Privacy Policy

1. Who We Are

Oni AI Mastering is operated by Oni Mastering Inc., a corporation organized under the laws of the State of New York ("Oni," "we," "us," "our"). This policy explains what information we collect, how we use it, and your choices.

2. Information We Collect

Account information: email address and password (handled securely via Supabase Authentication — we don't see or store your raw password).

Billing information: when you subscribe, payment is processed directly by Stripe. We do not store your full card number — Stripe handles that. We do store a Stripe customer/subscription reference ID, your plan, and your credit balance.

Audio you upload: processed to generate your mastered output. See Section 3 for how this is handled.

Usage data: basic technical data (e.g., which features you use, credit consumption, error logs) to operate and improve the Service.

Website analytics: we use Cloudflare Web Analytics to count visits and see which pages, countries, devices and referring sites visitors come from. It does not use cookies and does not track you across other websites.

Voice/chat interactions: if you use the AI voice/chat mastering assistant, your text and voice inputs are sent to our backend, which proxies them to Anthropic (Claude, for chat) and OpenAI (for text-to-speech and transcription) to generate responses. These providers process this data under their own terms; we don't store a permanent transcript of these conversations beyond what's needed to maintain your active session. [REVIEW — confirm actual retention behavior with engineering before publishing.]

3. Your Audio Uploads

We never use your uploaded or mastered audio to train AI models — ours or anyone else's. Your files are processed solely to generate your mastered output.

Audio processing happens primarily client-side, in your browser, using Web Audio APIs — your raw audio generally does not need to be uploaded to our servers to be mastered. Where any audio-related data does pass through our backend (e.g., certain voice features), it is used only to deliver that specific feature and is deleted shortly afterward. We do not retain a long-term archive of your audio.

4. How We Use Your Information

We use the information above to:

• Provide and operate the Service (mastering, account management, billing);
• Process payments and manage your subscription;
• Communicate with you about your account, billing, or Service updates;
• Improve the Service and diagnose technical issues;
• Comply with legal obligations.

We do not sell your personal information.

5. Third Parties We Work With

• Supabase — authentication and account/credit data storage.
• Stripe — payment processing and subscription billing.
• Railway — hosts our backend server.
• Cloudflare — hosts our frontend (onimastering.com) and provides privacy-friendly website analytics.
• Anthropic (Claude) — powers the AI chat/mastering-assistant conversation.
• OpenAI — powers text-to-speech (voice) and audio transcription features.

Each of these providers processes data under their own privacy policies and only to the extent necessary to provide their part of the Service to you.

6. Data Retention

• Account data: retained while your account is active. If you delete your account, we delete your associated profile data within [REVIEW — confirm timeframe, e.g., 30 days], except where we're required to retain billing records for legal/tax purposes.
• Uploaded/mastered audio: deleted shortly after processing, as described in Section 3. [REVIEW — confirm exact behavior/timeframe with engineering before publishing.]
• Billing records: retained as required for accounting, tax, and legal compliance.

7. Your Rights and Choices

Depending on your location, you may have rights to access, correct, or delete your personal information, and to object to certain processing. To exercise these rights, contact us at [email protected].

You can cancel your subscription and manage billing details at any time via Settings → Manage Subscription.

8. Children's Privacy [REVIEW]

The Service is not directed at children under 16, and we do not knowingly collect personal information from children under 16. This aligns with the minimum age stated in our Terms of Service. [COPPA and similar laws have specific requirements — please have counsel confirm this section, especially if you ever intend to permit or knowingly collect data from users under 16.]

9. Security

We use industry-standard practices (including relying on Supabase and Stripe's security infrastructure for authentication and payments) to protect your information. No system is perfectly secure, and we can't guarantee absolute security.

10. International Users [REVIEW]

If you access the Service from outside the United States, your information may be processed in the United States. [If you expect meaningful EU/UK/international traffic, this section likely needs GDPR-specific language — worth flagging to counsel.]

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by an updated "Last updated" date.

12. Contact

Questions about this policy or your data: [email protected]