LieTone AI Try a free read

Privacy Policy

This policy explains what LieTone AI processes, why it is needed, how long it is kept, and the controls available to you.

Effective date: July 30, 2026

Controller: Wu Pengwei
Registered address: Siming, Xiamen, Fujian, China
Privacy contact: Contact privacy support

1. Information we process

Audio and analysis content

When you record or upload audio, we process the audio, transcript, speaker timing, audio features, optional question or background, the speaker or time range you select, and the resulting Quick Read or Deep Read.

Account and purchase information

If you sign in or pay, we process your email address, account identifier, plan, report allowance, order and subscription status, and report history. Stripe processes payment card and billing details. LieTone AI does not store complete payment card numbers.

Technical and security information

We process pseudonymous request identifiers, security and error categories, and limited source information needed to prevent abuse, enforce rate limits, and keep the service reliable. Operational error logs are designed not to contain audio, transcripts, optional background, or report text.

First-party product events and current-visit attribution

We record a limited first-party event stream to understand whether the service works and whether purchases are attributable. Events may cover a landing-page view, Quick Read, paywall, checkout, purchase, refund, subscription, and Deep Read lifecycle, together with product fields such as plan, price, amount, currency, and status.

If the current page URL contains utm_source, utm_medium, utm_campaign, or a Google click identifier (gclid), those values may be attached to first-party events and carried in the URL when you choose a link into the app. Attribution is kept only in JavaScript memory for the current page visit. We do not use local storage, session storage, or an analytics cookie to preserve attribution across later visits.

Strictly necessary cookies and sign-in storage

We use a random, HttpOnly first-party guest cookie to enforce the monthly free-use allowance; it expires after 62 days and is refreshed when the free feature is used. A separate HttpOnly purchase-claim cookie can remain for up to 30 days so a paid report can be returned to and claimed by the correct browser. Supabase uses browser storage to keep you signed in, and Stripe may use strictly necessary cookies on its hosted payment pages. We do not currently set optional advertising or analytics cookies for first-party measurement.

2. How we use information

  • To transcribe audio, distinguish speakers where possible, analyze patterns, and generate requested results.
  • To create and secure your account, preserve paid reports, and restore access.
  • To process orders, subscriptions, refunds, cancellations, and monthly report allowances.
  • To detect abuse, investigate failures, protect the service, and meet legal obligations.
  • To measure product and purchase events without sending audio, transcripts, background, or report content to analytics or advertising platforms.

3. Audio and report retention

Free Quick ReadAudio and intermediate analysis are kept in short-term processing memory, normally for no longer than 60 minutes, and are not written to permanent storage unless you begin checkout or hold an active paid entitlement.
Unpaid prepared or checkout audioKept only for the limited operational period required to finish or recover the requested flow: Up to 24 hours.
Paid audio and reportsStored privately in your account until you delete the original audio, delete the report, or delete the account. You may delete the original audio while keeping the written report.
First-party product eventsAfter 90 days, detailed event rows are de-linked from visit identifiers, ad-click identifiers, purchases, reports, and payment-provider event identifiers. Campaign source, product, amount, status, and timing fields may remain for measurement. The remaining detailed event rows are deleted after 13 months.
Guest free-use recordsServer-side rows tied to a hashed guest token are deleted after 93 days. The necessary browser cookie expires after 62 days and contains a random token rather than audio or report content.
Account-deletion operationsAfter an account is deleted, a limited service-only completion record may remain for up to 90 days so we can prevent delayed payments or processing from recreating deleted content. It does not contain the deleted audio, transcript, optional background, report content, or email address.
Payment and compliance recordsLimited transaction, invoice, subscription, refund, fraud, chargeback, tax, accounting, and legal-compliance records may be retained longer where required or permitted. Payment-provider event identifiers used to prevent duplicate webhook processing are deleted after 13 months. These exceptions do not preserve deleted audio, transcripts, optional background, or report content.
Operational logsKept only as long as reasonably needed for security, reliability, fraud prevention, and legal obligations, then deleted or de-identified.

4. Service providers

We use service providers only for the functions needed to operate LieTone AI. These currently include OpenAI for transcription and structured AI analysis, Supabase for authentication, database, and private file storage, and Stripe for payments and subscription management.

Production hosting: Render and Supabase
Transactional email: Resend
Analytics and advertising providers: None at launch

First-party product-event records are stored in our Supabase database. We do not place audio, transcripts, optional background, or report content in those events or send that content to advertising providers.

Providers may process information in countries other than your own. Where required, we use appropriate contractual and legal safeguards for international transfers.

5. Your choices and rights

From your account, you can access paid reports, delete original audio, delete individual reports, and delete your account. Depending on where you live, you may also have rights to request access, correction, deletion, restriction, objection, or a portable copy of personal information.

To make a privacy request, use the privacy contact. We may need to verify your identity before completing a request.

6. Recording and consent

You are responsible for having the legal right and any consent required to record, possess, and upload audio. Recording and privacy laws vary by location. Do not upload audio unlawfully or use the service for covert surveillance, harassment, or high-stakes decisions.

7. Security

Paid audio is stored in private storage and accessed through time-limited links. We use access controls and account-level separation, but no internet service can promise absolute security.

8. Children

The minimum permitted age for the public service is 18. We will not knowingly provide the service below the approved minimum age.

9. Changes and contact

We may update this policy when the service or legal requirements change. Material changes will be posted here with a new effective date. Questions may be sent to LieTone AI support.