Privacy Policy

Echo (echo.1labs.app) is an AI content-repurposing service operated by Echo Media Systems, a product of One Infinity Labs, Inc. In this policy, 'Echo', 'we', 'us', and 'our' refer to Echo Media Systems, a product of One Infinity Labs, Inc.

This Privacy Policy explains what information we collect when you use Echo, how we use it, who we share it with, and the choices you have. It applies to the Echo web application and any related services we provide under the Echo name.

We collect three categories of information when you use Echo:

• Account data: your email address and name, provided when you create an account or sign in with Google OAuth.
• Usage metrics: operational data about how you use the service, such as the number of hours of audio or video processed, features used, and plan limits consumed.
• Customer Content: the audio, video, and text files you upload to Echo for processing, along with the transcripts and derivative content Echo generates from them.

We also collect standard technical information such as IP address, browser type, and device information when you access the service, which we use for security, debugging, and abuse prevention.

We use your information to provide and improve Echo. Specifically, we use it to:

• Operate the service: process your Customer Content to generate transcripts and derivative content, deliver your outputs, and maintain your projects.
• Manage your account: authenticate you, communicate with you about your account, and provide customer support.
• Bill you: track usage against your plan and process subscription payments through our merchant of record.
• Keep the service secure: detect, investigate, and prevent fraud, abuse, and security incidents.
• Improve the product: analyze aggregated usage metrics to understand how Echo is used and where it can be better.

Customer Content is processed solely to provide the service to you. We do not use your Customer Content to train AI models, and we contractually require that the third-party AI providers we use do not train their models on your Customer Content either.

We do not sell your personal information. We share information only with service providers (subprocessors) that help us run Echo, each bound by contractual obligations to protect your data and use it only to provide their service to us:

• Anthropic: text generation for derivative content.
• Deepgram: speech-to-text transcription of your uploaded audio and video.
• Polar: merchant of record handling payments, tax, and billing. Polar receives the billing information you provide at checkout.
• Neon: Postgres database hosting for account data and service data.
• Vercel: application hosting and content delivery.
• Resend: transactional email delivery (for example, account and billing notifications).
• Google: optional OAuth sign-in, if you choose to sign in with Google.

We may also disclose information if required by law, to protect the rights and safety of our users or the public, or in connection with a corporate transaction such as a merger or acquisition, in which case this policy will continue to apply to your information.

Customer Content is retained until you delete the project it belongs to or delete your account. When you delete your account, we delete your Customer Content within 30 days.

Account data and usage metrics are retained for as long as your account is active and for a limited period afterwards as needed for legal, tax, and accounting purposes.

Backups may persist for a short additional period after deletion, after which the data is permanently removed.

Echo and its subprocessors may process data in countries other than the one in which you live, including the United States. Where data is transferred internationally from regions that restrict such transfers (such as the European Economic Area, the United Kingdom, or Switzerland), we rely on appropriate safeguards, including Standard Contractual Clauses, as described in our Data Processing Addendum.

Depending on where you live, you may have rights to access, correct, export, restrict, or delete your personal information, and to object to certain processing.

You can exercise most of these directly: you can update your account details in the app, delete individual projects at any time, and delete your account entirely. For anything else, contact us at support@1labs.ai and we will respond within the timeframes required by applicable law.

If you are in a jurisdiction with a data protection authority, you also have the right to lodge a complaint with that authority.

Echo is not directed at children and is not intended for use by anyone under 16 (or the higher minimum age required in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us at support@1labs.ai and we will delete it.

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or by a prominent notice in the app before the changes take effect. The date at the top of this page reflects the latest revision.

Questions about this policy or our data practices can be sent to legal@1labs.ai. General support is available at support@1labs.ai.

This document is a working draft prepared for launch and is pending review by legal counsel.