Privacy Policy
First-party usage measurement
Aqua uses a signed, pseudonymous first-party browser cookie for up to 90 days to count page visits, demo plays, signup intent and later verification or generation outcomes. Reviewed campaign labels and an external referrer hostname help us understand how testers find Aqua. On signup or login, these records may be linked to your account identifier; they are pseudonymous, not anonymous. Detailed measurements are scheduled for deletion after 90 days and cleaned in bounded batches; a small first-user milestone retains its date, channel and generation outcome. The measurement records do not copy your email, display name, network address, device fingerprint, prompts, lyrics or audio. Do Not Track and Global Privacy Control disable browser collection; blocked scripts or cookies also reduce coverage. Browser counts are not unique people.
Optional sharing and invitations
Songs stay private until you explicitly choose to publish a finished master. Anyone with that public link can listen or save a copy; revoking the link stops new access but cannot recall copies already saved. Uploaded voices, reference tracks and stems are never published by the sharing feature. A 30-day invitation cookie remembers your first valid referral. Referral eligibility uses a secret-keyed email alias fingerprint to avoid repeated rewards, verification and a first successful song, with small credit caps. Minimal keyed eligibility claims and issued-reward history may remain after account deletion to prevent repeated rewards. This is eligibility evidence, not proof of different people.
This policy explains how Aqua Voice Studio handles account, prompt, reference and generated-audio data during the free beta.
What we collect
We store the account details you provide, waitlist email if you join it, service and credit activity, generation requests, Aqua SI chats, consent declarations, uploaded reference files and generated outputs needed to operate your account.
Optional product emails
If you select the separate, unchecked marketing option when creating an account or on the public updates form, AQUA records the wording, version, source and time of that choice. The public form can also store the optional name or organisation and creative interest you supply, to make future invitations relevant. Account signup choices become confirmed only after account email verification. Public-form choices require a separate email confirmation link, which expires after 24 hours. Unconfirmed requests do not receive product emails, and an unsubscribe or suppression is never silently overridden. Account verification, purchases, Terms acceptance and voice permission alone do not subscribe you. Marketing addresses are shared only with the authorised email delivery provider when sending is enabled. No marketing campaign is launched merely by adding this option.
Every marketing email includes a no-login unsubscribe action. Unsubscribing stops future marketing without removing your account, granted credits or necessary service messages. A message already being transmitted cannot be recalled. We retain consent and suppression evidence to respect your choice and investigate delivery issues. Contact support to request access or deletion; a minimal protected suppression identifier may be retained to prevent re-contact. Campaign reports contain aggregate counts, with no email tracking pixels or inferred conversion figures.
How generation works
The website places a validated job in a private queue. An authenticated worker on Aqua's private Windows workstation claims the job and performs AI inference locally. Public website access uses HTTPS; private song and voice access requires account authentication.
Aqua SI chats
Chat prompts and responses are stored to provide conversation history and operate the service. Aqua does not use beta users’ chats or voice recordings to train models. You can delete individual Aqua SI conversations, and account deletion applies the retention terms below to the remaining chat data.
Aqua File Workspace
When available for your account, files and document outputs are kept in encrypted private storage on AQUA's server and accessed through authenticated ownership checks. Supported formats and limits are shown before upload. Originals, extracted content and generated files expire after 24 hours and are removed by bounded cleanup. You can delete a file and its derived outputs earlier. Deleting a workspace file does not remove passages already quoted in a saved Aqua SI conversation; delete that conversation separately if needed. Account closure also removes the account's workspace records.
Selected document text may be supplied to AQUA's local model to answer your question. Document contents are not used for advertising or model training, or copied into ordinary analytics. File processing is separate from the music planner and Aqua Therapy. When visual reading is enabled, your browser prepares selected PDF pages or screenshot images and sends them to AQUA with the original file. A separate local image model provides fallible observations to the usual local text reasoner. Check important labels, equations, assumptions and calculations; selecting some pages does not mean every page or diagram was inspected. Document scripts and macros are not executed, and no universal engineering-accuracy guarantee is offered. Native PDF/DOCX processing and editing remain restricted; the interface lists the formats and pages your account can actually use.
Aqua Therapy general wellbeing conversations
Aqua Therapy offers AI reflection and everyday coaching, not licensed therapy, clinical treatment or an emergency service. When chat is enabled, eligible signed-in accounts with verified email may start temporary conversations. Before starting, we request an 18-or-older self-affirmation, consent to temporary processing and an optional location choice for relevant support contacts. Self-affirmation is not verified age assurance.
Conversations are separate from Aqua SI and music history. Their content is encrypted while queued in server memory and decrypted for the account's own session or local inference. Sessions expire 30 minutes after starting or on a service restart, with routine cleanup within another 30 seconds. You can clear your own active session. A request already being processed may hold text until it finishes; clearing is not a promise of secure memory erasure. Permanent conversation saving and file uploads are unavailable.
Conversation content is not used for model training or targeted advertising, or copied into ordinary analytics or application debug logs. Transport uses HTTPS to AQUA's server; this is not end-to-end encryption or a guarantee of absolute confidentiality. Independent safety, privacy and regulatory reviews are not complete. Operating-system memory, crash handling, hosting and runtime limitations remain; avoid unnecessary identifying, medical or financial details. Conversations are not monitored live, and AQUA does not contact emergency services on a user's behalf.
Payments
Billing and checkout are disabled. Aqua does not request a new payment. Existing order, reconciliation and refund records, if any, remain protected and may be retained for applicable accounting, legal, security and dispute purposes.
Storage and retention
The current beta stores account records and private audio on Aqua's workstation. Private downloads require authenticated access. Explicitly published masters can also be accessed through their public song links. Deleting an account requests deletion of its hosted songs and voice references, subject to security, backup and legal retention needs.
Your choices
You can delete individual songs and voices or request account deletion from Account settings. Send formal privacy or consent-revocation requests to [email protected].
Security limits
No internet service can promise absolute security. Aqua limits beta capacity, isolates each account and may pause access while a security or privacy concern is investigated.
Contact
Questions, safety reports, privacy requests and rights complaints can be sent to [email protected].