Privacy Policy – Studio Leva
Stand: November 2025
1. Responsible person
Responsible for data processing on this website is:
Studio Leva
Ignaz Jung
Contact by email:
privacy@studioleva.app
2. General information on data processing
The protection of your personal data is important to us. We process your data exclusively in accordance with the requirements of the General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG). This data protection declaration provides information about which personal data is collected when using Studio Leva, for what purpose this happens and what rights you are entitled to.
3. Purpose of processing
We process personal data to:
- to enable use of the platform and user accounts,
- store, process and deliver uploaded files,
- Create AI-based audio files (e.g. podcasts),
- to process payments and billing,
- to ensure the technical security and functionality of the platform.
4. Data collected
- Registration data: Email address, password hash, optional name.
- Usage data: uploaded files (PDFs, generated MP3s, timestamps).
- payment Transaction ID, payment status (via Stripe, without full payment details with us).
- Technical data: IP address, browser information, date and time of access.
5. Legal basis
- Art. 6 Paragraph 1 Letter b GDPR – Fulfillment of the contract / use of the platform.
- Art. 6 Paragraph 1 Letter a GDPR – Consent (e.g. optional functions).
- Art. 6 Paragraph 1 Letter f GDPR – legitimate interest (e.g. security, stability).
6. Storage and place of processing
Data is stored on Amazon Web Services servers (AWS S3) in an EU region (e.g. Frankfurt). There will be no unauthorized transfer to third parties. For AI audio files or summaries, content may be processed via OpenAI LLC (USA). OpenAI is certified under the EU-US Data Privacy Framework and thus ensures an appropriate level of data protection.
7. Payment processing (Stripe)
We use Stripe Payments Europe Ltd., Ireland, to process payments. Stripe processes data to make payments on our behalf (including email address, amount, IP address, technical metadata). Further information: https://stripe.com/de/privacy.
8. Duration of storage
- User accounts and associated files remain stored as long as the account is active.
- After account deletion, personal data and files will be deleted within 30 days (unless there are any legal retention requirements).
- Backups can be retained for up to 90 days for security purposes.
9. Rights of data subjects
You always have the right to:
- Information (Article 15 GDPR),
- Correction (Article 16 GDPR),
- Deletion (Article 17 GDPR),
- Restriction of processing (Article 18 GDPR),
- Data portability (Article 20 GDPR),
- Objection to certain processing operations (Art. 21 GDPR).
To exercise your rights, simply send an informal email to privacy@studioleva.app.
10. Data Security
We use technical and organizational measures to protect your data from loss, misuse, unauthorized access or disclosure. The connection to the platform is exclusively via HTTPS (SSL encryption).
11. Changes to this Privacy Policy
Studio Leva reserves the right to update this privacy policy as necessary to adapt it to new legal or technical requirements. You can find the current version at any time on this website.