Privacy Policy

Last updated: May 16, 2026

EscenarioAI ("we", "us", "our") respects your privacy and is committed to protecting the personal data you share with us. This Privacy Policy explains how we collect, use, store, and protect your information when you use our browser-based DAW platform at escenarioai.com (the "Service").

1. Information We Collect

1.1 Account Information

• Name, email address, and password (hashed)
• Billing address and payment method (processed via PayPal)
• Profile preferences and workspace settings

1.2 Audio Content

• Audio files you upload for stem separation, MIDI tracking, or mastering
• AI-generated audio outputs (instruments, drums, mastered tracks)
• Project metadata (track names, BPM, session settings)

1.3 Usage Data

• Browser type, operating system, device identifiers
• Feature usage patterns (which tools you use, session duration)
• Performance metrics (processing times, error logs)
• IP address and approximate geolocation (country/region level)

1.4 Cookies & Tracking

• Essential cookies: Session authentication, CSRF protection
• Analytics cookies: Anonymous usage statistics (opt-out available)
• Preference cookies: UI theme, workspace layout settings

2. How We Use Your Information

Purpose	Legal Basis (GDPR)
Provide and operate the Service	Contract performance
Process payments and subscriptions	Contract performance
Send transactional emails (receipts, password resets)	Contract performance
Improve AI model accuracy and platform performance	Legitimate interest
Detect fraud and prevent abuse	Legitimate interest
Send marketing communications (with consent)	Consent
Comply with legal obligations	Legal obligation

3. Audio Data Processing & Retention

Processing: When you upload audio for AI processing (stem separation, MIDI tracking, mastering), files are temporarily stored on our GPU compute servers for the duration of the operation.

Automatic Deletion: Uploaded source files are purged within 24 hours of processing completion. Processed outputs (stems, MIDI, mastered files) remain available in your workspace until you delete them or your account is terminated.

No Training Without Consent: We do NOT use your uploaded audio to train or fine-tune our AI models unless you explicitly opt in via account settings. Opted-in audio is anonymized before inclusion in training datasets.

4. Payment Processing

All payment processing is handled by PayPal, Inc. We never store your full credit card number, CVV, or banking details on our servers. PayPal's privacy policy applies to payment data: paypal.com/privacy

5. Data Sharing & Third Parties

We do not sell your personal data. We share data only with:

• Infrastructure providers: Cloud GPU compute (for audio processing), CDN delivery
• Payment processor: PayPal (billing and subscription management)
• Analytics: Anonymized, aggregated usage data only
• Legal compliance: When required by law, court order, or regulatory authority

6. Data Security

We implement industry-standard security measures:

• TLS 1.3 encryption for all data in transit
• AES-256 encryption for data at rest
• SOC 2 Type II compliant infrastructure
• Regular penetration testing and vulnerability assessments
• Role-based access controls with audit logging
• Automated intrusion detection and anomaly monitoring

7. Your Rights (GDPR / CCPA)

Depending on your jurisdiction, you have the right to:

• Access: Request a copy of all personal data we hold about you
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data ("right to be forgotten")
• Portability: Receive your data in a machine-readable format
• Restriction: Limit how we process your data
• Objection: Opt out of processing based on legitimate interest
• Withdraw consent: Revoke marketing or training data consent at any time

To exercise any of these rights, contact us at privacy@escenarioai.com. We will respond within 30 days.

8. International Data Transfers

Your data may be processed in the United States and European Union. For transfers outside the EEA, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission to ensure adequate data protection.

9. Children's Privacy

EscenarioAI is not intended for users under 18 years of age. We do not knowingly collect personal information from minors. If we learn that a user is under 18, we will promptly delete their account and associated data.

10. Data Retention

• Account data: Retained while your account is active + 90 days after deletion request
• Audio uploads: Purged within 24 hours of processing
• Workspace projects: Retained until you delete them or close your account
• Billing records: Retained for 7 years (legal/tax obligation)
• Server logs: Retained for 90 days, then anonymized

11. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated via email notification at least 14 days before taking effect. The "Last updated" date at the top reflects the most recent revision.

12. Contact Us

For privacy-related inquiries or data requests:

Email: privacy@escenarioai.com

Data Protection Officer: dpo@escenarioai.com