1. INTRODUCTION
Midsummer LTD, operating as Midsummerr ("we," "us," or "our"), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, share, and protect your personal information when you visit our website at midsummerr.com (the "Site") and use our AI-powered audiobook creation and distribution services (the "Services").
By using our Services, you consent to the data practices described in this Privacy Policy. If you do not agree with this Privacy Policy, please do not use our Services.
This Privacy Policy should be read in conjunction with our Terms of Service, which governs your use of our Services.
2. INFORMATION WE COLLECT
2.1 Information You Provide Directly
Account Information When you create an account, we collect:
- Name
- Email address
- Password (encrypted)
- Company or author name (optional)
- Phone number (optional)
- Billing address
- Country/region
Payment Information When you purchase credits or subscribe to our Services, we collect:
- Credit card information (processed and stored by Paddle, our Merchant of Record)
- Billing address
- Payment history and transaction details
- Credit purchase amounts and dates
- Credit balance and consumption records
Note: We do not store your complete credit card information on our servers. Payment data is handled directly by Paddle (our Merchant of Record) and other payment processors in accordance with PCI-DSS standards. Paddle acts as the authorized reseller and handles all payment processing, invoicing, and tax collection on our behalf.
Credit and Usage Data To facilitate our pay-per-use billing model, we collect and maintain:
- Credit purchase history and amounts
- Credit consumption and usage details
- Usage metrics (words processed, audio minutes generated, chapters created)
- Timestamps of credit usage
- Project and content associated with credit consumption
Content and Manuscripts
- Text files, manuscripts, and written content you upload
- Book titles, descriptions, and metadata
- Character descriptions and production notes
- Audio samples or voice recordings you provide
- Any other content you choose to submit through our Services
Communications
- Messages you send to our support team
- Feedback, reviews, or testimonials you provide
- Email correspondence with us
- Survey responses
User-Generated Content
- Profile information you choose to make public
- Comments or posts in community forums (if applicable)
- Preferences and settings you configure
2.2 Information Collected Automatically
Usage Data When you use our Services, we automatically collect:
- Pages visited and features used
- Time and duration of visits
- Click patterns and navigation paths
- Search queries within our Services
- Files uploaded and downloads initiated
- AI generation requests and parameters
Device and Technical Information
- IP address
- Browser type and version
- Operating system
- Device identifiers
- Screen resolution
- Language preferences
- Referring URLs
Cookies and Tracking Technologies We use cookies and similar technologies to:
- Maintain your logged-in session
- Remember your preferences and settings
- Analyze how you use our Services
- Improve our Services and user experience
For more details, see Section 6 (Cookies and Tracking Technologies).
2.3 Information from Third Parties
Social Media and Authentication Services If you choose to log in using a third-party service (such as Google), we may receive:
- Profile information (name, email, profile picture)
- Any other information you authorize the third-party service to share
Analytics and Service Providers We may receive aggregated or anonymized data from third-party analytics providers about how you interact with our Services.
3. HOW WE USE YOUR INFORMATION
We use the information we collect for the following purposes:
3.1 Providing and Improving Services
- Create and manage your account
- Process credit purchases and track credit balances
- Deduct credits based on your usage of our Services
- Process subscription payments (if applicable)
- Generate AI audiobooks from your content
- Deliver the Services and features you request
- Provide customer support and respond to inquiries
- Troubleshoot technical issues
- Improve, test, and enhance our Services and AI technology
- Develop new features and functionality
3.2 Communications
- Send you service-related emails (account verification, transaction confirmations, password resets)
- Notify you of important changes to our Services or policies
- With your consent, send marketing and promotional communications
- Request feedback or conduct surveys
- Respond to your questions and comments
3.3 Security and Compliance
- Detect, prevent, and address fraud, security threats, or illegal activity
- Verify your identity and prevent unauthorized access
- Enforce our Terms of Service and other policies
- Comply with legal obligations and protect our legal rights
- Respond to law enforcement requests and legal proceedings
3.4 Analytics and Business Operations
- Analyze usage patterns and trends
- Conduct research and development
- Monitor and improve our AI models and technology
- Measure the effectiveness of our marketing campaigns
- Generate aggregate statistics and insights (anonymized)
3.5 AI Model Training and Improvement
Unless you opt out, we may use your content and usage data to:
- Train and improve our AI voice models and audio generation technology
- Enhance the quality and accuracy of our Services
- Develop new features and capabilities
You have the right to opt out of having your content used for AI training purposes (see Section 9).
