Privacy Policy

Last updated: October 12, 2026

This document is informational and describes how NARMIA handles its users' personal data. It does not constitute legal advice. For specific questions about your situation, we recommend consulting a professional.

NARMIA ("we", "the platform") is an audio-analysis service that lets producers, artists, and record labels scan their files (masters, premasters, and stems) to detect the level of artificial intelligence present in a track and receive a specialized report (verdict) in PDF format.

By using NARMIA, you accept the practices described in this Privacy Policy.

1. Data controller

NARMIA is a service operated by KORALEAD, LLC, a limited liability company incorporated in the State of Florida, United States ("NARMIA", "we"). The controller of your personal data is KORALEAD, LLC, subject to the laws of the State of Florida, United States. For privacy-related inquiries, you can write to us at soporte@narmia.ai (general support) or admin@koralead.com (legal or formal inquiries about your data).

2. What data we collect

2.1 Account data

• Email address and profile name.
• Authentication credentials (managed by external authentication providers).
• Basic demographic data that you choose to share.

2.2 Usage data

• History of analyses performed (date, number of credits used, file type).
• Interactions with the platform (tools used, reports generated).

2.3 Audio files and results

• The audio files you upload for analysis (masters, premasters, stems).
• The analysis results and the report/verdict generated from that analysis.
• The audio our processing tools generate from yours: the humanised track (Humanizer), the mix (Mixing AI), the master (Mastering AI) and the masked versions (Protective Shield's Shielded Demo).

2.4 Protective Shield data (Authorship Fingerprint)

• The track name and the authorship details you declare when issuing a certificate.
• The cryptographic fingerprint (SHA-256) computed over your file. It is an irreversible digest: it cannot reconstruct or play your audio, and serves only to prove that an identical file existed on a given date.
• The anchoring record for that fingerprint and, once confirmed, the corresponding Bitcoin block height.
• NARMIA does not publish your audio: the only thing that leaves our systems for a public network is that fingerprint. See section 7.1.

2.5 Payment data

• Information associated with the purchase of your plan or credit packs, processed by external payment processors.
• NARMIA does not directly store your credit-card details; that information is managed exclusively by the payment processor.

2.6 Mission and survey data

• Which missions you completed and claimed, and when, together with the credits granted for each one.
• The answers you submit in a survey, including free-text answers, stored linked to your account. We use them in aggregate to understand how the product is used and to improve it. That is why we ask you not to type personal, confidential, or third-party data into a survey: the free-text field is meant for your opinion about the product.

2.7 Referral programme data

• Your referral code and the invitation link it generates.
• The attribution link between the invited account and the account that invited it, and the credit rewards granted from it.
• The invitation code you opened is stored in your browser's local storage for 30 days, until it is sent to our systems when your account is created. See the Cookie Policy.

2.8 Error reports

When something fails in your browser, the application may send us an automatic report so we can diagnose it. That report includes:

• Your user identifier and your email address, taken from your verified session on the server — never from what the browser sends. If you were not signed in, both are empty.
• The failure details: the screen and kind of error, the endpoint and response code, the error message, the browser, the screen size, the language, and the page address. When the failure involves a file, we record its extension, its size, and its first 16 bytes — the format header, not audio — and never the file name.

Your IP address is used only to limit how many reports a single origin can send, and is not stored alongside the report.

2.9 Fraud-prevention data

To prevent abuse of the free credits (for example, creating many accounts from the same browser), we store with your account:

• The IP address you first used NARMIA from.
• A random device identifier (narmia_did), generated in your browser. See the Cookie Policy.

We use them only to decide whether an account receives free credits: if we detect too many accounts from the same browser or IP, the new account works normally and can buy credits or a plan, but does not receive free credits. We do not use them for advertising or share them with third parties, and we keep them for as long as your account exists.

3. How we use your data

We use the collected data to:

• Perform the audio analysis and generate your report/verdict.
• Manage your account, your credits, and your subscription plan.
• Process payments and credit packs.
• Improve service quality and detect technical issues.
• Communicate with you about the status of your analyses, your account, or changes to the service (transactional emails, necessary to operate your account).
• Send you marketing communications (news, new tools, improvements, and offers) only if you gave your explicit consent. This consent is optional and separate from acceptance of the service: you can grant or withdraw it at any time from your profile, without affecting transactional emails. We do not send marketing to those who have not opted in.
• Comply with legal obligations and prevent fraud or abuse of the platform.

We do not use your audio to train artificial-intelligence models, nor do we sell or share it with third parties beyond what is described in this policy.

Additionally, we retain fully anonymous and aggregated analysis metrics — for example, AI probabilities, acoustic features such as tempo or key, and the likely detected source — in order to improve the quality and accuracy of the service. These metrics do not contain your audio or any data that could identify or link back to you (they do not include your identity, your account, your track name, or any analysis identifier), so once anonymized they no longer constitute personal data. We never use your music or your audio for this purpose.

