Privacy Policy

In order to ensure smooth operation of the Platform, quality services, and user security, we collect and process the following User data:

• Account Data: email address, first name, last name, profile picture, received during registration via the "Clerk" authentication service.
• User Content: text data entered for voiceover synthesis, and MP3 files generated based on it.
• Usage Analytics: IP address, device type, operating system, browser type, session duration, and browsing actions on the Platform.
• Payment Information: purchase history, subscription status. Note: all payments are processed via our licensed partner "Stripe", so we do not store full card or bank account details.
• Attribution Data: only if you accept marketing cookies — the campaign parameters of the link you arrived through (utm_source, utm_medium, utm_campaign, utm_content, utm_term), the advertising click identifiers fbclid and ttclid, the landing page, the referring domain, and a hashed (SHA-256) form of your email address used to match a purchase to a campaign.

User personal data is processed and used solely for the following explicitly defined purposes:

• Service Provision: creating and managing your account, converting text to speech, and storing your generated files.
• Billing Management: processing payments, issuing invoices, and managing subscriptions.
• Communication: responding to your inquiries, sending technical notices, and notifying you about changes to terms or privacy policies.
• Security and Improvement: monitoring system performance, detecting fraud or policy violations, and performing anonymized behavior analysis to improve the Platform.
• Marketing Attribution: only with your consent — measuring which advertising campaign led to a registration or a purchase, including the transmission described in section 6. You can withdraw this consent at any time, and nothing else on the Platform depends on it.

We use cookies and similar technologies on the Platform to recognise you as a returning user, keep your session active, and remember the choices you have made.

Types of cookies used:

• Essential Cookies: necessary for the operation and security of the Platform (e.g. user authentication via “Clerk”). These are set without consent, because the Platform cannot work without them.
• Functional Cookies: remember a choice you have expressed, such as your interface language (NEXT_LOCALE) and your cookie decision itself (garsio_consent, stored for 180 days).
• Marketing / Attribution Cookies: set only after you accept them. A single cookie (garsio_touch, stored for 90 days) holds the campaign parameters and click identifiers of the link you arrived through, so that a later registration or purchase can be attributed to that campaign. We run no third-party scripts, tags or pixels of any kind.

We ask for your decision on your first visit, and accepting is no easier than refusing. You can change or withdraw it at any time through the “Cookie settings” link in the page footer or on the privacy page of your account; withdrawal deletes the attribution cookie and stops any further transmission to the advertising platforms. Refusing marketing cookies restricts no function of the Platform.

The Service Provider applies strict technical and organizational security measures (including SSL data encryption, access control) to protect user personal data from loss, unauthorized modification, disclosure, or destruction.

Personal data is stored for as long as the User holds an active account on the Platform. Upon account deletion, related personal data is deleted or fully anonymized within 30 days, except for information we are required to retain by law for financial accounting or compliance.

Retention periods: account, content and billing records are kept while your account is active and are deleted or anonymised within 30 days of its deletion. Attribution and usage records are deleted automatically after 395 days. Records of your cookie decisions are kept for as long as we must be able to demonstrate that consent was given (Art. 7(1) GDPR). Accounting records are kept for the period Lithuanian law requires.

We never sell your personal data. Data is transferred to the service providers below, who process it on our instructions in order to operate the Platform:

• Clerk Inc. – user authentication and account registration.
• Stripe Inc. – payment processing and subscription management.
• Google Cloud – speech synthesis of the text you submit (Text-to-Speech).
• Resend – delivery of transactional email, such as the welcome message.
• Neon DB / AWS – database hosting and backups.
• Vercel Inc. – application hosting infrastructure.

All these partners are required to ensure a level of data security no less than required by the EU General Data Protection Regulation (GDPR).

If — and only if — you accept marketing cookies, we send a limited set of conversion events (registration, purchase, purchase value, the campaign identifiers, and a hashed form of your email address) from our servers to the following advertising platforms, so that they can measure how our campaigns perform:

• Meta Platforms Ireland Limited – 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (Facebook and Instagram advertising).
• TikTok Technology Limited – 10 Earlsfort Terrace, Dublin 2, Ireland (TikTok advertising).

Legal basis: your consent (Art. 6(1)(a) GDPR and Art. 5(3) of the ePrivacy Directive, implemented in Lithuania by Article 152 of the Law on Electronic Communications). Without consent nothing is collected and nothing is sent.

Joint controllers: for the collection and transmission of these events we and each platform act as joint controllers under Art. 26 GDPR. We are responsible for obtaining your consent and for the information in this policy; each platform is responsible for its own subsequent processing and for answering requests about it. The essence of these arrangements is set out in the Meta Controller Addendum and in the TikTok Business Products (Data) Terms.

Transfers outside the EU: both platforms may transfer the data to the United States. The transfers rely on the European Commission’s standard contractual clauses and, where applicable, on the EU–US Data Privacy Framework.

Withdrawal: you may withdraw this consent at any time. Withdrawal stops every future transmission and deletes the attribution cookie. Data a platform has already received is governed by that platform’s own policy and you may exercise your rights directly with it; as Art. 19 GDPR requires, we also notify both platforms of an erasure request.

As a data subject under GDPR, the User has the following rights:

• Right of access: obtain confirmation whether your data is being processed and access that data.
• Right to rectification: request correction of inaccurate or incomplete data.
• Right to erasure ("right to be forgotten"): request deletion of your personal data from our systems.
• Right to restriction of processing: temporarily suspend processing of your personal data in certain cases.
• Right to data portability: receive your data in a structured, commonly used format.
• Right to withdraw consent: withdraw a consent given for marketing attribution at any time and as easily as it was given, without affecting the lawfulness of processing carried out before the withdrawal.
• Right to lodge a complaint: contact the State Data Protection Inspectorate of the Republic of Lithuania (Valstybinė duomenų apsaugos inspekcija, ada.lt) if you believe your data is processed unlawfully.
• Self-service: you can download a copy of all data we hold about you and permanently delete your account, together with the generated audio files, on the privacy page of your account.

To exercise any of these rights, you can take action in your personal account or contact us via email: info@ainno.io.

The Service Provider reserves the right to periodically update this Privacy Policy. Changes take effect immediately once the updated version is published on this page.

We recommend regularly reviewing this page to stay informed about how we protect your privacy.

If you have questions or complaints regarding the processing of your personal data, please contact us: