Privacy Policy

We collect information to provide, improve, and secure the Service. The types of information we collect include:

1.1 Account Information

When you create an account, we collect:

• Email address
• Username (generated from your email address unless you change it)
• Password (stored only as a salted hash), or — if you sign in with Google — your name, email address and Google account ID from Google
• Account creation date, the version of our Terms you accepted, and your ad-measurement choice at sign-up
• Login activity and authentication tokens (your sign-in token is kept in your browser's local storage)
• Answers to optional onboarding questions (for example, what you make and which tools you use)

1.2 Payment and Billing Information

When you purchase credits, subscriptions, or other paid features, we collect:

• Payment method details (entered on and processed by Stripe)
• Billing address and country
• Transaction history, purchase amounts, refunds and subscription status
• Purchase timestamps, and the reason you give if you choose to answer the optional cancellation survey

We do not receive or store full credit card numbers. Payment processing is handled by Stripe, which complies with PCI-DSS.

1.3 Usage, Device and Analytics Data

Our own (first-party) analytics records how the Service is used, including:

• Pages visited, buttons clicked, sign-up and checkout steps, features used and time spent in each tool
• A random anonymous ID (stored in your browser) and a per-visit session ID, linked to your account once you sign in
• How you arrived: campaign tags (utm_*), the referring site, the landing page and, if you clicked a Meta ad, the ad click ID (fbclid)
• Device type, screen size category, operating system and browser
• Generation requests and settings, credit usage and balance history
• Error logs and performance metrics
• IP address (used for security, rate limiting and approximate location at country or region level)

1.4 Prompts, Inputs, and Generation Parameters

When you use AI-powered features of the Service, we collect:

• Text prompts, descriptions, or other inputs you submit for AI generation
• Audio you upload to Renovate Vocals (see Section 2)
• Measurements of reference audio (such as length, pitch, tempo and energy), which Renovate Sample and Renovate Melody calculate in your browser
• Generation parameters, configuration settings and timestamps

1.5 Generated Outputs and Metadata

When you use AI generation features of the Service, we process and may store certain outputs and related data to deliver and improve the Service. This may include:

• AI-generated audio or other outputs, stored for delivery to you
• Generation metadata (such as prompts, settings, model parameters, timestamps, and technical logs) for debugging, security, and quality improvement
• Logs of successful and failed generation attempts

1.6 Cloud Storage and Library Data

Where cloud storage features are available as part of a subscription or qualifying plan, we store:

• Exported outputs (such as Renovate Sample audio files) associated with your account
• Metadata about those exports (such as prompts, parameters, timestamps, internal identifiers, and storage locations)
• Playback, access, and re-download activity related to your stored outputs

If your subscription ends, your export history and metadata may remain in our systems, but access to cloud-stored files may be paused or revoked. Stored files may be deleted after a reasonable retention period, as described in Section 6.

1.7 Support and Email Communications

If you contact us, or when we email you, we collect:

• Your email address and the content of your message
• Any files, screenshots, or attachments you provide
• Support history
• Whether emails we send were delivered, opened or clicked, and your email preferences

Renovate Vocals lets you upload a vocal recording. Here is exactly what happens to it:

• In your browser: playback, the before/after comparison and the final export are rendered on your device.
• On our server: your vocal (or, on some plans, the first part of it) is uploaded over an encrypted connection so we can analyze it and recommend settings, and so some exports can be processed without uploading it twice. We use our own processing for this; the recording is not sent to any third-party AI provider.
• How long the file is kept: the uploaded file is stored only as a temporary file for your editing session — normally no more than a few minutes — and is deleted after export or when that session window ends. Temporary copies are never moved to permanent storage; in rare cases (for example, a server error) one can remain until our servers' temporary storage is next cleared.
• What we keep: the numeric results of the analysis (such as loudness, noise, tonal balance, sibilance, pitch range, musical key, length and file format) and the settings you choose, saved with your editing session and linked to your account or, before you sign up, to your browser's anonymous ID.
• What we never do: we do not create voiceprints, identify speakers or derive any biometric identifier from your recordings, and we do not use your uploads to train AI models. We do not sell your recordings or share them with advertisers.

