Privacy and your data
The anonymous check evaluates the answers you submit without saving an account record. Its draft and completed result stay in browser session storage for this tab. Use “Clear this draft” or close the tab to remove them. Audio master bytes stay on your device; SHA-256 is calculated in your browser.
Saved Passports
After you sign in and explicitly save a purchase summary, we store your declared facts, assessment, selected rules and sources, file hash and general version label. Drafts without a checkout are removed after seven days by the retention job. Started checkouts remain for recovery until account deletion.
Private documents and public links
Optional PDF, JPG and PNG documents are stored privately, scanned and marked user supplied — not reviewed. You can delete individual documents. A public version link exposes its saved redacted check and exact master hash to anyone holding that link. It excludes your full intake, account, private labels and supporting documents. Each link can be revoked independently.
Optional analytics
Only after consent, we count allowed technical steps, goal categories, tool counts and outcome categories. Analytics excludes release titles, tool identifiers or URLs, rights answers, account details, filenames, hashes, full intake, documents and payment payloads. Counts contain no account, session, IP address or private URL. Change your choice through Analytics settings; reopening the choice stops future events until you allow them again.
Who handles your data
Nice Balance, LLC operates this service. Stripe processes payments; card details are entered on Stripe and are not stored by this application. Resend sends account emails, Migadu handles support email, and private supporting documents and encrypted backups use Cloudflare R2. Contact help@aimusic.events with privacy requests.
Account deletion
Use Account settings to remove consumer product records and private files, close every share link and end all account sessions. A disabled technical account record and hashed session revocation records remain to enforce invalidation; the account name, contact address and password are removed or randomized. Minimal real-payment records remain separately for seven years after account deletion for accounting and payment reconciliation. They contain the provider reference, product, amount, currency, tax, payment status and dates; they exclude your Passport content, account email, file hash and supporting documents. Sandbox financial records are removed after seven days. This does not delete records Stripe must retain under its own policy. Historical records belonging to a separate organization workspace are outside this consumer service.