Skip to main content
Midsummerr
Next GENarration is HERE! 30% OFF »

Privacy Policy

Last Updated: October 18, 2026

1. INTRODUCTION

Midsummer LTD, operating as Midsummerr ("we," "us," or "our"), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, share, and protect your personal information when you visit our website at midsummerr.com (the "Site"), use the Midsummerr mobile listening application for iOS and Android (the "App" — see Section 13), and use our AI-powered audiobook creation, distribution, and listening services (collectively, the "Services").

By using our Services, you consent to the data practices described in this Privacy Policy. If you do not agree with this Privacy Policy, please do not use our Services.

This Privacy Policy should be read in conjunction with our Terms of Service, which governs your use of our Services.

2. INFORMATION WE COLLECT

2.1 Information You Provide Directly

Account Information When you create an account, we collect:

  • Name
  • Email address
  • Password (encrypted)
  • Company or author name (optional)
  • Phone number (optional)
  • Billing address
  • Country/region

Payment Information When you purchase credits or subscribe to our Services, we collect:

  • Payment transaction IDs
  • Payment amounts and timestamps
  • Billing address
  • Payment history and transaction details
  • Credit purchase amounts and dates
  • Credit balance and consumption records

Note: We do not store your complete credit card information on our servers. Payment data is handled directly by Polar.sh (our Merchant of Record and payment processor) in accordance with PCI-DSS standards. Polar.sh acts as the authorized reseller and handles all payment processing, invoicing, and tax collection on our behalf. We never see or store your card numbers.

Credit and Usage Data To facilitate our pay-per-use billing model, we collect and maintain:

  • Credit purchase history and amounts
  • Credit consumption and usage details
  • Usage metrics (words processed, audio minutes generated, chapters created)
  • Timestamps of credit usage
  • Project and content associated with credit consumption

Content and Manuscripts

  • Text files, manuscripts, and written content you upload
  • Book titles, descriptions, and metadata
  • Character descriptions and production notes
  • Audio samples or voice recordings you provide
  • Any other content you choose to submit through our Services

Communications

  • Messages you send to our support team
  • Feedback, reviews, or testimonials you provide
  • Email correspondence with us
  • Survey responses

User-Generated Content

  • Profile information you choose to make public
  • Comments or posts in community forums (if applicable)
  • Preferences and settings you configure

AI-mark checker. If you upload audio to our checker, we process it only to look for AI marks and delete it as soon as the check finishes. We keep basic traffic logs for up to 30 days to prevent abuse. The receipt contains the file's hash, not the file.

2.2 Information Collected Automatically

Usage Data When you use our Services, we automatically collect:

  • Pages visited and features used
  • Time and duration of visits
  • Click patterns and navigation paths
  • Search queries within our Services
  • Files uploaded and downloads initiated
  • AI generation requests and parameters

Device and Technical Information

  • IP address
  • Browser type and version
  • Operating system
  • Device identifiers
  • Screen resolution
  • Language preferences
  • Referring URLs

Cookies and Tracking Technologies We use cookies and similar technologies to:

  • Maintain your logged-in session
  • Remember your preferences and settings
  • Analyze how you use our Services
  • Improve our Services and user experience

For more details, see Section 6 (Cookies and Tracking Technologies).

2.3 Information from Third Parties

Social Media and Authentication Services If you choose to log in using a third-party service (such as Google), we may receive:

  • Profile information (name, email, profile picture)
  • Any other information you authorize the third-party service to share

Analytics and Service Providers We may receive aggregated or anonymized data from third-party analytics providers about how you interact with our Services.

3. HOW WE USE YOUR INFORMATION

We use the information we collect for the following purposes:

3.1 Providing and Improving Services

  • Create and manage your account
  • Process credit purchases and track credit balances
  • Deduct credits based on your usage of our Services
  • Process subscription payments (if applicable)
  • Generate AI audiobooks from your content
  • Deliver the Services and features you request
  • Provide customer support and respond to inquiries
  • Troubleshoot technical issues
  • Improve, test, and enhance our Services and AI technology
  • Develop new features and functionality

3.2 Communications

  • Send you service-related emails (account verification, transaction confirmations, password resets)
  • Notify you of important changes to our Services or policies
  • With your consent, send marketing and promotional communications
  • Request feedback or conduct surveys
  • Respond to your questions and comments

3.3 Security and Compliance

  • Detect, prevent, and address fraud, security threats, or illegal activity
  • Verify your identity and prevent unauthorized access
  • Enforce our Terms of Service and other policies
  • Comply with legal obligations and protect our legal rights
  • Respond to law enforcement requests and legal proceedings

3.4 Analytics and Business Operations

  • Analyze usage patterns and trends
  • Conduct research and development
  • Monitor and improve our technology
  • Measure the effectiveness of our marketing campaigns
  • Generate aggregate statistics and insights (anonymized)

3.5 No AI Model Training on Your Content

We never use your content (manuscripts, uploaded audio, voice samples and the audiobooks we produce for you) to train AI models. We use usage data only in aggregated or anonymized form to improve the quality and accuracy of our Services and to develop new features (see Section 9).

