Privacy Policy

1. Who We Are

This Privacy Policy explains how Aleksandr Romanov, a self-employed entrepreneur (autónomo) registered in Spain, NIF Z2649432K (“Echora,” “we,” “us,” “our”) collects, uses, stores, shares, and protects personal data when you visit our website, create an account, use our services, contact us, or otherwise interact with us.

Contact: Aleksandr Romanov (autónomo, Spain)
NIF: Z2649432K
Address: C/ Pacífico 26, Piso 2, Puerta E, 29004 Málaga, Spain
Privacy: support@echora.pro
Support: support@echora.pro

2. Data We Process

Depending on how you use Echora, we may process:

  • account and contact data (name, email, login identifiers, company/studio name);
  • project and uploaded data (audio files, transcripts, speaker labels, project titles, prompts, settings, generated scripts, exports, notes, edits);
  • usage and device data (IP address, browser, device, OS, timestamps, feature usage logs, performance and security logs);
  • payment and transaction data (handled mainly by payment providers; we may receive plan, status, invoice, or billing-country details);
  • communications data (emails, support messages, bug reports, feedback, demo/onboarding info);
  • marketing and preference data (newsletter settings, consent choices, beta interest forms).

3. Sources

We collect personal data:

  • directly from you;
  • from your use of the Service;
  • from your devices and browsers;
  • from service providers supporting authentication, billing, hosting, analytics, speech-to-text, and AI processing;
  • from lawful referrals or business partners where relevant.

4. How We Use Data

We use personal data to:

  • provide the Service;
  • create and manage accounts;
  • process uploads and generate transcripts, analyses, story outputs, and exports;
  • communicate with you and provide support;
  • run billing and account administration;
  • improve reliability, quality, and security;
  • prevent fraud and abuse;
  • comply with legal obligations;
  • send product updates or marketing where permitted by law.

5. Legal Bases

Where GDPR or similar law applies, our legal bases may include:

  • contract;
  • legitimate interests;
  • consent;
  • legal obligation;
  • legal claims or other limited lawful bases where applicable.

If you upload third-party personal data, you are responsible for ensuring you have an appropriate legal basis to do so.

6. Audio, Transcripts, and Production Material

Echora is built around audio, transcripts, and story analysis. Uploaded files may contain personal data of third parties, including voices, names, identifiable speech content, client and guest information, and event-specific details. We process this material only to provide the Service and related operational purposes. You are responsible for ensuring that your use of Echora for such content is lawful.

7. Sharing

We may share personal data:

  • with subprocessors or service providers for hosting, storage, email, analytics, authentication, billing, speech-to-text, and AI processing;
  • in a merger, acquisition, financing, asset sale, or reorganization;
  • where reasonably necessary to comply with law, protect rights or safety, investigate fraud or abuse, or enforce our terms.

Categories of providers we engage:

  • hosting and server infrastructure providers;
  • cloud database provider;
  • object storage provider;
  • speech-to-text and AI processing providers (including Deepgram, Anthropic, OpenAI, Google);
  • payment services provider;
  • web analytics provider.

We do not sell personal data in the ordinary commercial sense unless we explicitly say otherwise.

8. International Transfers

Your personal data may be processed in countries other than your own, including where our providers operate. Where required, we rely on appropriate safeguards such as adequacy decisions or standard contractual clauses.

9. Retention

We retain personal data only as long as necessary for the purposes described in this Policy, including to provide the Service, maintain accounts and projects, meet legal obligations, resolve disputes, and protect security.

Indicative retention periods:

  • account data: until account deletion + up to 12 months;
  • project data: until deletion / plan expiry + up to 30 days of backup retention;
  • support emails: up to 24 months;
  • billing records: for the period required by applicable law;
  • analytics logs: up to 14 months.

10. Security

We use reasonable technical and organizational measures to protect personal data, such as access controls, encryption in transit and where appropriate at rest, logging and monitoring, and least-privilege access. No method of storage or transmission is completely secure.

11. Your Rights

Depending on your location and law, you may have rights of access, correction, deletion, restriction, objection, portability, withdrawal of consent, and complaint to a supervisory authority. To exercise rights, contact support@echora.pro. We may need to verify your identity.

12. Cookies and Similar Technologies

We may use cookies, local storage, pixels, and similar technologies to keep you signed in, remember preferences, secure the Service, understand usage, improve performance, and measure onboarding or marketing effectiveness. If you use non-essential cookies, obtain consent where required and describe the controls you actually provide.

13. Children

The Service is not intended for children below the age at which they can lawfully consent to data processing in their jurisdiction unless a lawful representative is involved.

14. Changes

We may update this Policy from time to time by posting the revised version, updating the effective date, and/or notifying users through the Service or email.

15. Contact

Aleksandr Romanov (autónomo, Spain)
NIF: Z2649432K
Address: C/ Pacífico 26, Piso 2, Puerta E, 29004 Málaga, Spain
Privacy: support@echora.pro
Support: support@echora.pro