Privacy Policy

Last modified: October 6, 2026

This Privacy Policy explains what information Scarleta collects when you use scarleta.ai, our web application, and our developer API (together, the "Service"), how we use it, who we share it with, and the choices and rights you have. Scarleta is the data controller for the personal information described here. If you use the Service on behalf of an organization, that organization is responsible for its own members' use.

1. Information we collect

Account information. When you create an account we collect identity and contact details such as your name, email address, and authentication metadata, handled through our identity provider.

Audio and files you upload. We store the audio files you upload to your library and the analysis and processed outputs derived from them (for example transcripts, detected tempo or key, tags, separated stems, and rendered audio).

Usage information. We collect information about how you use the Service, including the capabilities and recipes you run, job and billing metadata, API and webhook activity, and technical logs needed to operate, secure, and debug the platform.

Payment information. When you add a prepaid balance, our payment processor handles your card details. We do not store full card numbers; we retain payment metadata such as the fact and amount of a top-up and a processor reference.

2. How we use information

We use your information to provide and operate the Service: to run the analysis or processing you request, to store and organize your library, to meter and bill prepaid usage, to cache derived results by audio content so you are not charged twice for the same file in your own account, to deliver completion callbacks to webhook URLs you provide, to secure the platform against abuse, to provide support, and to comply with legal obligations. We do not use your uploaded audio to train foundation models, and we do not sell your personal information.

3. Sub-processors

We rely on the following sub-processors to deliver the Service. Each processes data on our behalf, limited to the purpose shown, under its own security and data-protection commitments.

We may update this list as our providers change; we will keep this section current.

4. How we share information

We share information with the sub-processors above to operate the Service, and we may disclose information when required by law, to enforce our Terms, or to protect the rights, safety, and security of Scarleta, our users, or the public. If Scarleta is involved in a merger, acquisition, or asset sale, information may be transferred subject to this Policy. We do not sell your personal information.

5. Storage, security, and tenant isolation

Your files and data are stored with our storage and database sub-processors and are isolated to your account or team workspace, so one account's data is not accessible to another. We apply access controls, signed time-limited URLs for file downloads, and transport encryption. No system is perfectly secure, but we work to protect your information against unauthorized access, alteration, and loss.

6. Data retention

Saved library files are retained for as long as your account is active; they are removed when you delete them or close your account. They are exempt from the routine sweep that clears transient, unsaved objects. Transient and unsaved objects are cleared on a regular schedule. Usage, billing, and log metadata are kept for as long as needed to operate the Service and meet legal, accounting, and security obligations. When you delete a file or your account, associated data is removed subject to any retention we are legally required to maintain.

7. Your rights and choices

You can access and manage your account information, upload and delete files, and control your team workspace within the Service.

• Data export. You can request an export of your data through your account.
• Account deletion. You can request deletion of your account and its associated data through your account settings.

If you are in the EEA, the UK, or Switzerland (GDPR). You have the right to access, correct, delete, restrict, or object to the processing of your personal data, the right to data portability, and the right to withdraw consent where processing is based on consent. Our legal bases for processing are performance of our contract with you, our legitimate interests in operating and securing the Service, and compliance with legal obligations. You may lodge a complaint with your local supervisory authority.

If you are a California resident (CCPA/CPRA). You have the right to know what personal information we collect and how we use it, the right to access and delete it, the right to correct it, and the right not to be discriminated against for exercising these rights. We do not sell your personal information and do not share it for cross-context behavioral advertising.

To exercise any of these rights, use the controls in your account or contact us at [email protected]. We will verify your request before acting on it.

8. Cookies

The Service uses cookies and similar technologies that are necessary to sign you in, keep your session secure, and operate core functionality. We do not use them for cross-site behavioral advertising.

We use a first-party cookie with a random ID to count visits and sign-ups that come from our posts. It contains no personal information and is not shared with anyone.

9. Children

The Service is not directed to children under the age required for consent in your jurisdiction, and we do not knowingly collect their personal information. If you believe a child has provided us information, contact us and we will address it.

10. International transfers

We and our sub-processors may process information in countries other than your own. Where we transfer personal data internationally, we rely on appropriate safeguards as required by applicable law.

11. Changes to this Policy

We may update this Policy from time to time. When we make material changes we will update the "Last modified" date above and, where appropriate, notify you through the Service.

12. Contact

For privacy questions or to exercise your rights, contact [email protected].