Renovate Sample and Renovate Melody analyze any reference audio you choose in your browser and send us only the measurements and your prompt — not the audio file itself.

Only upload recordings you have the right to use, and don't upload recordings of other people without their permission. To delete your editing sessions or your account, email support@renovateaudio.com.

We use cookies and similar technologies (such as your browser's local storage). They fall into three groups. In our cookie preferences, groups 3.1 and 3.2 are “Strictly necessary” (always on) and group 3.3 is “Advertising & ad measurement”, which you can turn off.

3.1 Needed to run the Service

• Your sign-in token and cached account details (local storage), so you stay signed in
• Preferences such as dismissed notices, your cookie choice (ra_ad_consent_v1) and editor sessions in progress
• Security and fraud prevention by us and our payment processor

3.2 Our own analytics and attribution

• ra_anon_id (local storage) and ra_session_id (session storage): random IDs that tie analytics events together
• ra_attribution_v1 (local storage, 7 days): how you arrived on your latest visit (campaign tags, referrer, landing page, fbclid)
• ra_first_touch_v1 (local storage) and the ra_ft cookie (both 90 days): how you first arrived
• ra_event_queue_v1 and other ra_* keys: events waiting to be sent and progress markers

This information goes only to us. We remove sign-in tokens from page addresses before storing them.

3.3 Advertising measurement (Meta)

Unless you turn off “Advertising & ad measurement” in our cookie preferences, we load the Meta Pixel. It sets the _fbp cookie (and, if you arrived from a Meta ad, the _fbc cookie; both up to 90 days) and sends Meta the pages you view and actions such as sign-up and purchase. With the same permission, our server sends those sign-up, checkout and purchase events to Meta's Conversions API, including your email address and account ID in hashed form, your IP address and browser details (see Section 5). Meta can combine this with information it has about you, including activity on other websites, and uses it to measure and target ads under Meta's Privacy Policy.

Your choices: click Preferences on the cookie banner and choose Reject all (or turn off “Advertising & ad measurement”), or use the Your Privacy Choices link in our footer at any time to change your mind. When you decline or withdraw, we stop the Pixel, delete the Meta cookies we can reach, and stop sending your events to the Conversions API. You can also clear cookies in your browser and manage ad settings in your Meta account.

3.4 Global Privacy Control and Do Not Track

Global Privacy Control (GPC): if your browser sends a GPC signal, we treat it as a request to opt out of the sale or sharing of your personal information. The Meta Pixel is not loaded, and our server does not send your events to Meta, whatever choice is saved on the banner.

Do Not Track: there is no common standard for how websites should respond to "Do Not Track" browser signals, so the Service does not respond to them. We do honor GPC as described above.

3.5 Other parties on our pages

Apart from Meta (only as described above), we do not allow third parties to collect information about your activity across websites and over time through our Service. Two services you choose to use load their own code: Google's sign-in on pages that offer "Continue with Google", and Stripe on its checkout page. Their use of cookies is governed by their own privacy policies.

We use the information we collect to:

4.1 Provide and Operate the Service

• Process your account registration and authentication
• Enable AI-powered generation, vocal analysis and other features across our products
• Deliver generated outputs, previews, and exports to you
• Provide and operate cloud storage and re-download features for qualifying subscribers
• Manage your credits, subscriptions, refunds and billing
• Provide customer support and respond to your requests

4.2 Process AI Requests

• Send your text prompts and settings to the AI providers listed in Section 5 for processing
• Apply moderation and content filtering to inputs and outputs
• Optimize generation quality, speed, and performance

