Privacy Policy

1. Data We Collect

• Account data — email address, display name, hashed password
• Usage data — identification requests, timestamps, IP address (90-day retention)
• Audio data — processed ephemerally; never stored, deleted immediately after processing
• OAuth tokens — if you sign in via Google or Apple; we never see your provider password

2. How We Use Data

To authenticate sessions, process audio identification, improve accuracy (anonymized aggregates only), detect abuse, and comply with legal obligations. We do not sell personal data or use it for advertising.

3. Cookie Usage

Session cookies only — to keep you signed in and store your JWT auth token (secure, HttpOnly). No tracking cookies, advertising cookies, or third-party analytics.

4. Data Retention

• Audio files — deleted immediately (zero retention)
• Account data — until account deletion
• Usage logs — 90 days, then auto-purged

5. Your GDPR Rights

EEA/UK/Swiss users have rights to: access, rectification, erasure, portability, restriction, and objection. Email privacy@dekod.ai — we respond within 30 days.

You can also download your data or delete your account directly from your account settings.

6. Third-Party Processors

• DigitalOcean — cloud infrastructure
• Modal — serverless ML inference (ephemeral only)
• Google / Apple — OAuth only when you choose it

7. Contact

Privacy inquiries: privacy@dekod.ai. Response within 30 days.