Privacy Policy
Last Updated: May 10, 2025
This Privacy Policy explains how Arjay Audio Tools("we," "our," or "us") collects, uses, shares, and protects information about you when you use Arjay Audio Tools (the "Service"), available at https://arjayaudiotools.com. By using the Service you agree to the practices described in this policy.
Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
1. Data We Access and Collect
We collect only the data necessary to provide and improve the Service. The categories of data we collect include:
1.1 Google Account Data (via Google Sign-In)
If you choose to sign in with your Google account, we receive the following information from Google's OAuth service:
- Your Google account email address
- Your Google account display name and profile picture URL
- A unique Google user identifier (UID) used to link your account
We do not request access to your Gmail inbox, Google Drive, Google Contacts, Google Calendar, or any other Google service beyond basic profile and authentication information unless explicitly disclosed at the time of the permission request.
1.2 Email / Password Account Data
If you sign up with email and password, we store your email address and a securely hashed version of your password via Firebase Authentication. We never store plain-text passwords.
1.3 Uploaded Files
To perform processing jobs, you upload files to our Service. These may include:
- Audio files (MP3, WAV, M4A, M4B, OGG, FLAC, AAC, WMA, and others)
- Video files (MP4, MOV, AVI, MKV, WEBM, FLV, and others)
- Document files (PDF, DOCX, TXT, EPUB, RTF, MD, and others)
Uploaded files are transmitted over an encrypted connection and stored temporarily in secure cloud storage solely for the purpose of completing your requested job.
1.4 Job Output Files
Processing jobs may produce output files, such as:
- Split audio chapters (MP3, M4B)
- Text transcripts and PDF transcription documents
- AI-narrated audio files
- Extracted audio tracks
Output files are stored temporarily in your account and are accessible via time-limited download links. They are subject to the same retention and deletion practices as uploaded files (see Section 5).
1.5 API Keys
If you use the Bring Your Own Key (BYOK) feature, you may optionally provide your own OpenAI API key. Keys are stored encrypted at rest and used exclusively to submit processing requests on your behalf. We do not use your API key for any other purpose.
We also issue our own Service API keys to authenticated users. These tokens are securely stored and used to authenticate requests to our REST API.
1.6 Usage and Technical Data
We may automatically collect limited technical information to operate and improve the Service, including:
- Job metadata (file type, duration, job status, timestamps)
- Credit balance and transaction history
- Browser type and operating system (from HTTP headers)
- IP address (for security and fraud prevention)
- Service logs (errors, latencies) retained for debugging
2. How We Use Your Data
We use the data described above exclusively to provide, operate, and improve the Service. Specifically:
- Authentication: Google account data and email/password credentials are used to create and maintain your account and authenticate your sessions.
- AI Processing: Uploaded files are sent to AI processing pipelines (using OpenAI Whisper for transcription and GPT models for content analysis) to fulfil the specific job you requested. Files are processed for your benefit only.
- Job Delivery: Output files are stored temporarily so you can download them after processing is complete.
- Billing and Credits: Transaction and credit data are used to track your account balance and process payments via PayPal.
- Service Communication: Your email address may be used to send job completion notifications, password reset emails, or important account notices. We do not send marketing emails without your explicit consent.
- Security and Fraud Prevention: Usage logs and IP addresses help us detect and prevent abuse of the Service.
- Service Improvement: Aggregate, anonymized usage statistics (never linked to individual users or file content) may be used to improve performance, reliability, and features.
We do not use your data to train AI or machine learning models. We do not use Google user data for advertising, profiling, or any purpose beyond providing the features you explicitly request.
Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements: data received from Google APIs is used only to provide or improve user-facing features that are prominent in the requesting application's user interface; it is not transferred to third parties except as necessary to provide the Service; it is not used for serving advertisements; it is not used for any purpose other than what is described at the time of data access.
3. Data Sharing and Disclosure
We do not sell your personal data. We do not rent, trade, or otherwise transfer your personal information to third parties for their own marketing or commercial purposes.
We may share your data with the following categories of service providers only to the extent required to operate the Service:
- Google / Firebase: We use Firebase Authentication (identity management), Firebase Firestore (structured data storage), and Google Cloud Storage (file storage). These services are operated by Google LLC and are subject to Google's Privacy Policy.
- OpenAI:Uploaded audio and document content is sent to OpenAI's API (Whisper and GPT) to perform transcription and content analysis on your behalf. OpenAI processes this data as a data processor under their API Data Usage Policy.
- PayPal: If you purchase credits, payment processing is handled by PayPal. We share only the transaction amount and a reference ID with PayPal; we do not receive or store full payment card details.
We may also disclose your information if required by law, court order, or governmental authority, or to protect the rights, property, or safety of Arjay Audio Tools, our users, or the public.
All third-party service providers are contractually required to use your data only as directed by us and in accordance with this Privacy Policy.
