Privacy Policy

Forward Digital SAS ("Forward Digital," "authio," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI audio detection services.

We understand the sensitive nature of audio content and have designed our services with privacy by design principles. This policy applies to all users of our services, including our website, API, and applications.

We collect information you provide directly to us, such as:

**Account Information** • Name, email address, and company name • Billing information (processed securely via third-party providers) • API keys and authentication credentials

**Audio Data** • Audio files submitted for analysis • Metadata associated with audio files • Detection results and reports

**Usage Information** • API calls and usage patterns • Performance metrics and error logs • Feature usage and preferences

**Automatically Collected Information** • IP addresses and device information • Browser type and operating system • Referral sources and pages visited

We use the information we collect to:

**Provide Our Services** • Process audio files for AI detection • Generate detection reports and analytics • Maintain and improve our detection algorithms • Provide customer support

**Ensure Security and Compliance** • Detect and prevent fraudulent activities • Monitor for service abuse • Comply with legal obligations • Enforce our Terms of Service

**Improve Our Services** • Analyze usage patterns and trends • Develop new features and capabilities • Optimize performance and accuracy • Conduct research and development

**Communications** • Send service-related notifications • Provide technical support • Share product updates (with consent) • Process billing and payments

**Audio Files** • Automatically deleted within 24 hours of processing • Option to retain for 30 days with explicit consent • Immediate deletion available upon request

**Account Data** • Retained for the duration of your account • Deleted 90 days after account termination • Billing records retained as required by law

**Detection Results** • Stored for the duration of your subscription • Exportable at any time • Deleted upon account termination

**Usage Logs** • Anonymized after 90 days • Aggregated data retained for analytics • Personal identifiers removed

We do not sell, trade, or rent your personal information. We may share information:

**With Your Consent** • When you explicitly authorize sharing • For integrations you enable • As directed by you

**Service Providers** • Cloud infrastructure providers • Payment processors (Stripe) • Analytics services (with anonymization) • Customer support tools

**Legal Requirements** • To comply with legal obligations • To respond to lawful requests • To protect rights and safety • To investigate potential violations

**Business Transfers** • In connection with mergers or acquisitions • With appropriate confidentiality agreements • Maintaining equivalent privacy protections

We implement industry-standard security measures:

**Technical Safeguards** • TLS encryption for data transmission • Encryption for data at rest • Security monitoring and updates • Multi-factor authentication available

**Organizational Measures** • Limited employee access on need-to-know basis • Regular security training for staff • Incident response procedures • Data processing agreements with vendors

**Compliance** • GDPR compliant (French company under CNIL) • Industry-standard security practices • Regular security assessments • Privacy by design principles

**Data Location** • Primary servers located in the European Union • Data processing within EU jurisdiction • EU-based infrastructure providers

**Transfer Safeguards** • Standard Contractual Clauses when required • GDPR compliance as French company • Appropriate technical measures

**Your Rights** • Access your personal data • Request data portability • Correct inaccurate information • Object to certain processing

If you are located in the European Economic Area, you have additional rights:

**Right to Access** • Obtain confirmation of processing • Access your personal data • Receive processing information

**Right to Rectification** • Correct inaccurate data • Complete incomplete data

**Right to Erasure** • Request deletion of your data • Subject to legal obligations

**Right to Restrict Processing** • Limit how we use your data • During verification periods

**Right to Data Portability** • Receive data in structured format • Transfer to another controller

**Right to Object** • Object to processing based on legitimate interests • Opt-out of marketing communications

**Automated Decision Making** • Right to human review of automated decisions • Explanation of logic involved

To exercise these rights, contact: privacy@fwdmusic.com

We use cookies and similar technologies to:

**Essential Cookies** • Maintain session state • Remember preferences • Enable core functionality

**Analytics Cookies** • Understand usage patterns • Improve user experience • Measure performance

**Marketing Cookies** • With your consent only • Track campaign effectiveness • Personalize content

**Managing Cookies** • Browser settings to block cookies • Opt-out of analytics tracking • Clear cookies at any time

Our services are not directed to individuals under 18. We do not knowingly collect personal information from children. If we become aware of such collection, we will promptly delete the information.

We may update this Privacy Policy periodically. We will notify you of material changes via:

• Email notification to registered users
• Prominent notice on our website
• In-app notifications

The updated policy will be effective upon posting. Continued use of our services constitutes acceptance of the updated policy.

For privacy-related questions or concerns:

**Data Protection Officer** Email: privacy@fwdmusic.com

**Mailing Address** Forward Digital SAS Attn: Privacy Team 13 Avenue des Fruitiers 93210 Saint-Denis, France SIREN: 835 311 176

**Response Time** We aim to respond to all privacy inquiries within 48 hours and resolve issues within 30 days.