4. HOW WE SHARE YOUR INFORMATION

We do not sell your personal information to third parties. We may share your information in the following circumstances:

4.1 Service Providers

We share information with third-party vendors and service providers who perform services on our behalf, including:

  • Payment processing (Polar.sh - see their privacy policy)
  • Cloud hosting and storage services
  • Email delivery services
  • Analytics providers (Microsoft Clarity, Vercel Analytics)
  • Customer support tools
  • Content delivery networks

These providers are contractually obligated to protect your information and use it only for the purposes we specify.

Payment Data Sharing When you make a purchase, we share necessary transaction information with Polar.sh for payment processing. This includes:

  • Transaction IDs and amounts
  • Timestamps of transactions
  • Your billing address
  • Order details

Polar.sh processes payments on our behalf and handles all sensitive payment card data. We never receive or store your complete credit card information.

4.2 Business Transfers

If Midsummerr is involved in a merger, acquisition, sale of assets, bankruptcy, or reorganization, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.

4.3 Legal Requirements

We may disclose your information if required to do so by law or in response to:

  • Valid legal processes (subpoenas, court orders, search warrants)
  • Government or regulatory requests
  • Requests to protect the rights, property, or safety of Midsummerr, our users, or the public
  • Enforcement of our Terms of Service or investigation of potential violations

4.4 With Your Consent

We may share your information for other purposes with your explicit consent or at your direction.

4.5 Aggregated and Anonymized Data

We may share aggregated, anonymized, or de-identified data that cannot reasonably be used to identify you for:

  • Industry research and analysis
  • Marketing and promotional purposes
  • Public reports and presentations

4.6 Third-Party Distribution Platforms

If you choose to distribute your audiobooks through third-party platforms (such as Spotify, Apple Books, or other audiobook services), we may share necessary metadata and content with those platforms in accordance with your instructions.

5. DATA RETENTION

We retain your personal information for as long as necessary to:

  • Provide you with our Services
  • Comply with legal obligations
  • Resolve disputes and enforce our agreements
  • Fulfill the purposes described in this Privacy Policy

5.1 Retention Periods

  • Account Information: Retained while your account is active and for up to 6 months after account deletion
  • Payment Records: Retained for 7 years for tax and legal compliance (as required by applicable tax regulations)
  • Content and Manuscripts: Retained while your account is active; deleted upon request or within 30 days of account deletion
  • Usage Logs: Retained for up to 24 months
  • Support Communications: Retained for up to 3 years

After the retention period, we will delete or anonymize your information. Some information may remain in backup systems for up to 90 days after deletion.

Account Deletion and Payment History When you delete your account:

  • Payment history is retained (anonymized where possible) for tax and legal compliance purposes for 7 years
  • Any remaining credits are forfeited
  • Your personal information is deleted in accordance with the retention periods above

6. COOKIES AND TRACKING TECHNOLOGIES

6.1 What Are Cookies

Cookies are small text files stored on your device that help us recognize you and remember your preferences.

6.2 Types of Cookies We Use

Essential Cookies (Required)

  • Session management and authentication
  • Security features
  • Load balancing

Functional Cookies (Optional)

  • Remembering your preferences and settings
  • Providing enhanced features
  • Improving user experience

Analytics Cookies (Optional)

  • Understanding how you use our Services
  • Measuring performance and effectiveness
  • Identifying areas for improvement

Marketing Cookies (Optional, with consent)

  • Tracking conversions from marketing campaigns
  • Personalizing advertising content
  • Measuring advertising effectiveness

6.3 Third-Party Analytics on the Site

Microsoft Clarity We use Microsoft Clarity on the Site to understand how visitors use it, through session replays (recordings of how you interact with pages), heatmaps, and interaction data such as clicks, scrolls, and pages visited. Clarity masks sensitive on-page content, including text you type into input fields, before upload. If you are signed in, we may associate Clarity sessions with your account so we can investigate issues you report. Microsoft acts as an independent data controller for Clarity data and may use it as described in the Microsoft Privacy Statement. Individual Clarity recordings cannot be deleted on request, but are automatically deleted under Clarity's retention schedule (generally 30 days).

