletion
• Restriction
• Data portability

Certain data (e.g. security logs, moderation metadata) may be retained where legally required or necessary for compliance and security.

7. Automated Decision-Making

Audioleaf uses automated systems for moderation and risk assessment. Such systems may affect content visibility or access.

Where decisions have significant effects, users have the right to request human review.

8. Security

Appropriate technical and organizational measures are implemented to protect personal data.

9. Contact

Privacy inquiries may be directed to: privacy@audioleaf.com