Auditio logo

Privacy Policy

Auditio is committed to your privacy. We strictly comply with GDPR (EU), UK GDPR (United Kingdom), and the new DPA (Switzerland) to ensure a perfectly secure training environment.

1. Data Collection

  • Account: Your email for authentication and score tracking.
  • Voice & Audio: Your recordings are transmitted via secure streams for real-time technical and semantic analysis. They are never stored on our servers and are destroyed immediately after processing: only the feedback, the scores and the written transcript of the exchange are retained.
  • Imported courses (PDFs & photos): The text from your PDFs and the photos of your notes are transmitted securely to extract their content (OCR) and generate flashcards, quizzes and summaries. The files and photos are never retained: only the extracted text and the generated study content are stored.
  • Security: A pseudonymous technical identifier of your device, computed locally in your browser, and a salted hash of your IP address are linked to your account, solely to prevent abuse and fraudulent multi-account creation (legitimate interest, Art. 6(1)(f) GDPR).

2. Partners and Processors

We only collaborate with trusted third parties guaranteeing a high level of protection:

  • Supabase (Hosting)
  • Hosting of user data (AWS), physically located in Sweden (European Union).
  • Artificial Intelligence Services
  • Analysis of your orals and text extraction (OCR) from your imported documents and photos, via cutting-edge models provided by world leaders in the field. Data travels via secure channels and our partners are contractually committed not to use your data for training their public models.
  • Anti-fraud signal
  • A device identifier is computed locally in your browser by an open-source library and stored with your account to detect fraudulent multi-account creation. It is pseudonymous, non-biometric and never shared with third parties.
  • Sentry (error monitoring)
  • Limited collection of production technical errors to detect and fix malfunctions. Course content, audio recordings and answers are not intentionally sent to Sentry.
  • Stripe (payments)
  • Processes subscription payments and receives the data required for that purpose. Auditio never stores nor sees your card details.
  • Brevo (emails)
  • European provider sending our verification and service emails. It only receives your email address.
  • PostHog & Google Analytics (audience)
  • Loaded only after your consent in the cookie banner. PostHog is hosted in the EU and may replay a masked sample of sessions (text, inputs and images hidden) to improve the product.

3. International Data Flows

  • Given our international presence, your data may flow between the EU, Switzerland, and the UK. These regions mutually benefit from adequacy decisions. For transfers to third countries (such as the United States), we rely on the Data Privacy Framework (DPF) or Standard Contractual Clauses to ensure an equivalent level of protection.

4. Cookies and Local Storage

  • Auditio uses local storage strictly necessary for technical operation: maintaining your session, display preferences, and fraud prevention. Analytics or marketing services are only activated after your consent through the preferences banner.

5. Retention Period

  • Your account data is kept as long as your account is active. In case of prolonged inactivity of 24 months, your data is automatically anonymized or deleted. Your session history is limited to the most recent analyses (30 on the free tier, 50 with Auditio Pro). Audio files, as well as imported PDFs and photos, are destroyed immediately after processing: only the extracted text and generated content are retained. To prevent fraud, a hashed, irreversible fingerprint of your email address is retained after account deletion, pursuant to Art. 6(1)(f) GDPR (legitimate interest, fraud prevention).

6. Your Rights

  • You have the right to access, rectify, restrict and erase your data (right to be forgotten), as well as the right to data portability and the right to object to processing based on our legitimate interest. To exercise these rights, contact us at info@auditio.app. You may also lodge a complaint with the Belgian Data Protection Authority (APD/GBA) or the supervisory authority of your country of residence.
  • Direct Action: You can delete your account and all associated data instantly from your Dashboard. This action is irreversible.

7. Ownership of your content and AI no-training commitment

  • You retain full ownership of your content (audio recordings, transcripts, oral answers, imported documents and photos). Auditio firmly commits never to use your data to train, fine-tune or evaluate any artificial intelligence model, whether internal, third-party or operated by our subprocessors. Our AI partners operate contractually under a "no-training" tier: your content transits only to produce your analysis, through encrypted channels, without leaving regions benefiting from an adequate level of protection (EU, DPF).
  • Usage licence: To execute the service you request, you grant us a strictly operational licence over your content. The full details (duration, scope, warranties) are set out in articles 6 and 9 of the General Terms of Use.

8. Data Controller and Legal Bases

  • The data controller is Laurent Chalon, publisher of Auditio, established in Belgium (contact: info@auditio.app). Processing relies on the following legal bases: performance of the contract (providing the service you request), your consent (audience measurement and marketing cookies, revocable at any time), and our legitimate interest (fraud prevention, service security and error monitoring).

Auditio is committed to total transparency regarding your data.