Vercel Analytics We use Vercel Analytics for aggregate page-view and event statistics. It does not use cookies and does not track you across other sites.

6.4 Managing Cookies

You can control and manage cookies through your browser settings. However, disabling certain cookies may limit your ability to use some features of our Services.

7. DATA SECURITY

We implement reasonable administrative, technical, and physical security measures to protect your information from unauthorized access, use, disclosure, alteration, or destruction.

7.1 Security Measures

  • Encryption of data in transit (SSL/TLS)
  • Encryption of sensitive data at rest
  • Regular security assessments and penetration testing
  • Access controls and authentication requirements
  • Monitoring and logging of system access
  • Employee training on data security and privacy
  • Secure development practices

7.2 Limitations

While we strive to protect your information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security, and you provide information at your own risk.

7.3 Breach Notification

In the event of a data breach that affects your personal information, we will notify you and relevant authorities as required by applicable law.

8. YOUR PRIVACY RIGHTS

Depending on your location, you may have certain rights regarding your personal information:

8.1 General Rights (All Users)

Access and Portability

  • Request a copy of the personal information we hold about you
  • Receive your information in a structured, machine-readable format

Correction

  • Update or correct inaccurate or incomplete information
  • Modify your account information through your account settings

Deletion

  • Request deletion of your personal information (subject to legal retention requirements)
  • Close your account and request removal of your data

Objection and Restriction

  • Object to certain processing of your information
  • Request restriction of processing in certain circumstances

Opt-Out of Marketing

  • Unsubscribe from promotional emails by clicking the unsubscribe link
  • Adjust your communication preferences in your account settings

Data Portability

  • Request transfer of your data to another service provider

8.2 California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

  • Right to know what personal information we collect and how we use it
  • Right to delete personal information (with certain exceptions)
  • Right to opt out of the sale of personal information (Note: We do not sell personal information)
  • Right to non-discrimination for exercising your privacy rights

8.3 European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), UK, or Switzerland, you have rights under the General Data Protection Regulation (GDPR):

  • Right to access your personal data
  • Right to rectification of inaccurate data
  • Right to erasure ("right to be forgotten")
  • Right to restrict processing
  • Right to data portability
  • Right to object to processing
  • Right to withdraw consent
  • Right to lodge a complaint with a supervisory authority

Legal Basis for Processing We process your data based on:

  • Contractual necessity (Art. 6(1)(b) GDPR) - to provide our Services and process payments
  • Legitimate interests (Art. 6(1)(f) GDPR) - to improve our Services and ensure security
  • Consent (Art. 6(1)(a) GDPR) - for marketing communications and optional features
  • Legal obligations (Art. 6(1)(c) GDPR) - to comply with applicable laws, including tax and financial record-keeping requirements

8.4 Other Regional Rights

Residents of certain other jurisdictions (Nevada, Colorado, Connecticut, Virginia, Utah) may have additional privacy rights. Please contact us to exercise your rights.

8.5 Exercising Your Rights

To exercise any of these rights, please contact us at:

  • Email: privacy@midsummerr.com
  • Subject line: "Privacy Rights Request"

Include sufficient information for us to verify your identity and process your request. We will respond within the timeframe required by applicable law (typically 30-45 days).

9. AI MODEL TRAINING

We do not use your content to train AI models, so there is no setting to change and nothing to opt out of. We may use anonymized or aggregated data that identifies no one to improve our Services. Questions: privacy@midsummerr.com.

10. INTERNATIONAL DATA TRANSFERS

Midsummer LTD operates internationally and uses service providers located in various countries. If you are accessing our Services from outside your country of residence, please be aware that your information may be transferred to, stored, and processed in countries where our servers and service providers operate.

These countries may have data protection laws that differ from those in your country. By using our Services, you consent to the transfer of your information to these countries.

For users in the EEA/UK, we ensure appropriate safeguards are in place for international transfers, such as Standard Contractual Clauses approved by the European Commission.

11. CHILDREN'S PRIVACY

Our Services are not intended for children under the age of 18. We do not knowingly collect personal information from children under 18.

If we become aware that we have collected personal information from a child under 18 without parental consent, we will take steps to delete that information. If you believe we have collected information from a child, please contact us immediately at privacy@midsummerr.com.

12. THIRD-PARTY SERVICES AND LINKS

Our Services may contain links to third-party websites, platforms, or services that we do not own or operate. This Privacy Policy does not apply to third-party services.

