Who we are
Ayas Studio turns podcast episodes into content packs. It is run by one person, its founder. In this policy "we" and "us" mean Ayas Studio. We are responsible for the personal data described here.
Questions or requests about your data: aya@ayasstudio.org.
The short version
- The site has no accounts and no database. Payments go through our payment provider, Lava.top, on its own page, and we never see your card details.
- If you send the enquiry form, we get your name, email, podcast link, the plan you choose and, if you add them, a link to where you post and the episode you have in mind.
- We use Microsoft Clarity to see how the site is used. If your browser’s time zone points to the EEA, the UK or Switzerland, or we can’t tell, it runs only after you click Accept; elsewhere it runs by default and Decline turns it off.
- Episodes you send us stay private. We don't share or publish them.
- We don't sell your data and we don't use it for advertising.
What we collect and why
1. The enquiry form
Fields: name, email, podcast link, the plan you choose (or the free trial), and two optional fields: where you post (a LinkedIn or X profile link) and the episode to start with (an episode link or a link to the file). The form goes to a small program run on our site host, Cloudflare. It saves your request to our client list in Notion and emails it to us, and it emails you a confirmation: right away for a free request, or once your payment is through for a plan. Emails about your plan (a renewal, a failed payment, a cancellation) are sent the same way. These emails are sent through Resend. Before the form is accepted, Cloudflare Turnstile checks that it was sent by a person rather than a bot. If our program is unavailable, a form-delivery provider, FormSubmit (formsubmit.co), delivers the form to our inbox instead. FormSubmit’s own terms say it uses form contents only to deliver them to us and doesn’t share them; they don’t state where or for how long it stores them.
We use these details only to reply to you and to do the work. If you give us your profile link, we read a few of your public posts to match how you write. Legal basis (GDPR): steps you asked us to take before a contract, and our legitimate interest in answering enquiries.
2. Email with us and client work
If you become a client, we keep our email conversation, the plan you're on and records of your payments, the episode you send (audio, video, transcript or link) and the pack we deliver. We need these to do the work, keep track of your plan and keep business records. Legal basis: performance of our contract with you and legal obligations such as tax records.
Episodes can be unreleased. We don't share, publish or reuse an episode you send us, and we don't use it in our own marketing. The sample pack on this site is built from a publicly released episode. If our sample uses your episode and you'd like it taken down, email us and we'll remove it.
3. Payments (Lava.top)
When you pay for a plan, you do it on a checkout page run by our payment provider, Lava.top. On that page you enter your email and card or PayPal details, and Lava.top receives them to take your payment and the monthly renewals. Lava.top also sets up an account for that email, where you can see and cancel your subscription. We never see your card details. We see each payment and the email it was made with, so we can match it to your order. Lava.top handles this data under its own privacy policy. Legal basis: performance of our contract with you.
4. Microsoft Clarity
Clarity is an analytics tool from Microsoft. When it runs, it records how you use the site: clicks, scrolling, mouse movement and the pages you view. We look at this as session recordings, heatmaps and scroll-depth reports to understand which parts of the site are read and where people get stuck. Clarity sets cookies (listed below) and assigns your browser a pseudonymous ID.
If your browser’s time zone points to the EEA, the UK or Switzerland, or we can’t tell, Clarity doesn’t run until you click Accept, and the legal basis is your consent, which you can withdraw at any time. Elsewhere it runs when you open the site, and Microsoft applies its own location check as well. Clicking Decline stops recording on the current page and deletes Clarity’s cookies on this site, and Clarity won’t load on later visits. Cookies Microsoft set on its own domains (CLID, MUID, MR, SM, ANONCHK) can only be removed in your browser settings. This site does not respond to browser “Do Not Track” signals; use the banner instead. Microsoft may collect information about your activity over time and across other sites that use Clarity.
Microsoft processes this data as an independent controller. How Microsoft collects and uses it is described in the Microsoft Privacy Statement.
5. Hosting
The site is hosted on Cloudflare Pages. Like any web host, Cloudflare processes your IP address and request details to deliver the pages and protect the site from abuse. We don’t use Cloudflare’s analytics.
6. Fonts
The site’s fonts (Inter and Playfair Display) are served from this site. No font requests go to Google.
Who else sees your data
Only the services named above, and only for the purposes described: Cloudflare (hosting, the form's spam check Turnstile, and the small program that receives the form), Resend (sending our confirmation emails), Notion (our client list), FormSubmit (backup form delivery), Lava.top (payments), our email provider Namecheap Private Email (our inbox), Anthropic (Claude, which helps us draft the texts of a pack from the episode transcript), Microsoft (Clarity). Transcripts are made on our own computer. We may also disclose data if the law requires it. We don’t sell or rent personal data, and we don’t share it for cross-context behavioural advertising.
Some of these providers process data in the United States and other countries. Where GDPR applies, transfers rely on the providers' own safeguards, such as the EU–US Data Privacy Framework or standard contractual clauses.
How long we keep it
- Enquiries that don't lead to an order: up to 12 months after our last message, then deleted.
- Episodes you send us: deleted within 30 days after the pack is delivered and the edit round is closed, unless you ask us to keep them longer.
- Delivered packs, payment records and related emails: as long as tax and accounting law requires.
- Clarity: Microsoft keeps playback data (recordings) for 30 days and heatmap and click data for 9 months. See Clarity data retention.
- Local storage items stay in your browser until you clear them.
Your rights
Everyone: you can ask what we hold about you, ask us to correct or delete it, and withdraw consent to Clarity at any time. Email aya@ayasstudio.org. We reply within 30 days.
EEA, UK and Switzerland (GDPR / UK GDPR): you also have the right to restrict or object to processing, to data portability, and to complain to your local data protection authority.
California (CCPA/CPRA): you have the right to know what personal information we collect, to delete it, to correct it, and to opt out of its sale or sharing. We don't sell or share personal information as those laws define it. We won't treat you differently for using any of these rights.
We may need to confirm it's you before acting on a request.
Children
The site and service are for businesses and adults. We don't knowingly collect data from anyone under 18.
Changes to this policy
If we change how we handle data, we'll update this page and the date at the top. If we add a new tool that needs consent, we'll ask again.
Contact
Ayas Studio
aya@ayasstudio.org