Privacy Policy
Last updated: 1 October 2026
This policy describes how AffirmTone handles information when you use affirmtone.com. For privacy questions or requests, contact [email protected].
Accounts and sign-in
We store your name, email address, email verification status, a password hash when you use a password, and records needed to maintain and protect your account. If Google sign-in is enabled and you choose it, we receive account identifiers and basic profile information from Google. Authentication uses server-side sessions and essential cookies. Security and rate-limit records help prevent unauthorized access and abuse.
Your drafts, scripts and audio
Guest drafts stay in this browser. When you sign in, you choose whether to save a guest draft to your account. Account drafts and works include your goal, affirmation text, selected voice, mix settings, version history and generation status. Unsaved account edits may also be retained in this browser for recovery. Clear this site's browser data before giving a shared device to someone else.
Audio generation runs on our servers and files are stored in private object storage. Access requires account authorization; download links are temporary. Anyone holding a temporary download link may use it until it expires, so do not share private links.
AI providers and service providers
When you request AI script assistance, your goal and relevant script are sent to our configured AI service. This may include an operator-managed gateway and its upstream model provider. When you confirm audio generation, your confirmed script and voice settings are sent to Microsoft Azure AI Speech. We request that AI script responses are not stored through the API response-storage option; gateway and upstream support for that option may vary, and providers may retain security or abuse-monitoring records. Avoid entering sensitive personal information you do not want these providers to process.
Resend processes recipient addresses and message content for verification, password resets, service notices and opted-in marketing. Hosting, database and private storage providers process the information needed to operate the service. Cloudflare provides network delivery and security and may process network information such as IP addresses. Providers may process data in countries outside your country of residence under their applicable privacy terms.
We use information to provide the features you request, secure and troubleshoot the service, handle support and payments, and meet applicable obligations. We do not sell your personal information or use your scripts for advertising.
Payments
Checkout availability and the current payment provider are shown before payment. Historical Creem transactions remain subject to Creem’s privacy terms. We retain payment references, order and subscription status, purchased entitlements and refund records to deliver and reconcile your purchase. We do not store full payment card numbers. Your affirmation script is not included in checkout content.
Retention
AI script candidates are temporarily stored for up to twenty-four hours so you can check the original request. Candidate content is then removed; request identifiers, outcome and usage records remain for duplicate-request protection and accounting. Your saved draft is separate from this temporary candidate.
Historical trial audio is available for seven days from first delivery; single-purchase audio for thirty days. Monthly-funded audio is retained through the paid membership period plus thirty days; renewal before cleanup may extend monthly works. Annual-funded audio lasts thirty days from first delivery, without renewal extensions. Repeated downloads and free mixes do not restart these periods. Optional WAV exports last at most twenty-four hours and never beyond the work's expiry.
After audio cleanup, scripts and settings remain so you can create a new version; the original audio cannot be restored from those settings. Account, draft and service records remain while needed to operate your account or resolve support requests. Necessary payment and security records may be retained for legal, fraud, refund or dispute purposes. Database backups rotate on a thirty-day schedule; removing information from the active service does not immediately remove earlier backups.
Email preferences and your choices
Marketing is optional and separate from essential account and service messages. Manage enabled marketing topics in email preferences or use an unsubscribe link. Essential verification, password-reset and transaction-related notices do not depend on marketing consent.
You can edit your drafts and clear local browser data. To request access, correction, a copy of your data or deletion of your account and associated content, email support. We may need to verify account ownership and explain any records we must retain. Account deletion is currently handled through support, not an automated account control. Depending on where you live, you may also have rights to object, restrict processing or complain to your local data protection authority.
Updates and contact
We update this page when our practices change and revise the date above. Material changes affecting your account will be communicated through an appropriate service notice. Contact [email protected] with privacy or support questions.