Data protection

The controller within the meaning of the General Data Protection Regulation (GDPR [DSGVO]) is:

Audiobird Europe Jonas Hagen Biebricher Str. 9, 12053 Berlin E-Mail: info@audiobird.com Tel.: 030 29 36 03 10

As of: October 2026

1.Your rights as a data subject

Using the contact details provided above, you can exercise the following rights at any time: access to your data stored by us (Art. 15 GDPR [DSGVO]), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and objection to processing based on legitimate interests (Art. 21). You can revoke any consent granted at any time with effect for the future.

You can also lodge a complaint with a data protection supervisory authority, for example with the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit, www.datenschutz-berlin.de).

2.Hosting and provision of the website

The website, the database and the file storage are operated via Lovable Cloud (Lovable Labs Incorporated AB, Stockholm, Sweden) and its sub-processors, in particular Cloudflare, Inc. (website delivery) and Supabase, Inc. (database, login, file storage). When accessing the site, technically necessary data is processed (IP address, date and time, page viewed, browser and operating system) in order to securely deliver the website. The legal basis is Art. 6(1)(f) GDPR (DSGVO). Server logs are deleted after 30 days at the latest. Transmission to the USA is possible; it is carried out on the basis of the EU-US Data Privacy Framework or EU Standard Contractual Clauses. Data processing agreements are in place with the providers.

The connection is encrypted via TLS (SSL).

3.Customer account, Artist profile and registration

For an account, we store your email address and – where provided – name, company, telephone number, addresses, and profile picture. Sign-in takes place without a password via a login link sent by email. Artists additionally deposit profile details, photos, audio samples, and prices; approved profiles are publicly visible, private contact details are not. The legal basis is Art. 6(1)(b) GDPR (DSGVO) (contract or pre-contractual measures). We store the data until you delete your account; you can do this yourself at any time under “Settings”. Statutory retention obligations remain unaffected.

4.Emails

We send login links and notifications (e.g. new message in the project, payment, approval) via the email service from Lovable Cloud. The legal basis is Art. 6(1)(b) GDPR (DSGVO). We do not send marketing newsletters.

5.Enquiries, project chat and files

When you enquire about an Artist, we process your email address, telephone number, briefing, budget, messages and uploaded files (e.g. scripts, audio files). This data is only visible to you, the requested Artists, and – for processing and quality assurance – Audiobird. Production content is not published and not used to train AI. The legal basis is Art. 6(1)(b) GDPR (DSGVO). We store enquiries and project data for up to three years after completion of the project, and billing-relevant data for up to ten years (statutory retention obligation).

6.Contact form

We store messages sent via the contact form (email address and text) in order to respond to your enquiry (Art. 6(1)(b) or (f) GDPR [DSGVO]), and delete them no later than two years after communication has concluded.

7.Voice & Audio Agent and Studio Assistant (AI Chat)

Your messages to the Agent and to the Studio Assistant are transmitted to AI language models provided via the Lovable AI Gateway in order to generate responses (model providers include Google LLC and OpenAI, L.L.C., USA). We store conversations so that you can continue them and we can review the quality of consultation. Please do not enter sensitive data in the chat. The legal basis is Art. 6(1)(b) and (f) GDPR (DSGVO). We delete conversations at the latest two years after the last message. To select matching Artists, public profile texts are compared automatically; no AI models are trained in this process.

8.Generation of AI audio (ElevenLabs)

For AI voices, AI music and AI sound effects, we transmit your text or description to ElevenLabs Inc. (USA) or its European affiliate. Personal data is only transmitted to the extent that it is contained in your text. The legal basis is Art. 6(1)(b) GDPR (DSGVO); the transmission is carried out on the basis of EU Standard Contractual Clauses or the Data Privacy Framework. We store generated files in your account until you delete them or your account.

9.Payments (Stripe)

We process credit purchases and payments to Artists via Stripe Payments Europe, Ltd. (Ireland). Stripe processes your payment data (e.g. name, email address, card or bank account details) as an independent controller or processor; we do not receive complete card details. The legal basis is Art. 6(1)(b) and (c) GDPR (DSGVO). Further information: stripe.com/gb/privacy.

10.Embedded content (YouTube, Vimeo, Spotify, SoundCloud)

In Artist profiles and on the blog, we embed audio samples and videos from YouTube (Google Ireland Ltd.), Vimeo (Vimeo.com, Inc.), Spotify (Spotify AB), and SoundCloud (SoundCloud Global Ltd.). When loading the embedded player, your IP address is transmitted to the respective provider, who may set their own cookies. We embed YouTube in privacy-enhanced mode and Vimeo with “Do Not Track”. The legal basis is Art. 6 para. 1 lit. f GDPR (DSGVO) (appealing presentation of audio samples).

11.Fonts (Google Fonts)

For visual display, we load fonts from Google Fonts (Google Ireland Ltd.). In doing so, your IP address is transmitted to Google. The legal basis is Art. 6(1)(f) GDPR (DSGVO) (consistent presentation).

12.Cookies and local storage

We only use technically necessary storage in your browser, in particular for your login and ongoing conversations with the Agent. We do not use analytics or advertising cookies. The legal basis is Section 25(2) TDDDG and Art. 6(1)(b) and (f) GDPR (DSGVO).

13.Obligation to provide data and automated decision-making

Providing your email address is required for your account, enquiries and orders; without it, we cannot provide these services. Purely automated decision-making producing legal effects within the meaning of Art. 22 GDPR (DSGVO) does not take place.

14.Changes

We adapt this privacy policy whenever our services or the legal framework change. The version published here shall apply in each case.