Privacy Policy
Effective date: May 11, 2025
Ausori ("Company", "we", "us") is committed to protecting your personal information. This Privacy Policy explains how we collect, use, and safeguard your data. It includes provisions for users in the European Economic Area (EEA/EU) under the GDPR and for California residents under the CCPA/CPRA.
1. Information We Collect
| Data Category | Source | Purpose |
|---|---|---|
| Email address, name, profile photo | Google OAuth sign-in | Account creation and identification |
| Email address | In-service feature launch notification request | Account identification, service notices, and launch notifications for features requested by the user |
| Uploaded video and audio files, output files | Direct upload via Service | AI sound analysis and project features |
| Usage logs, access logs, IP address | Automatically collected | Service quality and security monitoring |
| Cookies and session data | Browser / Service | Session management, language preferences |
2. Legal Basis for Processing (GDPR)
For users in the EEA, we process personal data under the following legal bases (GDPR Article 6):
- Contract performance (Art. 6(1)(b)): to provide the Service and manage your account.
- Legitimate interests (Art. 6(1)(f)): service improvement, security, and fraud prevention.
- Legal obligation (Art. 6(1)(c)): to comply with applicable laws.
- Consent (Art. 6(1)(a)): marketing communications and analytics cookies — you may withdraw consent at any time.
3. How We Use Your Information
- Providing, operating, and personalising the Service (account management, authentication).
- Processing uploaded content for AI sound effect recommendations, scene analysis, output generation, and project management.
- Sending service notifications and updates, and (with consent) marketing communications.
- Analysing anonymised usage statistics for service quality improvement.
- Complying with legal obligations and resolving disputes.
4. Uploaded Content Handling & Retention
We process uploaded video and audio files solely to provide AI sound recommendations, scene analysis, output generation, and project management features.
- Uploaded files, output files, and project data are retained for as long as the project exists.
- When you delete a project, all associated original files, output files, analysis results, and temporary files are deleted within 24 hours.
- When you delete your account, all account data, project data, uploaded files, and outputs are deleted within 7 days of account closure, except where retention is required by law.
- Data included in system backups may be retained for up to 30 days for service reliability purposes and then sequentially deleted.
5. Data Retention
| Data Category | Retention Period | Basis |
|---|---|---|
| Account information (email, name) | Until account deletion | Contractual necessity |
| Feature launch notification email | Until account deletion or fulfillment of purpose | Service notices and requested feature launch notifications |
| Uploaded files & project data | While project exists / deleted within 7 days of account closure | Service policy (see Section 4) |
| Access logs | 3 months | Korean Communications Secrecy Protection Act |
| Consumer dispute records | 3 years | Korean Electronic Commerce Act |
Data is securely deleted or anonymised when it is no longer needed.
6. Sharing Your Information
We do not sell your personal data. We share data only in the following circumstances:
- With your explicit consent.
- With service providers acting as data processors (see Section 7).
- To comply with a legal obligation, court order, or lawful government request.
- To protect the rights, property, or safety of Ausori, our users, or the public.
7. Service Providers (Sub-processors)
| Provider | Service | Location |
|---|---|---|
| Amazon Web Services (AWS) | Cloud infrastructure and file storage | Republic of Korea and/or global AWS regions |
| Google LLC | OAuth authentication, Google Analytics | USA and/or global Google regions |
All sub-processors are bound by data processing agreements that include appropriate safeguards (e.g., Standard Contractual Clauses for EU data transfers).
8. International Data Transfers
Your data may be transferred to and processed in countries outside your country of residence. We use the following providers for international processing:
For transfers from the EEA, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission to ensure adequate protection.
9. Your Rights
All users may contact us to access, correct, or delete their personal data.
EEA / GDPR users have the following rights under GDPR Articles 15–22:
- Right of access (Art. 15)
- Right to rectification (Art. 16)
- Right to erasure / "right to be forgotten" (Art. 17)
- Right to restriction of processing (Art. 18)
- Right to data portability (Art. 20)
- Right to object (Art. 21)
- Right to withdraw consent at any time (Art. 7(3))
- Right to lodge a complaint with your local supervisory authority (see edpb.europa.eu for contacts)
California (CCPA/CPRA) residents have the right to:
- Know what personal information is collected, used, or shared.
- Delete personal information we hold about you.
- Opt out of the sale or sharing of personal information (we do not sell personal data).
- Correct inaccurate personal information.
- Non-discrimination for exercising your privacy rights.
To exercise your rights, contact us at ausori106@gmail.com. We respond within 30 days (GDPR) or 45 days (CCPA).
10. Cookies & Google Analytics
- Essential cookies: session management, login persistence, language preferences. Disabling these may limit Service functionality.
- Analytics cookies: visit paths, screens viewed, and feature usage for service improvement statistics.
We use Google Analytics to analyse service usage. Google Analytics may collect information about your use of the Service via cookies. You can opt out by:
- Adjusting your browser settings to block or delete cookies.
- Installing the Google Analytics Opt-out Browser Add-on (tools.google.com/dlpage/gaoptout).
We do not use cookies for targeted advertising.
11. Children's Privacy
The Service is not directed to children under 13 (or under 16 in the EEA). If we learn that we have collected data from a child without appropriate consent, we will delete it promptly. Contact us at ausori106@gmail.com if you believe we hold data from a minor.
12. Data Security
We implement industry-standard measures (encryption in transit and at rest, access controls, regular security reviews) to protect your data. No transmission over the internet is completely secure, and we cannot guarantee absolute security.
13. Changes to This Policy
We will notify you of material changes at least 30 days in advance via in-service notice or email. Continued use of the Service after the effective date constitutes acceptance of the updated Policy.
14. Contact & Data Protection
For privacy inquiries or to exercise your rights, please contact:
Data Protection Contact: Ausori Privacy Team
Email: ausori106@gmail.com
EEA users may also lodge a complaint with their national data protection authority (see edpb.europa.eu for contacts).