1. Scope & Jurisdiction

This policy applies to users worldwide. For EU users, we comply with GDPR requirements. California residents have CCPA rights. Data transfers outside your jurisdiction use EU-approved safeguards.

2. Data Processing

We process location data via encrypted connections to generate real-time audio tours, in part using artificial intelligence. Location data is deleted immediately after session completion. We also process account data for service delivery.

3. Legal Basis

We process data based on:
- Consent (location tracking)
- Contractual necessity (account data)
Account deletion removes all personal data within 30 days.

4. Data Collection

Collected data includes:

• Account Information: Name, Email
• Technical Data: IP address, Device ID, Usage Metrics
• Location Data: GPS coordinates (during active sessions)
• Payment Data: Processed 3rd Party Providers (we never store card details)

5. Data Retention

Account data retained until deletion. Anonymized usage metrics kept for 3 years. Legal obligations may require extended or reduced retention.

6. Data Security

We implement:
- encryption
- good practices
- regular audits

7. Third-Party Sharing

Limited sharing with:
- Payment processors
- Map providers
- Text-to-speech services
All partners undergo reviews.

8. Your Rights

You have rights to:
- Access & Portability
- Correction & Deletion
- Processing Restriction
- Withdraw Consent
Submit requests to support@audiotouro.com. Responses within 30 days.

9. Children's Privacy

Not intended for users under 16. We delete accounts of underage users upon verification.

10. Contact Information

Data Controller:
Digital Software
digitalsoftware.io
Groningen, Netherlands
Email: support@audiotouro.com