Privacy Policy

1. Controller Identity

Controller: [COMPANY_NAME], [LEGAL_FORM], [REGISTRATION_NUMBER], registered office [FULL_ADDRESS].

Privacy contact: [PRIVACY_CONTACT_EMAIL] | DPO: [DPO_NAME] ([DPO_EMAIL]).

2. Data Categories

• Identity data: name, email, account identifiers.
• Account and billing data: plan, subscription status, invoices, payment records.
• Technical data: logs, IP address, device/browser metadata, security events.
• Content data: uploaded audio files, metadata, mastering parameters.
• Support data exchanged through [SUPPORT_EMAIL].

3. Purposes and Legal Bases

• Contract performance (GDPR 6.1.b): account creation, service delivery, billing.
• Legal obligations (GDPR 6.1.c): accounting retention, tax and anti-fraud duties.
• Legitimate interests (GDPR 6.1.f): service security, abuse prevention, quality improvement.
• Consent (GDPR 6.1.a): non-essential cookies and marketing communications.

4. Recipients and Processors

Data may be accessed by authorized [COMPANY_NAME] personnel and processors strictly necessary to operate the service.

• Hosting: [HOSTING_PROVIDER] ([HOSTING_COUNTRY]).
• Payments: [PAYMENT_PROVIDER].
• Email/support tools: [EMAIL_PROVIDER].
• Storage/CDN/monitoring providers: [TECH_PROVIDERS].

5. International Transfers

If data is transferred outside the EEA, [COMPANY_NAME] uses appropriate safeguards (EU Standard Contractual Clauses, adequacy decisions, or equivalent mechanisms).

6. Retention Periods

• Account data: duration of the contractual relationship + [ACCOUNT_ARCHIVE_PERIOD].
• Accounting records: [ACCOUNTING_RETENTION_PERIOD].
• Technical/security logs: [LOG_RETENTION_PERIOD].
• Marketing data: until consent withdrawal or [MAX_MARKETING_PERIOD].

7. Your Rights

You have rights of access, rectification, erasure, restriction, objection, portability, and consent withdrawal where applicable.

Submit requests at [RIGHTS_REQUEST_FORM_URL] or [PRIVACY_CONTACT_EMAIL].

8. Cookies

Strictly necessary cookies are always used for core functionality. Optional cookies are used only with consent.

You can update your preferences at any time via [PRIVACY_SETTINGS_URL].

9. Security

[COMPANY_NAME] applies appropriate technical and organizational measures including access control, encryption in transit, logging, backup, and least-privilege policies.

10. Complaints

You may lodge a complaint with your local authority. In France: CNIL (https://www.cnil.fr).

11. Policy Changes

This policy may be updated. Material changes are notified through [UPDATE_NOTIFICATION_CHANNEL].