4.3 Improve the Service

• Analyze usage patterns, sign-up and checkout steps, and feature performance
• Identify and fix technical issues
• Develop new features and products

4.4 Advertising Measurement

• With your permission (Section 3.3), measure which of our ads lead to sign-ups and purchases

4.5 Ensure Security and Prevent Abuse

• Detect and prevent fraud, abuse, and unauthorized access
• Enforce our Terms of Service and Acceptable Use Policy
• Comply with legal obligations
• Protect the rights, property, and safety of our users and the Service

4.6 Communicate with You

• Send transactional emails (e.g., purchase confirmations, account notifications)
• Provide customer support responses
• Send product updates and announcements (you may opt out of marketing emails at any time with the unsubscribe link)

We do not sell your personal information for money. We share information only in the following circumstances:

5.1 Service Providers and Partners

These companies receive personal information from us or from your browser on our pages:

Except for Meta (Section 3.3), these providers may use your information only to provide their services to us or to you, and are bound by their terms with us.

5.2 Advertising Partners ("Sharing" under California Law)

When you allow advertising measurement, the information Meta receives through the Pixel and the Conversions API may be considered "sharing" of personal information for cross-context behavioral advertising — and may be considered a "sale" — under California law, and "targeted advertising" under other U.S. state privacy laws. You can opt out at any time in the cookie banner's Preferences, the Your Privacy Choices link in our footer, or a Global Privacy Control signal.

5.3 For Legal Compliance

We may disclose information if required by law or in good-faith belief that such disclosure is necessary to:

• Comply with valid legal requests (e.g., subpoenas, court orders, regulatory inquiries)
• Support investigations of fraud, security threats, or violations of our Terms
• Protect the rights, property, or safety of Renovate Audio or our users

5.4 Business Transfers

If Renovate Audio is involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction. We will provide notice of any such change and, where required, any choices you may have regarding your data.

5.5 With Your Consent

We may share information with third parties where you have explicitly consented to such sharing.

We retain your information only as long as necessary to:

• Provide the Service and fulfill our contractual obligations
• Comply with applicable legal and regulatory requirements
• Resolve disputes and enforce our agreements
• Support debugging, security, and technical improvements

You may request deletion of your account and associated personal data by contacting us. Some information may be retained where required by law, for security or fraud prevention, or in aggregated form that no longer identifies you.

Depending on your location, you may have the following rights regarding your personal information:

• 7.1 Access and Update

  • View your account information in Account Settings and My Purchases
  • Request a copy of the personal data we hold about you

• 7.2 Delete Your Data

  • Request deletion of your account and associated personal data
  • Some information (such as payment records and security logs) may be retained as required by law or for legitimate business purposes
  • Deleting your account removes access to any cloud-stored outputs associated with it

• 7.3 Opt Out of Marketing

  • Unsubscribe from promotional emails using the unsubscribe link in those emails or by contacting us
  • You will continue to receive transactional emails related to your account and purchases

• 7.4 Advertising Cookies

  • Accept or set your preferences on the cookie banner, and change your mind at any time with "Your Privacy Choices" in the footer
  • Global Privacy Control signals are honored automatically

• 7.5 Data Portability

  • Request a copy of your personal data in a structured, portable format where applicable and technically feasible

• 7.6 Withdraw Consent

  • Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing before withdrawal

To exercise any of these rights, contact us at support@renovateaudio.com.

We implement reasonable technical and organizational measures to protect your information, including:

• Encryption of data in transit (TLS), and encryption at rest where our hosting providers support it
• Hashed passwords, secure authentication and access controls
• Regular security updates
• Restricted access to personal data on a need-to-know basis
• Monitoring for unauthorized access and abuse

The Service may link to or integrate with third-party websites, services, or tools (for example, Instagram, Google sign-in and Stripe checkout). We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before sharing information with them.

Our use of third-party AI providers is governed by our agreements with those providers. We select providers that maintain appropriate data protection standards, but we cannot fully control their independent practices.

