Privacy Policy

Effective date: November 13, 2024

At TinyCloud, Inc. ("TinyCloud," "we," "us," or "our"), we take your privacy seriously. This Privacy Policy explains how we treat your personal data when you use Muse and our related services (collectively, the "Services"). By using our Services, you acknowledge that you accept the practices and policies outlined below, and you hereby consent that we will collect, use, and share your information as described in this Privacy Policy.

Remember that your use of Muse's Services is at all times subject to our Terms of Use, which incorporates this Privacy Policy. Any terms we use in this Policy without defining them have the definitions given to them in the Terms of Use.

What this Privacy Policy Covers

This Privacy Policy covers how we treat Personal Data that we gather when you access or use our Services. "Personal Data" means any information that identifies or relates to a particular individual and also includes information referred to as "personally identifiable information" or "personal information" under applicable data privacy laws, rules, or regulations.

Personal Data

Categories of Personal Data We Collect

This chart details the categories of Personal Data that we collect and have collected over the past 12 months:

Category of Personal Data	Examples of Personal Data We Collect	Categories of Third Parties With Whom We Share this Personal Data
Profile or Contact Data	• First and last name<br>• Email<br>• Account credentials (via Privy.io)	• Service Providers (Privy.io)<br>• Analytics Partners<br>• Parties You Authorize
Payment Data	• Payment information (via Stripe)<br>• Billing address	• Service Providers (Stripe)
Audio Data	• Voice recordings<br>• Conversation recordings<br>• Transcriptions<br>• Summaries and insights	• Service Providers (AssemblyAI)<br>• Parties You Authorize
Device/IP Data	• IP address<br>• Device ID<br>• Operating system<br>• Browser type<br>• Device location<br>• Device metadata	• Analytics Partners (Segment, Mixpanel)<br>• Service Providers
Usage Data	• Interaction with services<br>• Feature usage patterns<br>• Performance data	• Analytics Partners (Segment, Mixpanel)
Sharing Data	• Shared summary recipients<br>• Sharing preferences<br>• Access logs	• Parties You Authorize

Categories of Sources of Personal Data

We collect Personal Data about you from:

1. You

   • When you provide information directly to us
   • When you create an account
   • When you use our recording features
   • When you share content with others
   • When you communicate with us

2. Automatic Collection

   • When you use our Services
   • Through cookies and analytics tools
   • From your device and browser

3. Third Parties

   • Authentication providers (Privy.io)
   • Payment processors (Stripe)
   • Analytics providers (Segment, Mixpanel)

Our Commercial or Business Purposes for Collecting Personal Data

Core Service Purposes

• Creating and managing your account
• Processing payments and transactions
• Recording, transcribing, and analyzing audio content
• Generating summaries and insights
• Enabling sharing features
• Providing customer support

Service Improvement and Analytics

• Improving our Services
• Developing new features
• Analyzing usage patterns
• Debugging and securing our Services

Communications and Marketing

• Sending service updates
• Providing customer support
• Marketing communications (with your consent)
• Responding to your requests

How We Share Your Personal Data

Service Providers

• Authentication (Privy.io)
• Payment processing (Stripe)
• Analytics (Segment, Mixpanel)
• Audio processing (AssemblyAI)
• Cloud storage (DigitalOcean)

User-Authorized Sharing

• When you choose to share summaries via external links
• When you grant access to other users

Employee Access

We maintain strict access controls for our employees:

• Administrators: Full system access for maintenance and support
• Engineering: Access for development and debugging
• Support: Limited access for customer assistance All access is logged and monitored.

Data Security and Retention

Security Measures

We implement appropriate technical and organizational measures to protect your Personal Data, including:

• Encryption of data in transit and at rest
• Access controls and authentication
• Regular security assessments
• Employee training and confidentiality agreements

Data Retention

• Audio recordings are retained until you choose to delete them
• Account information is retained while your account is active
• Payment information is retained as required for legal and business purposes
• You can request deletion of your data at any time

Your Rights and Choices

You have the right to:

• Access your Personal Data
• Delete your recordings and associated data
• Control recording settings
• Export your data
• Opt-out of marketing communications
• Modify sharing permissions

Geographic Restrictions

Our Services are currently intended for users in the United States. We do not actively market to or solicit customers from the European Union or UK. If you are located in these regions, please be aware that your information will be transferred to, stored, and processed in the United States.

Children's Privacy

Our Services are not intended for children under 13. We do not knowingly collect or solicit Personal Data from children under 13. If we learn we have collected Personal Data from a child under 13, we will delete it immediately.

Changes to this Privacy Policy

We may modify this Privacy Policy at any time. We will notify you of material changes by:

• Posting a notice on our website
• Sending you an email

Contact Us

If you have questions or concerns about this Privacy Policy, please contact us at:

• Email: [email protected]