4. HOW WE SHARE YOUR INFORMATION
We do not sell your personal information to third parties. We may share your information in the following circumstances:
4.1 Service Providers
We share information with third-party vendors and service providers who perform services on our behalf, including:
- Payment processing (Stripe)
- Cloud hosting and storage services
- Email delivery services
- Analytics providers (Google Analytics)
- Customer support tools
- Content delivery networks
These providers are contractually obligated to protect your information and use it only for the purposes we specify.
4.2 Business Transfers
If Midsummerr is involved in a merger, acquisition, sale of assets, bankruptcy, or reorganization, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.
4.3 Legal Requirements
We may disclose your information if required to do so by law or in response to:
- Valid legal processes (subpoenas, court orders, search warrants)
- Government or regulatory requests
- Requests to protect the rights, property, or safety of Midsummerr, our users, or the public
- Enforcement of our Terms of Service or investigation of potential violations
4.4 With Your Consent
We may share your information for other purposes with your explicit consent or at your direction.
4.5 Aggregated and Anonymized Data
We may share aggregated, anonymized, or de-identified data that cannot reasonably be used to identify you for:
- Industry research and analysis
- Marketing and promotional purposes
- Public reports and presentations
4.6 Third-Party Distribution Platforms
If you choose to distribute your audiobooks through third-party platforms (such as Spotify, Apple Books, or other audiobook services), we may share necessary metadata and content with those platforms in accordance with your instructions.
5. DATA RETENTION
We retain your personal information for as long as necessary to:
- Provide you with our Services
- Comply with legal obligations
- Resolve disputes and enforce our agreements
- Fulfill the purposes described in this Privacy Policy
5.1 Retention Periods
- Account Information: Retained while your account is active and for up to 6 months after account deletion
- Payment Records: Retained for at least 7 years for tax and accounting purposes
- Content and Manuscripts: Retained while your account is active; deleted upon request or within 30 days of account deletion
- Usage Logs: Retained for up to 24 months
- Support Communications: Retained for up to 3 years
After the retention period, we will delete or anonymize your information. Some information may remain in backup systems for up to 90 days after deletion.
6. COOKIES AND TRACKING TECHNOLOGIES
6.1 What Are Cookies
Cookies are small text files stored on your device that help us recognize you and remember your preferences.
6.2 Types of Cookies We Use
Essential Cookies (Required)
- Session management and authentication
- Security features
- Load balancing
Functional Cookies (Optional)
- Remembering your preferences and settings
- Providing enhanced features
- Improving user experience
Analytics Cookies (Optional)
- Understanding how you use our Services
- Measuring performance and effectiveness
- Identifying areas for improvement
Marketing Cookies (Optional, with consent)
- Tracking conversions from marketing campaigns
- Personalizing advertising content
- Measuring advertising effectiveness
6.3 Third-Party Cookies
Google Analytics We use Google Analytics to analyze usage of our Services. Google Analytics collects information anonymously and reports website trends without identifying individual users. You can opt out by installing the Google Analytics Opt-out Browser Add-on.
6.4 Managing Cookies
You can control and manage cookies through your browser settings. However, disabling certain cookies may limit your ability to use some features of our Services.
7. DATA SECURITY
We implement reasonable administrative, technical, and physical security measures to protect your information from unauthorized access, use, disclosure, alteration, or destruction.
7.1 Security Measures
- Encryption of data in transit (SSL/TLS)
- Encryption of sensitive data at rest
- Regular security assessments and penetration testing
- Access controls and authentication requirements
- Monitoring and logging of system access
- Employee training on data security and privacy
- Secure development practices
7.2 Limitations
While we strive to protect your information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security, and you provide information at your own risk.
7.3 Breach Notification
In the event of a data breach that affects your personal information, we will notify you and relevant authorities as required by applicable law.
