Privacy policy

Effective 21 September 2026

Majed Mahmoud, Jordan, operates Autumn. Privacy contact: [email protected].

We process account and organization details, user permissions, subscription status, uploaded content and device operational data such as identifiers, versions, connection status and diagnostics. Passwords are hashed and are not included in welcome emails.

To prevent repeated free trials, the Android player processes the Android identifier and a real MAC address when the operating system permits access. It sends hashes of these values, and the server retains keyed fingerprints in a ledger independent of account and screen records. A minimal trial-use record may remain after account or screen deletion while necessary to prevent repeated trials. These fingerprints are not used for advertising. Contact support to review a second-hand device, correct an error or exercise your data rights.

We use this data to operate and secure the service, verify accounts, manage subscriptions, deliver service emails, provide support and investigate failures or abuse. Security logs may include IP addresses and request information. Browser storage or cookies support sessions and preferences. Players store pairing information and downloaded media according to device capabilities.

Our service providers include Lemon Squeezy for billing, Resend for service email, Cloudflare for security, delivery and website analytics, and server hosting and backup providers. Autumn's server does not receive full card numbers or security codes from checkout. These providers apply their own policies and may process data outside the customer's country. Aggregate visit measurements are not unique-person counts and may be affected by privacy settings.

We retain data needed for account operation, support, security, billing and legal obligations. Requests for access, correction or deletion are reviewed after verifying authority. Certain records may require retention by law or for disputes. Deletion handling includes reviewing backups and avoiding restoration of deleted data into active service; any necessary retention will be explained. Ending a subscription does not automatically erase all records.

Organizations are responsible for the lawful inclusion of personal data in their content and user accounts. The service is intended for organizations, not children. Material policy changes will be published, and applicable mandatory rights remain available.