Privacy Policy

Effective date: May 11, 2025

Ausori ("Company", "we", "us") is committed to protecting your personal information. This Privacy Policy explains how we collect, use, and safeguard your data. It includes provisions for users in the European Economic Area (EEA/EU) under the GDPR and for California residents under the CCPA/CPRA.

1. Information We Collect

Data CategorySourcePurpose
Email address, name, profile photoGoogle OAuth sign-inAccount creation and identification
Email addressIn-service feature launch notification requestAccount identification, service notices, and launch notifications for features requested by the user
Uploaded video and audio files, output filesDirect upload via ServiceAI sound analysis and project features
Usage logs, access logs, IP addressAutomatically collectedService quality and security monitoring
Cookies and session dataBrowser / ServiceSession management, language preferences
We do not intentionally collect sensitive data (health, religious beliefs, political opinions, biometric data, etc.). However, video or audio files you upload may contain personal or sensitive information about third parties. You are responsible for ensuring that your uploads do not infringe the privacy rights, portrait rights, voice rights, or copyrights of others.

2. Legal Basis for Processing (GDPR)

For users in the EEA, we process personal data under the following legal bases (GDPR Article 6):

  • Contract performance (Art. 6(1)(b)): to provide the Service and manage your account.
  • Legitimate interests (Art. 6(1)(f)): service improvement, security, and fraud prevention.
  • Legal obligation (Art. 6(1)(c)): to comply with applicable laws.
  • Consent (Art. 6(1)(a)): marketing communications and analytics cookies — you may withdraw consent at any time.

3. How We Use Your Information

  • Providing, operating, and personalising the Service (account management, authentication).
  • Processing uploaded content for AI sound effect recommendations, scene analysis, output generation, and project management.
  • Sending service notifications and updates, and (with consent) marketing communications.
  • Analysing anonymised usage statistics for service quality improvement.
  • Complying with legal obligations and resolving disputes.
We do not use your uploaded original video or audio files for AI model training without your separate, explicit consent.

4. Uploaded Content Handling & Retention

We process uploaded video and audio files solely to provide AI sound recommendations, scene analysis, output generation, and project management features.

  • Uploaded files, output files, and project data are retained for as long as the project exists.
  • When you delete a project, all associated original files, output files, analysis results, and temporary files are deleted within 24 hours.
  • When you delete your account, all account data, project data, uploaded files, and outputs are deleted within 7 days of account closure, except where retention is required by law.
  • Data included in system backups may be retained for up to 30 days for service reliability purposes and then sequentially deleted.

5. Data Retention

Data CategoryRetention PeriodBasis
Account information (email, name)Until account deletionContractual necessity
Feature launch notification emailUntil account deletion or fulfillment of purposeService notices and requested feature launch notifications
Uploaded files & project dataWhile project exists / deleted within 7 days of account closureService policy (see Section 4)
Access logs3 monthsKorean Communications Secrecy Protection Act
Consumer dispute records3 yearsKorean Electronic Commerce Act

Data is securely deleted or anonymised when it is no longer needed.

6. Sharing Your Information

We do not sell your personal data. We share data only in the following circumstances:

  • With your explicit consent.
  • With service providers acting as data processors (see Section 7).
  • To comply with a legal obligation, court order, or lawful government request.
  • To protect the rights, property, or safety of Ausori, our users, or the public.

7. Service Providers (Sub-processors)

ProviderServiceLocation
Amazon Web Services (AWS)Cloud infrastructure and file storageRepublic of Korea and/or global AWS regions
Google LLCOAuth authentication, Google AnalyticsUSA and/or global Google regions

All sub-processors are bound by data processing agreements that include appropriate safeguards (e.g., Standard Contractual Clauses for EU data transfers).

8. International Data Transfers

Your data may be transferred to and processed in countries outside your country of residence. We use the following providers for international processing:

RecipientAmazon Web Services, Inc.
CountryRepublic of Korea or AWS service regions
Data transferredAccount data, uploaded files, usage logs
PurposeCloud infrastructure, data storage, service operations
Transfer methodTransmitted via network during service use
RetentionUntil account deletion or contract termination
RecipientGoogle LLC
CountryUSA and/or Google service regions
Data transferredEmail address, profile data, usage logs, cookie data
PurposeSocial login (OAuth), usage analytics (Google Analytics)
Transfer methodTransmitted via network during OAuth login and Analytics
RetentionUntil account deletion or contract termination

For transfers from the EEA, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission to ensure adequate protection.

9. Your Rights

All users may contact us to access, correct, or delete their personal data.

EEA / GDPR users have the following rights under GDPR Articles 15–22:

  • Right of access (Art. 15)
  • Right to rectification (Art. 16)
  • Right to erasure / "right to be forgotten" (Art. 17)
  • Right to restriction of processing (Art. 18)
  • Right to data portability (Art. 20)
  • Right to object (Art. 21)
  • Right to withdraw consent at any time (Art. 7(3))
  • Right to lodge a complaint with your local supervisory authority (see edpb.europa.eu for contacts)

California (CCPA/CPRA) residents have the right to:

  • Know what personal information is collected, used, or shared.
  • Delete personal information we hold about you.
  • Opt out of the sale or sharing of personal information (we do not sell personal data).
  • Correct inaccurate personal information.
  • Non-discrimination for exercising your privacy rights.

To exercise your rights, contact us at ausori106@gmail.com. We respond within 30 days (GDPR) or 45 days (CCPA).

10. Cookies & Google Analytics

  • Essential cookies: session management, login persistence, language preferences. Disabling these may limit Service functionality.
  • Analytics cookies: visit paths, screens viewed, and feature usage for service improvement statistics.

We use Google Analytics to analyse service usage. Google Analytics may collect information about your use of the Service via cookies. You can opt out by:

  • Adjusting your browser settings to block or delete cookies.
  • Installing the Google Analytics Opt-out Browser Add-on (tools.google.com/dlpage/gaoptout).

We do not use cookies for targeted advertising.

11. Children's Privacy

The Service is not directed to children under 13 (or under 16 in the EEA). If we learn that we have collected data from a child without appropriate consent, we will delete it promptly. Contact us at ausori106@gmail.com if you believe we hold data from a minor.

12. Data Security

We implement industry-standard measures (encryption in transit and at rest, access controls, regular security reviews) to protect your data. No transmission over the internet is completely secure, and we cannot guarantee absolute security.

13. Changes to This Policy

We will notify you of material changes at least 30 days in advance via in-service notice or email. Continued use of the Service after the effective date constitutes acceptance of the updated Policy.

14. Contact & Data Protection

For privacy inquiries or to exercise your rights, please contact:

Data Protection Contact: Ausori Privacy Team

Email: ausori106@gmail.com

EEA users may also lodge a complaint with their national data protection authority (see edpb.europa.eu for contacts).