Privacy Policy

This policy explains what data Aayo collects, how it is used, and the choices you have.

1. Data we collect

Account data: email, display name, handle, avatar, optional social links.
Host data: session settings, tier configuration, blacklist, payout status from Stripe.
Submission data (Fans): the email and name you provide, the song details, and the audio file or link.
Payment data: processed by Stripe. Aayo stores transaction metadata (amount, fee, status) but never card numbers.
Usage data: basic logs (IP, user agent, request paths) for security and reliability.

2. How we use data

Operate the Service (queues, tiers, payouts).
Send transactional emails (account, session, payment confirmations).
Prevent abuse, fraud, and policy violations.
Comply with legal obligations.

3. Sharing

We share data only with: (a) the Host you submitted to (song details and the contact info you provided), (b) Stripe for payment processing, (c) Supabase for hosting and storage, and (d) email delivery providers. We do not sell personal data.

4. Retention

Submission audio files are auto-deleted after the period configured by the Host (default 48 hours). Account data is retained for the life of the account; transaction records are retained as required by tax and accounting law.

5. Your rights

You may request access, correction, or deletion of your personal data by emailing support@aayo.live. Deleting your account removes your profile and associated submissions/sessions/tiers.

6. Security

We use TLS in transit, row-level security in the database, and least-privilege server-side access for sensitive operations. No system is perfectly secure; report suspected issues to support@aayo.live.

7. Children

Aayo is not directed to children under 13. If we learn we have collected data from a child under 13 without parental consent, we will delete it.

8. Changes

We will post updates here. Continued use after changes take effect means you accept the updated policy.

9. Contact

Privacy questions: support@aayo.live.