4. Data Storage and Security
We take the security of your data seriously and implement industry-standard safeguards:
- Encryption in transit: All data transmitted between your browser and our Service is encrypted using TLS (HTTPS). All data sent to third-party service providers also travels over encrypted connections.
- Encryption at rest: Files stored in Google Cloud Storage are encrypted at rest by default using AES-256. Sensitive fields (such as API keys) stored in our database are encrypted at the application level before storage.
- Authentication and access controls: Access to your account data is protected by Firebase Authentication. Internal access to production data is restricted to authorized personnel using least-privilege principles.
- Isolated processing: Each job runs in an isolated cloud environment. Your files are not accessible to other users.
- Secure cloud infrastructure: The Service runs on Google Cloud Platform infrastructure, which maintains a comprehensive set of security certifications (ISO 27001, SOC 2, etc.).
While we implement these safeguards, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security, but we will notify you of any data breach affecting your information as required by applicable law.
5. Data Retention and Deletion
5.1 Uploaded and Output Files
Uploaded audio, video, and document files and their corresponding output files are stored temporarily. Download links for output files expire after a short window (typically 1 hour). Files may be permanently deleted from our storage within a short period after your job completes and the download window closes. We do not retain your file content beyond the period necessary to deliver your job results.
5.2 Account Data
Your account information (email address, display name, credit balance, job history metadata) is retained for as long as your account is active or as needed to provide the Service.
5.3 Requesting Deletion
You may request deletion of your account and all associated data at any time by contacting us at privacy@arjayaudiotools.com. Upon receiving a verified deletion request, we will:
- Delete your account credentials and profile information
- Delete any uploaded files and job output files associated with your account
- Delete stored transcripts, generated PDFs, and other output data
- Revoke and delete any stored API keys or OAuth tokens
We will complete deletion requests within 30 days. Aggregate, anonymized analytics data that cannot identify you may be retained for statistical purposes.
5.4 Revoking Google Account Access
If you signed in with Google, you can revoke Arjay Audio Tools's access to your Google account at any time by visiting Google Account Permissions. Revoking access will sign you out of the Service but does not automatically delete your Arjay Audio Tools account or associated data. To delete your account data, please submit a deletion request as described above.
6. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Access: You may request a copy of the personal data we hold about you.
- Correction: You may request that we correct inaccurate or incomplete personal data.
- Deletion: You may request deletion of your personal data as described in Section 5.3.
- Portability: You may request a machine-readable export of your data.
- Withdrawal of consent: Where processing is based on your consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.
- Objection: You may object to certain types of processing, including processing for direct marketing purposes.
To exercise any of these rights, please contact us at privacy@arjayaudiotools.com. We will respond to verified requests within 30 days.
7. Cookies and Local Storage
The Service uses browser local storage and session storage to maintain your login session (managed by Firebase Authentication). We do not use third-party advertising cookies. We do not use tracking pixels or fingerprinting technologies.
If we introduce analytics or additional cookies in the future, this policy will be updated and you will be notified.
8. Children's Privacy
The Service is not directed at children under the age of 13 (or a higher age threshold where required by local law). We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us at privacy@arjayaudiotools.com and we will delete that information promptly.
9. Google API Services — Limited Use Disclosure
Arjay Audio Tools's use of information received from Google APIs is limited to the following, in accordance with the Google API Services User Data Policy:
- Google user data is used only to provide or improve user-facing features that are visible and prominent in Arjay Audio Tools's user interface (specifically: authentication and account identification).
- Google user data is not transferred to third parties except as necessary to provide or improve the Service (e.g., storing your profile in Firebase, which is itself a Google service).
- Google user data is not used for serving advertisements.
- Google user data is not used for any purpose that Google considers unauthorized under its policies.
- Humans at Arjay Audio Tools do not read your Google user data unless you have explicitly given us permission to do so or it is necessary for security purposes (such as investigating a reported abuse or security incident).
10. AI Processing Disclosure
The Service uses artificial intelligence models to process your files:
- Transcription:Audio content is transcribed using OpenAI Whisper, a speech-to-text model. Your audio is sent to OpenAI's API for this purpose.
- Chapter detection:Transcription text is analysed by OpenAI GPT models to identify chapter boundaries. Your transcript text is sent to OpenAI's API for this purpose.
- Narration:If you use the Narrate feature, document text is sent to OpenAI's text-to-speech API to generate audio output.
OpenAI does not use data submitted via the API to train its models by default, per OpenAI's API data usage policy. We do not use your content to train any AI models ourselves.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will update the "Last Updated" date at the top of this page and, where appropriate, notify you by email or through the Service. Continued use of the Service after changes are posted constitutes your acceptance of the updated policy.
12. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Privacy inquiries: privacy@arjayaudiotools.com
General support: support@arjayaudiotools.com
Contact form: https://arjayaudiotools.com/contact