Privacy Policy
Madaion is an AI newsroom service for radio stations, operated by Apexaneo, United Arab Emirates ("we", "us"). This policy explains what personal data we process when you use Madaion at app.madaios.com, why, and what your rights are. Contact: [email protected].
1. Data we collect
- Account data: your name, email address and profile picture, and if you sign in with Google, the basic profile Google shares (name, email, picture). We do not receive your Google password and we do not access your Gmail, Drive or other Google data.
- Station data: your station's name, team members and their roles, settings, news sources, stories, scripts, audio bulletins, voice choices and chat messages with the newsroom assistant.
- Billing data: plan, credit purchases and invoices. Card details are entered on Stripe's page and never reach our servers.
- Usage and security data: activity logs (who did what and when), usage and cost records per station, IP address and browser information needed to keep your session secure.
2. Why we use it
- To provide the service: sign-in, running your station's newsroom, producing scripts and audio (performance of our contract with you).
- To bill you and keep accounting records (contract and legal obligation).
- To keep the service secure, prevent abuse and fix problems (legitimate interest).
- To answer your support requests (contract or legitimate interest).
We do not sell your data, we do not use it for advertising, and we do not use your station's content to train AI models.
3. Service providers
We share data only with providers that run parts of the service for us:
- Clerk - accounts and sign-in.
- Google - "Sign in with Google", only if you choose it.
- DigitalOcean - hosting and database (Amsterdam, Netherlands).
- OpenAI - AI processing of news text to sort, summarize and write stories and scripts.
- ElevenLabs - turning scripts into speech.
- Stripe - payments and invoices.
- Cloudflare - network security for sign-in pages.
Some of these providers process data in the United States or other countries. Where required, transfers are covered by the provider's standard contractual clauses or equivalent safeguards.
4. Cookies and browser storage
We use only what is needed to keep you signed in (Clerk session cookies) and to remember choices such as language on your device. We do not use advertising or analytics cookies.
5. How long we keep data
We keep account and station data while your account is active. When you close your account or ask us to delete it, we delete your station data within 30 days, except records we must keep by law (such as invoices). Backups are overwritten on a rolling basis.
6. Your rights
You can ask us to access, correct, export or delete your personal data, or object to or restrict its use. Email [email protected]. If you are in the European Economic Area or the UK, you can also complain to your local data protection authority.
7. Security
Data is encrypted in transit, access is limited to each station's own members, and provider keys are never shown to stations.
8. Changes
We may update this policy. We will show the new date at the top and, for important changes, tell account owners in advance.