1. Introduction

ECHORACORE (“we”, “our”, “us”) provides a family of digital creative platforms and tools, including
Echo Infinite and
ECHORACORE Studio,
as well as future products under the ECHORACORE brand.

This Privacy Policy explains how we collect, use, store, and protect your personal information when you use any ECHORACORE service.
By accessing or using our platforms, you agree to the practices described here.

2. Who We Are (Data Controller)

ECHORACORE
Contact: support@echoracore.com

We are the data controller responsible for processing personal data across all ECHORACORE services.

3. Information We Collect

We collect the following types of information to operate and improve our services:

3.1 Account & Profile Information

• Name
• Email address
• Authentication provider IDs (Google, Microsoft)
• Profile photo and display name (if provided)
• Settings, preferences, and user-generated metadata

3.2 Content & Activity Data

• Tracks, images, videos, and text you upload
• Course progress and submissions (Studio)
• Creator interactions such as likes, comments, and shares (Infinite)
• Communication logs (e.g., messaging features)

3.3 Technical & Device Data

• IP address
• Device type, OS, and browser version
• Error logs and diagnostic data
• Security event logs
• Cookies and similar technologies

3.4 Payment & Subscription Metadata

Handled securely by Stripe.
We do not store full card numbers or sensitive payment details.

We may store:

• Stripe customer ID
• Subscription status
• Transaction references

4. How We Use Your Information

We use your information to:

• Operate and improve the platform
• Authenticate you using your chosen provider
• Enable content publishing, creation, and sharing
• Personalize your experience
• Deliver learning progress and private materials (Studio)
• Provide public creator features (Infinite)
• Detect misuse, fraud, and security threats
• Process payments and manage subscriptions
• Send essential notifications and updates

5. Legal Basis for Processing (GDPR-compliant)

Where applicable, we rely on:

• Contract – to provide platform functionality
• Legitimate Interests – platform security, improvement, analytics
• Consent – cookies, analytics, optional communication
• Legal Obligation – financial retention via Stripe

6. How We Share Information

We do not sell personal data.
We may share limited information with trusted partners who help us operate the service, such as:

• Cloud hosting providers
• Logging and monitoring tools
• Stripe (for payments)
• Google and Microsoft (for authentication)
• Email/notification services
• Optional analytics tools

All subprocessors must comply with strict confidentiality and data protection requirements.

7. Product-Specific Privacy Notes

7.1 Echo Infinite (Public Creator Platform)

• Published content may be visible to others or public.
• Your profile, posts, likes, comments, and interactions may be visible depending on your settings.
• You may delete or unpublish your content at any time.

7.2 ECHORACORE Studio (Private Learning Environment)

• Course progress and learning data are private by default.
• Content is only shared when you explicitly publish or submit it.
• No course-related data is public unless you choose to make it public.

8. Cookies & Similar Technologies

Cookies help us provide secure login, preferences, analytics, and improved performance.
By using ECHORACORE services, you consent to our use of cookies in accordance with this policy.

8.1 Types of Cookies We Use

Essential Cookies

• Required for authentication, session management, and platform security.

Analytics Cookies

• Allow us to measure performance, detect issues, and improve the experience.

Preference Cookies

• Store UI settings like theme, language, and layout preferences.

Third-Party Cookies
From services such as:

• Google or Microsoft login
• Embedded media (e.g., YouTube)
• Stripe (for payments)

8.2 Managing Cookies

You may disable or delete cookies through your browser settings.
Doing so may limit functionality, particularly login and session stability.

9. Data Retention & Deletion

9.1 Account Deactivation

Deactivating your account hides your content and prevents login.

9.2 Permanent Deletion

Upon verified deletion request:

• Your personal data is removed
• Uploaded content is deleted where possible
• Content that cannot be removed without breaking other users’ content may be anonymized
• Stripe identifiers and metadata are removed where legally permissible

9.3 Backups

Deleted data may remain in encrypted backups for up to 30 days for disaster recovery only.

10. Your Rights

Where applicable, you may request:

• Access to your personal data
• Correction of inaccurate information
• Deletion
• Data export
• Restriction of processing
• Withdrawal of consent

Contact: support@echoracore.com

11. Children’s Privacy

Our services are not intended for individuals under 13 (or 16 where applicable).
We do not knowingly collect data from minors.

12. Updates to This Policy

We may update this Privacy Policy to reflect changes in our services or legal requirements.
Significant updates will be communicated through the platform.