Privacy Policy

This Privacy Policy explains how Auraverse LLC, an Oregon limited liability company (“Auraverse,” “we,” “us”), collects, uses, shares, and protects information about you when you use the Auraverse website and services (the “Service”). It applies to users worldwide, including the European Economic Area (“EEA”), the United Kingdom, and California. By using the Service you agree to this Policy.

1. Information we collect

• Account information. When you register, our authentication provider (Clerk) collects information such as your email address and display name, and any details you choose to add.
• Billing information. If you subscribe to a paid plan, our payment processor (Stripe) collects and processes your payment details on our behalf. We do not store full payment card numbers; we receive limited information such as subscription status and the last four digits of your card.
• Content you provide. The messages and prompts you send to AI artists, the songs you like, and other content you submit. Chat content is used to power features such as conversational memory and personalization.
• Voice data. If you use voice features, audio you provide is processed to deliver those features.
• Usage and device data. Logs and analytics such as the artists you interact with, pages viewed, actions taken, IP address, browser and device type, and timestamps.
• Cookies and similar technologies. Used to keep you signed in, remember preferences, and understand usage. See Section 5.

2. How we use information

• To provide, operate, maintain, and improve the Service.
• To personalize the artists you encounter and recommend music.
• To process payments and manage your subscription.
• To communicate with you, including support and service notices.
• To detect, prevent, and address abuse, fraud, and security issues.
• To comply with legal obligations and enforce our terms and policies.

3. Legal bases (EEA/UK)

If you are in the EEA or UK, we process your personal data under the following legal bases: performance of a contract (to provide the Service you request); legitimate interests (to secure, improve, and promote the Service, balanced against your rights); consent (where required, e.g., certain cookies — which you may withdraw at any time); and legal obligation (to comply with applicable law).

4. AI processing

The Service uses third-party foundation models from major AI providers to generate artist responses, voices, and other content. Your prompts and messages may be transmitted to these providers to generate outputs. We do not train our own models on your content, and we do not authorize our model providers to use your content to train their models. Refer to each provider’s policies for how they handle inference data.

5. Cookies and analytics

We use strictly necessary cookies to operate the Service (such as keeping you signed in) and may use functional and analytics cookies to understand and improve usage. You can control cookies through your browser settings, and where required we will ask for your consent to non-essential cookies.

6. How we share information

We do not sell your personal information, and we do not “share” it for cross-context behavioral advertising. We disclose information only as follows:

• Service providers (processors) who help us run the Service — including authentication, payments, hosting, analytics, and AI model providers — under contracts that limit their use of your data to providing services to us.
• Legal and safety — when required by law or to protect the rights, safety, and security of users, the public, or Auraverse.
• Business transfers — in connection with a merger, acquisition, financing, or sale of assets, subject to this Policy.

7. Data retention

We keep personal data for as long as needed to provide the Service and for legitimate business or legal purposes (such as security, dispute resolution, and compliance). When data is no longer needed, we delete or de-identify it. You can request deletion as described in Sections 9 and 10.

8. Security and international transfers

We use reasonable technical and organizational measures to protect personal data, but no system is perfectly secure. We operate in the United States; if you access the Service from outside the U.S., your information will be transferred to and processed in the U.S. and other countries. Where required, we rely on appropriate safeguards (such as the Standard Contractual Clauses) for international transfers.

9. Your rights (EEA/UK and others)

Depending on where you live, you may have the right to access, correct, update, delete, restrict, or object to our processing of your personal data; to data portability; and to withdraw consent. EEA/UK users may also lodge a complaint with their local data protection authority. To exercise these rights, contact us using Section 12. We will respond as required by applicable law.

10. California privacy rights (CCPA/CPRA)

If you are a California resident, you have the right to know what personal information we collect and how we use it; to request access to and deletion of your personal information; to correct inaccurate information; and to not be discriminated against for exercising your rights. We do not sell or share personal information as those terms are defined under California law. To exercise your rights, contact us using Section 12; we may need to verify your identity before responding.

11. Children

The Service is intended only for adults age 18 and older. We do not knowingly collect personal information from anyone under 18. If you believe a person under 18 has provided us personal information, contact us and we will take appropriate steps to delete it.

12. Contact us

For privacy questions or to exercise your rights, email support@auraverse.fm or use our contact page. Auraverse LLC is the controller responsible for your personal data.

13. Changes

We may update this Policy from time to time. We will update the “Last updated” date above and, for material changes, provide notice to active accounts.