You must be at least 13 years old to use the Service. Users in the European Economic Area (EEA) must be at least 16 years old. The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13 (or below the applicable minimum age in the EEA). We do not knowingly sell or share the personal information of anyone under 16.

If we learn that we have collected personal information from a child below the applicable minimum age, we will delete it promptly and close the account. Parents and guardians: if you believe your child has given us personal information, email support@renovateaudio.com with the subject "Child data deletion" and the email address or username used. We will confirm the request and delete the information.

We are based in the United States, and our service providers process information in the United States and other countries. These countries may have different data protection laws than your own.

When we transfer personal data internationally, we take steps to ensure it is protected in accordance with this Privacy Policy and applicable law, including:

• Using standard contractual clauses or other approved transfer mechanisms where required
• Ensuring third-party providers have adequate data protection measures in place
• Complying with applicable data transfer regulations, including those governing transfers from the EEA, UK, and Switzerland

If you live in California, you have rights under the California Consumer Privacy Act (as amended by the CPRA). Residents of other states with comprehensive privacy laws (such as Colorado, Connecticut, Virginia, Texas, Oregon and others) have similar rights. Subject to those laws, you can:

• Know what personal information we collect, use, disclose, sell or share, and get a copy of it
• Request deletion of your personal information
• Correct inaccurate personal information
• Opt out of the sale or sharing of your personal information and of targeted advertising — turn off “Advertising & ad measurement” under Preferences on the banner, use the "Your Privacy Choices" footer link, or send a Global Privacy Control signal
• Limit the use of sensitive personal information — we do not use sensitive personal information to infer characteristics about you, and we do not collect voiceprints or other biometric identifiers
• Not be discriminated against for exercising your rights

12.1 What we collected in the last 12 months

• Identifiers (name, email, account ID, IP address, cookie and device IDs) — from you, your browser and Google sign-in; disclosed to the service providers in Section 5 and, with your permission, shared with Meta for advertising
• Commercial information (plans, purchases, credits) — disclosed to Stripe; with your permission, purchase events are shared with Meta
• Internet activity (pages viewed, clicks, referrer, how you arrived) — used by us; with your permission, shared with Meta
• Audio information (vocal recordings you upload) — processed temporarily by us; not sold or shared
• Account login credentials (email and hashed password) — not sold or shared

12.2 How to make a request

Email support@renovateaudio.com from the address on your account (or tell us the account email). We may ask for information to verify your identity before acting on a request. You may use an authorized agent; we may ask the agent for your signed permission and confirm the request with you. We respond within 45 days, or tell you if we need more time as the law allows.

12.3 Appeals

If we decline your request in whole or in part, we will tell you why. You can appeal by replying to our response or emailing support@renovateaudio.com with the subject "Privacy request appeal" within a reasonable time. We will respond to your appeal in writing within 60 days (or the period your state's law requires) and explain the outcome. If you disagree with our decision, you can contact your state Attorney General.

If you are located in the European Economic Area (EEA), United Kingdom (UK), or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR), UK GDPR, or the Swiss Federal Act on Data Protection (FADP), including:

• The right to access your personal data
• The right to correct inaccurate or incomplete personal data
• The right to request erasure of your personal data ("right to be forgotten")
• The right to restrict or object to processing
• The right to data portability
• The right to withdraw consent at any time (where processing is based on consent)
• The right to lodge a complaint with a supervisory authority in your country of residence

To exercise your rights or if you have questions about our legal bases for processing, contact us at support@renovateaudio.com.

We may update this Privacy Policy from time to time to reflect changes in our practices, products, or legal requirements. When we make material changes, we will:

• Update the "Last Updated" date at the top of this policy
• Notify you via email or through the Service where appropriate
• Post the updated policy on our website

We will ask for your consent before using personal information in a materially different way than described when it was collected, where the law requires it.

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: