1. Introduction
Maskai.co ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform and services.
2. Information We Collect
Account Information: When you create an account, we collect your name, email address, and encrypted password. We do not store plaintext passwords.
Payment Information: All payment processing is handled securely by Stripe. We never store your credit card numbers, CVV, or full card details on our servers. We only retain your Stripe Customer ID for subscription management.
Usage Data: We collect information about your interaction with the service, including upload counts, processing history, file metadata (name, size, format), and timestamps. We do NOT retain, store, or listen to the content of your audio or video files beyond the processing period.
Technical Data: IP addresses, browser type, device information, and cookies for authentication and analytics purposes.
3. How We Use Your Information
We use the collected information to: provide and maintain the service; process your audio and video files; manage your subscription and billing; communicate important updates; enforce our Terms of Use; prevent fraud and abuse; and improve the platform.
4. Data Retention
Processed files are automatically deleted according to your plan's retention period (3 to 365 days). Account data is retained until you delete your account. Payment records are retained as required by law and Stripe's policies.
5. Data Security
We implement industry-standard security measures including: end-to-end encryption for data in transit (TLS 1.3); encrypted storage for sensitive data at rest (AES-256); JWT-based authentication with secure token rotation; rate limiting and DDoS protection; regular security audits and penetration testing; and infrastructure hosted on AWS with SOC 2 compliance.
6. Third-Party Services
We use the following third-party services: Stripe for payment processing; AWS for cloud infrastructure; Sentry for error monitoring. Each of these providers maintains their own privacy policies and security certifications.
7. Your Rights
You have the right to: access your personal data; request correction of inaccurate data; request deletion of your account and data; export your data; opt out of marketing communications; and lodge a complaint with a supervisory authority.