8. YOUR PRIVACY RIGHTS
Depending on your location, you may have certain rights regarding your personal information:
8.1 General Rights (All Users)
Access and Portability
- Request a copy of the personal information we hold about you
- Receive your information in a structured, machine-readable format
Correction
- Update or correct inaccurate or incomplete information
- Modify your account information through your account settings
Deletion
- Request deletion of your personal information (subject to legal retention requirements)
- Close your account and request removal of your data
Objection and Restriction
- Object to certain processing of your information
- Request restriction of processing in certain circumstances
Opt-Out of Marketing
- Unsubscribe from promotional emails by clicking the unsubscribe link
- Adjust your communication preferences in your account settings
Data Portability
- Request transfer of your data to another service provider
8.2 California Privacy Rights (CCPA/CPRA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):
- Right to know what personal information we collect and how we use it
- Right to delete personal information (with certain exceptions)
- Right to opt out of the sale of personal information (Note: We do not sell personal information)
- Right to non-discrimination for exercising your privacy rights
8.3 European Privacy Rights (GDPR)
If you are located in the European Economic Area (EEA), UK, or Switzerland, you have rights under the General Data Protection Regulation (GDPR):
- Right to access your personal data
- Right to rectification of inaccurate data
- Right to erasure ("right to be forgotten")
- Right to restrict processing
- Right to data portability
- Right to object to processing
- Right to withdraw consent
- Right to lodge a complaint with a supervisory authority
Legal Basis for Processing We process your data based on:
- Contractual necessity (to provide our Services)
- Legitimate interests (to improve our Services and ensure security)
- Consent (for marketing communications and optional features)
- Legal obligations (to comply with applicable laws)
8.4 Other Regional Rights
Residents of certain other jurisdictions (Nevada, Colorado, Connecticut, Virginia, Utah) may have additional privacy rights. Please contact us to exercise your rights.
8.5 Exercising Your Rights
To exercise any of these rights, please contact us at:
- Email: [email protected]
- Subject line: "Privacy Rights Request"
Include sufficient information for us to verify your identity and process your request. We will respond within the timeframe required by applicable law (typically 30-45 days).
9. OPT-OUT OF AI MODEL TRAINING
9.1 Your Choice
You may opt out of having your content and usage data used to train and improve our AI models at any time.
9.2 How to Opt Out
To opt out:
- Log in to your account
- Go to Settings > Privacy > Data Usage
- Toggle "Use my content for AI model improvement" to OFF
- Or email [email protected] with your request
9.3 Effect of Opt-Out
Once processed:
- Your content will no longer be used for AI training purposes
- This does not affect content used prior to your opt-out
- This does not affect our ability to use anonymized or aggregated data
10. INTERNATIONAL DATA TRANSFERS
Midsummer LTD operates internationally and uses service providers located in various countries. If you are accessing our Services from outside your country of residence, please be aware that your information may be transferred to, stored, and processed in countries where our servers and service providers operate.
These countries may have data protection laws that differ from those in your country. By using our Services, you consent to the transfer of your information to these countries.
For users in the EEA/UK, we ensure appropriate safeguards are in place for international transfers, such as Standard Contractual Clauses approved by the European Commission.
11. CHILDREN'S PRIVACY
Our Services are not intended for children under the age of 18. We do not knowingly collect personal information from children under 18.
If we become aware that we have collected personal information from a child under 18 without parental consent, we will take steps to delete that information. If you believe we have collected information from a child, please contact us immediately at [email protected].
12. THIRD-PARTY SERVICES AND LINKS
Our Services may contain links to third-party websites, platforms, or services that we do not own or operate. This Privacy Policy does not apply to third-party services.
We encourage you to review the privacy policies of any third-party services before providing them with your information. We are not responsible for the privacy practices or content of third-party services.
12.1 Third-Party Services We Use
- Paddle (Merchant of Record, payment processing): Paddle Privacy Policy
- Stripe (payment processing): Stripe Privacy Policy
- Google Analytics (website analytics): Google Privacy Policy
13. DO NOT TRACK SIGNALS
Some browsers include a "Do Not Track" (DNT) feature that signals to websites you visit that you do not want to have your online activity tracked. Our Services do not currently respond to DNT signals or similar mechanisms.
14. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.
14.1 Notice of Changes
We will notify you of material changes by:
- Posting the updated Privacy Policy on our Site with a new "Last Updated" date
- Sending an email to your registered email address
- Displaying a notice on our Services
14.2 Your Acceptance
Your continued use of our Services after the effective date of the updated Privacy Policy constitutes your acceptance of the changes. If you do not agree to the updated Privacy Policy, you must stop using our Services and may request deletion of your account.
14.3 Review Regularly
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.
15. CONTACT US
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:
Privacy Inquiries:
Email: [email protected]
Data Protection Officer:
Email: [email protected]
General Contact:
Midsummer LTD
Email: [email protected]
Website: https://www.midsummerr.com
We will respond to your inquiry within a reasonable timeframe.
16. SUPERVISORY AUTHORITY
If you are located in the EEA/UK and believe we have not adequately addressed your privacy concerns, you have the right to lodge a complaint with your local supervisory authority for data protection.
By using Midsummerr's Services, you acknowledge that you have read and understood this Privacy Policy and agree to our collection, use, and sharing of your information as described herein.