We encourage you to review the privacy policies of any third-party services before providing them with your information. We are not responsible for the privacy practices or content of third-party services.

12.1 Third-Party Services We Use

12.2 Payment Processing and PCI DSS Compliance

We comply with PCI DSS (Payment Card Industry Data Security Standard) standards by using Polar.sh as our Merchant of Record. Polar.sh handles all payment card processing, and we maintain PCI compliance by never storing or handling sensitive card data on our servers.

VAT and Tax Compliance Polar.sh is our Merchant of Record for payment processing and handles VAT (Value Added Tax) collection for all transactions automatically per applicable regulations in your jurisdiction. This ensures full compliance with international tax requirements.

13. MOBILE APPLICATION (MIDSUMMERR LISTENING APP)

This section applies to the Midsummerr listening app for iOS and Android (the "App"), which lets you browse and listen to audiobooks produced on Midsummerr. It describes what the App actually collects; where this section differs from the general sections above (which describe the web platform), this section controls for the App.

13.1 What the App Collects

You can browse and listen in the App without creating an account. Signing in is optional. The App collects:

  • Email address — collected only if you choose to sign in. Sign-in works through a secure link we email to you; the App does not use passwords. Your email address is your account identifier.
  • User ID — an internal account identifier assigned by our servers, attached to your synced listening progress and, once you are signed in, to the analytics events below.
  • Listening progress — your playback position per chapter and book, sent to our servers so you can resume where you left off across devices.
  • Product interaction events — a small set of first-party analytics events (app open, playback start, chapter completed, book completed, sign-in), sent only to our own servers.
  • Device identifier — a random identifier that the App itself generates on first launch and stores on your device. It is created by us, not the operating system: it is not the Apple advertising identifier (IDFA/IDFV), not the Google Advertising ID, and not a hardware identifier. We use it to associate analytics events with a device before you sign in.

13.2 What the App Does Not Do

  • No advertising — the App shows no ads and does not use advertising identifiers.
  • No third-party analytics or advertising SDKs — analytics are first-party only and are sent only to Midsummerr's own servers. We do not share App data with data brokers or ad networks.
  • No cross-app tracking — we do not link App data with third-party data for advertising, and we do not track you across other companies' apps or websites.
  • No device permissions — the App does not request or access your location, contacts, photos, camera, or microphone.
  • No cookies — the App uses token-based authentication, not cookies; Section 6 does not apply to the App.

13.3 Security

All communication between the App and our servers is encrypted in transit using HTTPS, including audio streaming from our content delivery network.

13.4 Account and Data Deletion

You can delete your Midsummerr account — including an account created or used in the App — at any time, without contacting us:

  1. In the App: Profile → Delete account, or
  2. On the web: the "Delete Account" option on your account page at midsummerr.com/account.

Either path asks you to confirm and then deletes the account immediately. Your account information, synced listening progress and credit records are deleted, and your analytics events are unlinked from your identity (retained only in anonymised form). The retention periods in Section 5 apply.

If your account owns audiobook productions, self-service deletion is blocked so that published work is not removed unintentionally — email support@midsummerr.com from the email address on the account with the subject "Delete my account" and we will complete the deletion with you.

14. DO NOT TRACK SIGNALS

Some browsers include a "Do Not Track" (DNT) feature that signals to websites you visit that you do not want to have your online activity tracked. Our Services do not currently respond to DNT signals or similar mechanisms.

15. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.

15.1 Notice of Changes

We will notify you of material changes by:

  • Posting the updated Privacy Policy on our Site with a new "Last Updated" date
  • Sending an email to your registered email address
  • Displaying a notice on our Services

15.2 Your Acceptance

Your continued use of our Services after the effective date of the updated Privacy Policy constitutes your acceptance of the changes. If you do not agree to the updated Privacy Policy, you must stop using our Services and may request deletion of your account.

15.3 Review Regularly

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

16. CONTACT US

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Privacy Inquiries:
Email: privacy@midsummerr.com

Data Protection Officer:
Email: dpo@midsummerr.com

General Contact:
Midsummer LTD
Email: support@midsummerr.com
Website: https://www.midsummerr.com

We will respond to your inquiry within a reasonable timeframe.

17. SUPERVISORY AUTHORITY

If you are located in the EEA/UK and believe we have not adequately addressed your privacy concerns, you have the right to lodge a complaint with your local supervisory authority for data protection.

By using Midsummerr's Services, you acknowledge that you have read and understood this Privacy Policy and agree to our collection, use, and sharing of your information as described herein.

By using Midsummerr's Services, you acknowledge that you have read and understood this document.