Privacy Policy

Last updated on 25 Feb 2026

This Privacy Policy forms a legally binding agreement between you ("User," "you," or "your") and Echonos AI, Inc. ("Echonos," "Company," "we," "our," or "us"). By accessing or using the Services, you acknowledge that you have read, understood, and agree to the practices described herein.

This Privacy Policy is intended to comply with applicable United States federal and state privacy laws, including the California Consumer Privacy Act ("CCPA") and California Privacy Rights Act ("CPRA"), the Illinois Biometric Information Privacy Act ("BIPA") where applicable, the EU General Data Protection Regulation ("GDPR"), the UK GDPR, and other applicable international data protection laws.

1. Information

1.1 Company Information

Echonos AI, Inc. is a Delaware corporation with its principal place of business in Miami, Florida, United States.
Privacy inquiries: hello@echonos.ai

1.2 Information Collection

We collect the following categories of personal information:

  • a. Account: Full name, Email address, Username, Password (securely hashed), Billing address, Subscription tier
  • b. Payment: Payment processing is conducted by FanBasis. Echonos does not store full credit card numbers. Payment information is processed pursuant to FanBasis's security and privacy standards.
  • c. User Content: Audio files (MP3, WAV, FLAC, etc.), Images, Videos, Generated video outputs, Generated image outputs, Text prompts and instructions, Embedded metadata
  • d. Biometric Information: We may collect biometric identifiers, including facial data, solely for identity verification, likeness authentication, and fraud prevention purposes.

Biometric data:

  • Is collected only with informed written consent;
  • Is not sold, leased, traded, or monetized;
  • Is not used for advertising purposes;
  • Is retained only as long as reasonably necessary for verification or legal compliance;
  • Is permanently deleted upon account deletion or when no longer required.

Where applicable, biometric processing complies with BIPA and GDPR special category data requirements.

  • e. Technical & Usage Information: IP address, Device identifiers, Browser type, Operating system, Log files, Usage analytics, Cookies and similar technologies

2. Purposes of Processing

We process personal information for the following lawful purposes:

  1. Providing and maintaining the Services
  2. Generating AI-driven outputs
  3. Authenticating identity and preventing misuse
  4. Processing payments
  5. Moderating content and enforcing policies
  6. Detecting fraud, abuse, and security incidents
  7. Complying with legal obligations
  8. Improving system performance and functionality

Under GDPR, lawful bases may include performance of contract, legitimate interests, legal obligations, and consent where required.

3. AI Processing & Model Infrastructure

Echonos utilizes third-party infrastructure providers, including Fal.AI and other AI model providers, to process user inputs and generate outputs.

User-submitted content may be transmitted to such providers strictly for inference and service delivery purposes.

We do not authorize third-party providers to use user content for model training except as necessary to provide the Services. We require contractual commitments from service providers restricting unauthorized secondary use of user content.

Echonos does not sell or license user content for training external foundation models.

4. Public Content & Explore Page Disclosure

Under certain subscription tiers (e.g., Basic Plan), generated outputs may be published on a publicly accessible "Explore" page.

By generating content under such tiers, you expressly acknowledge and consent that:

  1. Content may be publicly displayed;
  2. Other users may view such content;
  3. Public content may be indexed or cached by third parties;
  4. Once publicly accessible, Echonos cannot guarantee removal from external systems.

Higher-tier plans may allow private designation of generated outputs.

Users are solely responsible for ensuring they have all rights necessary to publish uploaded or generated content.

5. User Responsibilities & Likeness Rights

Users may upload copyrighted works or likenesses only if they possess the legal right to do so.

Echonos prohibits: Explicit content, Malicious impersonation, Unauthorized commercial exploitation of likeness

Users represent and warrant that uploaded content does not violate applicable law or third-party rights. Automated AI safeguards are used to review prompts and content for policy compliance.

6. Data Retention

We retain account information and associated content indefinitely unless:

  1. The user deletes their account;
  2. Deletion is required by law;
  3. Retention is no longer necessary for legitimate business purposes.

Biometric data is retained only as long as necessary for identity verification and is permanently deleted thereafter.

7. Data Sharing & Disclosure

We may disclose personal information to:

  1. Hosting providers (Vercel, Google Cloud, Firebase)
  2. Payment processors (FanBasis)
  3. AI infrastructure providers (Fal.AI)
  4. Analytics providers (Metricool)
  5. Storage providers (Google Drive)
  6. Legal authorities where required
  7. Successors in merger, acquisition, or restructuring

We do not sell personal information.

8. International Data Transfers

Echonos operates in the United States and may process data in jurisdictions where our service providers operate.

Where required, we implement appropriate safeguards for international transfers, including Standard Contractual Clauses (SCCs) or equivalent mechanisms.

9. Security Measures

We implement commercially reasonable administrative, technical, and organizational safeguards, including:

  1. Encryption in transit and at rest
  2. Access controls and role-based permissions
  3. Logging and monitoring
  4. Incident response procedures

No system can be guaranteed completely secure. Users acknowledge inherent risks of internet-based services.

10. Children's Privacy

The Services are intended for users aged 13 and older. We do not knowingly collect personal information from children under 13.

11. Your Privacy Rights

Depending on jurisdiction, users may have rights to:

  1. Access personal data
  2. Correct inaccuracies
  3. Delete personal data
  4. Restrict processing
  5. Object to processing
  6. Data portability
  7. Withdraw consent

California residents may exercise CCPA/CPRA rights. EU/UK residents may exercise GDPR rights. Requests may be submitted to privacy@echonos.ai.

12. Data Breach Notification

In the event of a data breach involving personal information, Echonos will provide notice as required by applicable law.

13. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated through the Services or by other legally required means.

14. Limitation of Liability

To the maximum extent permitted by law, Echonos shall not be liable for unauthorized access, disclosure, alteration, or destruction of data except where resulting from gross negligence or willful misconduct.

15. Contact Us

Echonos AI, Inc.
Miami, Florida, United States
hello@echonos.ai

By using the Services, you acknowledge that you have read and understood this Privacy Policy and agree to its terms.