Privacy Policy

Last updated: May 2026

At Audevo, your privacy matters to us. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and what rights you have under the General Data Protection Regulation (GDPR) and applicable Estonian law. By using Audevo you agree to the practices described in this policy.

1. Who We Are

Audevo OÜ is the data controller responsible for your personal data. We are a private limited company registered in Estonia.

Contact: support@audevo.io

Website: audevo.io

2. What Data We Collect

2.1 Account Data

When you register on Audevo we collect:

• Full name
• Email address
• Username
• Password (stored encrypted, never readable)
• Country of residence

2.2 Artist / Vendor Data

If you register as an artist on Audevo we additionally collect:

• Artist or stage name
• Payout information (processed securely via Stripe)
• Tax identification information where required by law
• Music files, artwork and metadata you upload

2.3 Purchase Data

When you make a purchase we collect:

• Purchase history and downloaded files
• Transaction amounts and dates
• Payment is processed entirely by Stripe — Audevo never stores your card details

2.4 Usage Data

We automatically collect certain technical data when you use our platform:

• IP address
• Browser type and version
• Pages visited and time spent
• Search queries on Audevo
• Device type (desktop, mobile, tablet)

2.5 Communications

If you contact us by email or through our contact form, we collect the content of your message and your email address in order to respond to you.

3. Why We Collect Your Data

We process your personal data for the following purposes and legal bases under GDPR:

• To provide our service — creating and managing your account, processing purchases, delivering downloads (Legal basis: Contract)
• To process payments — facilitating secure transactions via Stripe (Legal basis: Contract)
• To communicate with you — sending purchase receipts, important account updates and support responses (Legal basis: Contract)
• To send marketing emails — only if you have explicitly opted in (Legal basis: Consent)
• To improve our platform — analysing usage data to understand how Audevo is used and to fix issues (Legal basis: Legitimate interest)
• To comply with legal obligations — maintaining financial records as required by Estonian and EU law (Legal basis: Legal obligation)

4. How We Share Your Data

Audevo does not sell your personal data. We only share data with trusted third parties where necessary:

• Stripe — payment processing. Stripe is PCI-DSS compliant and processes all card data securely
• Hostinger — website hosting and infrastructure
• WP Mail SMTP — email delivery for receipts and notifications
• Google Analytics / MonsterInsights — anonymous usage statistics to improve the platform
• Legal authorities — only when required by law or court order

5. Cookies

Audevo uses cookies to make our platform work properly and to improve your experience. Cookies we use include:

• Essential cookies — required for login sessions and the shopping cart to function
• Analytics cookies — anonymous data to understand how visitors use Audevo
• Preference cookies — remembering your settings and preferences

You can control cookies through your browser settings. Disabling essential cookies may affect platform functionality.

6. Data Retention

We retain your personal data for as long as your account is active. If you close your account:

• Account data is deleted within 30 days
• Purchase and transaction records are retained for 7 years as required by Estonian financial law
• Music files uploaded by artists are removed within 60 days of account closure

7. Your Rights Under GDPR

As a resident of the European Union or European Economic Area you have the following rights:

• Right of access — you can request a copy of all personal data we hold about you
• Right to rectification — you can ask us to correct inaccurate data
• Right to erasure — you can ask us to delete your personal data (“right to be forgotten”)
• Right to restriction — you can ask us to limit how we use your data
• Right to data portability — you can request your data in a machine-readable format
• Right to object — you can object to processing based on legitimate interest, including marketing
• Right to withdraw consent — where processing is based on consent, you can withdraw it at any time

8. International Data Transfers

Audevo is based in Estonia within the European Union. Some of our service providers (such as Stripe) may process data outside the EU. Where this occurs, we ensure appropriate safeguards are in place in accordance with GDPR, such as Standard Contractual Clauses approved by the European Commission.

9. Data Security

We take the security of your personal data seriously. Measures we have in place include:

• HTTPS encryption on all pages
• Encrypted password storage
• Secure payment processing via Stripe (PCI-DSS compliant)
• Regular security updates to our platform
• Limited staff access to personal data on a need-to-know basis

No method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

10. Children’s Privacy

Audevo is not intended for users under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us immediately at support@audevo.io and we will delete it promptly.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of significant changes by email. The “Last updated” date at the top of this page will always reflect the most recent version. Continued use of Audevo after changes constitutes acceptance of the updated policy.

12. International Users

Audevo serves users worldwide. Depending on where you are located, additional privacy rights may apply to you:

• United States (California) — California residents have additional rights under the CCPA (California Consumer Privacy Act), including the right to know what personal data is collected, the right to delete it, and the right to opt out of any sale of personal data. Audevo does not sell personal data.
• United Kingdom — UK users are protected under the UK GDPR and Data Protection Act 2018, which mirror EU GDPR rights.
• Brazil — Brazilian users have rights under the LGPD (Lei Geral de Proteção de Dados), including access, correction, deletion and portability of personal data.
• Canada — Canadian users are protected under PIPEDA (Personal Information Protection and Electronic Documents Act).
• Australia — Australian users are protected under the Privacy Act 1988 and Australian Privacy Principles.
• All other countries — Regardless of your location, Audevo is committed to handling your personal data with care, transparency and respect. You may always contact us at support@audevo.io to ask about your data or request its deletion.

13. Complaints

If you believe we have not handled your personal data correctly, you have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) at www.aki.ee, or with the data protection authority in your country of residence.

15. Contact