Privacy Policy

1. What we collect

Account data: from Google sign-in, your name, email address, profile picture and a Google account identifier; and, if you joined while access was by invitation, the invite code you used.

Your Content and what we make from it: the videos you upload, frames and analysis derived from them, cicapoints, generated sounds, and your edits.

Connected AI assistants (MCP): if you connect an assistant, a record of each authorization (the client name the assistant reports, when you granted it, when it was last used and the daily credit limit you set), and which connection and assistant each use of credits came from. The reference images and event descriptions your assistant sends are Your Content, kept and used like your uploads, including to improve the Service (section 8).

Usage and technical data: log data such as IP address, browser, device, times of requests and errors, needed to run and secure the Service.

Former waitlist: we no longer collect a waitlist. If you joined it before, from our website or from the product's sign-in page (where the email address is the verified one on your Google account), we use what you left only to tell you that CICA AUDIO is open: your email address, the language of the page and of your browser, what you create and what you would use CICA for (if you told us), how and when you joined, and an encrypted hash of your IP address. We delete it by November 30, 2026 at the latest, and sooner if you ask.

Website analytics: on our website (not in the product), Google Analytics records the pages you visit, how you arrived (for example the site, search or campaign that linked to us), your approximate location derived from your IP address, your device and browser, and a few actions, such as pressing Start creating. In the EEA, the UK and Switzerland it sets no analytics cookies and receives only cookieless signals.

Payments: Polar processes payments as Merchant of Record. We do not receive your full card details; Polar shares with us your name, email, country, what you bought and the transaction status.

2. Why we use it

To provide the Service (sign-in, processing your videos, generating and storing sounds); to manage credits, purchases and refunds; to contact you about your account and the Service; to keep the Service secure and prevent abuse; to fix problems; to understand how people find and use our website, so we can improve it; and to meet legal obligations.

We do not sell your personal data and do not use it for advertising.

3. Who processes it

We use service providers that process data for us under contract and only to provide their services: Google (sign-in and website analytics), Vercel (website hosting), Cloudflare (content delivery and file storage), Supabase (database and authentication), Fly.io and Modal (computing), OpenAI and other machine-learning providers (analysing video and generating sounds), and Polar (payments).

When you connect an AI assistant, the sounds and data you ask for through it are sent to that assistant. Its provider (for example Anthropic for Claude Code, or OpenAI for Codex) handles them under its own terms and privacy policy, not ours.

We may also disclose data if the law requires it, to protect rights and safety, or as part of a transfer of the Service, with notice to you.

4. Where and how long

Our providers store and process data in Singapore and the United States, with safeguards appropriate to the transfer.

We keep account data, including the records of your connected assistants, while your account exists; Your Content and Output until you delete them or your account; former waitlist data until November 30, 2026 at the latest (sooner if you ask); and payment and tax records for as long as the law requires. Logs are kept for a limited time for security. Google Analytics keeps detailed website analytics data for 2 months.

Content you delete may remain in our encrypted backups for a period, in line with our backup cycle.

5. Cookies and local storage

We use what the Service needs: a sign-in session cookie, and local storage for your language preference. On our website, Google Analytics also sets analytics cookies (_ga, _ga_<ID>) to tell visits apart, except in the EEA, the UK and Switzerland, where it sets none. You can block them in your browser or with Google's opt-out add-on (tools.google.com/dlpage/gaoptout). We do not use advertising cookies.

6. Your rights

You may ask to see or get a copy of your data, correct it, have us stop collecting, processing or using it, or delete it. Depending on where you live you may have further rights, such as objecting to processing or data portability, and the right to complain to a data protection authority. Write to support@cicaaudio.com; we answer within the time the law sets.

You can unsubscribe from our emails at any time with the link in any of them or by writing to support@cicaaudio.com.

If you do not provide the data needed for sign-in, we cannot provide the Service to you.

7. Security and children

We use encryption in transit, access controls and our providers' security to protect your data. No system is perfectly secure; we will tell you about a breach as the law requires.

The Service is not for anyone under 18, and we do not knowingly collect their data.

8. Improving the Service

We may use Your Content, generated sounds and your edits to develop and improve the Service, including the models that analyse videos and generate sounds. This use stays within CICA AUDIO and the providers listed above; we do not publish your uploads or share them for anyone else's purposes. You can ask us to delete your content at any time.

9. Changes and contact

We will post changes here with a new date and tell you of material changes. Questions or requests: CICA AUDIO, support@cicaaudio.com.