Privacy Policy

1. Introduction

Aumio Distribution ("Aumio," "we," "us," or "our") operates the Aumio Distribution platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

2. Information We Collect

We collect information you provide directly, including:

• Account information (name, email address, password)
• Artist profile information (artist name, bio, social links, profile picture)
• Music and audio files you upload for distribution
• Release metadata (titles, genres, artwork, credits)
• Payment and financial information for royalty processing
• Messages, images, and files you share with Twin, Aumio's AI assistant

When you connect third-party accounts, we collect:

• Facebook profile information (name, email, profile picture)
• Facebook Page data (page names, follower counts, engagement metrics)
• Instagram Business/Creator account data (username, followers, media, engagement metrics, audience demographics)
• Access tokens required to retrieve this data on your behalf

Signing in with Google

If you sign in with Google, we receive your name, email address, and profile picture from your Google account. We do not request access to anything else in your Google account, such as Gmail, Drive, or Contacts.

We use this information only to create your Aumio account, sign you in, and show your name in Aumio. We do not use it for advertising and we do not sell it. It is stored with your account by Supabase, the service that runs Aumio's sign-in, and is not shared with anyone else. It is deleted when your account is deleted, and you can remove Aumio's access at any time in your Google Account, under Security, then Your connections to third-party apps and services.

3. How We Use Your Information

• To distribute your music to streaming platforms
• To provide analytics and insights about your audience and content performance
• To power AI-assisted recommendations for release strategy, marketing, and growth
• To process royalty payments
• To communicate with you about your account and releases
• To improve and personalize our platform

4. Third-Party Services

We integrate with third-party services including Meta (Facebook/Instagram), Spotify, and music distribution partners. When you connect these services, their respective privacy policies also apply. We only request the minimum permissions necessary to provide our analytics and distribution features.

Twin, Aumio's AI assistant, uses AI models from Google (Gemini) and OpenAI to answer your messages and to create images and posts. What you send Twin, such as messages, release details, and images, is processed by these providers to produce the response. If you use the microphone to dictate, your browser's own speech recognition turns your voice into text; in Google Chrome, that service is provided by Google. The Aumio team may review Twin conversations to check the quality of its answers, fix problems and keep Twin safe. Only authorized team members can see them.

We also use service providers to run the platform: Vercel (hosting), Supabase and Amazon Web Services (database and file storage), and Resend (email).

5. Data Storage and Security

Your data is stored securely using Supabase (hosted on AWS). Access tokens for third-party services are encrypted at rest using AES-256 encryption. We implement industry-standard security measures including HTTPS encryption, row-level security policies, and secure authentication via Supabase Auth.

6. Data Retention

We retain your data for as long as your account is active. Social media analytics data is retained to provide historical trend analysis. You can request deletion of your data at any time (see Section 8).

7. Data Sharing

We do not sell your personal information. We share data only with music distribution partners (to distribute your releases), payment processors (to process royalties), AI providers (to power Twin), and infrastructure providers (to host our platform). We may disclose information if required by law.

8. Your Rights

You have the right to:

• Access, update, or delete your personal information
• Disconnect third-party accounts at any time
• Request a copy of your data, in a commonly used format you can take elsewhere
• Object to, or ask us to restrict, how we use your information
• Request deletion of your account and all associated data

To exercise these rights, visit our data deletion page or contact us at socials@aumiodistro.com. If you are in the European Economic Area or the United Kingdom, you can also lodge a complaint with your local data protection authority.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.

10. Contact Us

If you have questions about this Privacy Policy, contact us at socials@aumiodistro.com.