4. Third-party processing

To provide you with AI-detection analysis, your audio files are transmitted to a specialized external provider, ACRCloud, which performs the technical processing necessary to generate the analysis results. This transmission is essential for the operation of the service.

In addition, we work with other providers to operate the platform, including:

• Cloud infrastructure providers (data storage and processing).
• Authentication providers (secure sign-in management).
• Payment processors (management of charges, subscriptions, and credit packs).
• OpenTimestamps calendars, only when you request a Protective Shield certificate. They receive your file's cryptographic fingerprint — never the file, your name or your email — in order to anchor it in the Bitcoin blockchain. See section 7.1.

These providers only access the data strictly necessary to perform their function and are subject to confidentiality obligations.

5. No guarantee of results

NARMIA aims to reduce the likelihood that a track is detected, blocked, or taken down by streaming platforms or distributors due to AI-generated content. However:

• We do not guarantee that an analyzed track will not be detected, blocked, or removed by any platform, distributor, or streaming service.
• The percentages, scores, and conclusions that appear in the report/verdict are estimates based on the available technical analysis, not absolute certainties. These estimates rely, in part, on data and results from specialized external audio-identification providers (such as ACRCloud), so their scope and accuracy also depend on the information those providers make available.
• The final decision to publish, distribute, or modify your content is solely yours.

6. Ownership of and responsibility for content

By uploading an audio file to NARMIA, you represent and warrant that:

• You are the owner of the rights to that content, or you have the corresponding authorization to process it.
• You are solely responsible for the content you upload to the platform.
• You will hold NARMIA harmless against any third-party claim (including, without limitation, copyright claims) arising from the content you have uploaded.

7. Data retention

• The generated report and its associated metadata are retained while your account remains active, so you can access your analysis history. Together with the report we retain a low-quality version (a compressed preview) of your track, for the sole purpose of letting you play it again within the platform. We do not retain your full-quality original file alongside the report; the tools that do need to keep it for a limited period are set out below, in this same section. If you delete a project or a specific report, both the report (including its PDF) and the corresponding preview are also deleted from our storage.

• The anonymous and aggregated metrics described in Section 3 may be retained indefinitely for service-improvement purposes. Since they have been anonymized and do not allow you to be identified, they are not affected by the deletion of your account, your projects, or your reports.

• The audio our tools generate remains available to download for a period that depends on the tool and your plan, and is then permanently deleted. If you upgrade your plan, the period is extended for files already generated:

  Tool	Free plan	Pro plan
  Humanizer	2 days	14 days
  Mixing AI	2 days	14 days
  Mastering AI	2 days	14 days
  Shielded Demo (ZIP)	1 day	3 days

  The low-quality preview is retained together with the report, as elsewhere on the platform.

• Your full-quality original file is used for the sole purpose of generating your analysis or processing your audio. In the scanner and in the Humanizer it is kept for 2 days on the free plan and 14 days on the Pro plan — the same period as the generated audio, so an original and its result always expire together. That period exists so you can chain a scanner analysis into the Humanizer without uploading the same file again, and so your request can be reprocessed or audited if something fails; once it expires the file is permanently deleted. You authorise it by accepting the Terms and Conditions, and in the Humanizer you additionally confirm it expressly before each upload. In Forensic Analysis it is kept for 1 day on the free plan and 14 days on the Pro plan, for the sole purpose of letting you apply the report's corrections in our tools without uploading the same file again; Forensic Analysis generates no new audio, it only issues a technical report. In no case is it used to train models or shared beyond what is described in this policy.

• When you delete your account, our database performs a cascading delete that permanently destroys the associated data: email address, analysis history, reports and stored audio files, unless a legal obligation requires retaining them for an additional period, and with the single exception described in section 7.1.

7.1 Exception: blockchain records (Protective Shield)

This section describes the only category of data NARMIA cannot delete, and you expressly accept it by using Protective Shield's "Protect" function.

What is published. When a certificate of authorship is issued, we compute a SHA-256 cryptographic fingerprint of your file and register it through the OpenTimestamps protocol, which anchors it in the public Bitcoin blockchain. That fingerprint is an irreversible fixed-length value: it contains no audio, cannot reconstruct or play it, and carries no name, email or other identifying data. The only things published are that fingerprint and its timestamp.

Why it is irreversible. A public blockchain is, by design, a distributed, permanent and immutable record replicated across thousands of independent nodes that NARMIA neither operates nor controls. Once the anchor is confirmed, neither NARMIA nor any other party — including you — can alter, revoke or delete it. That permanence is not a side effect: it is precisely the property that makes the certificate usable as proof of priority against third parties, and the reason you requested the service.

What it means for your rights. If you exercise your right to deletion (section 8), we will erase the certificate, the track name, your identifying details and every link between you and that fingerprint from our systems. From that moment the value remaining on the public chain is unlinked from your identity: it survives as a string of characters with no apparent owner, which can only be tied back to you if you yourself produce the original file that generates it. This unlinking is the maximum technically possible measure and, in our view, satisfies the purpose of the right to erasure with respect to data that is, moreover, technically impossible to delete.

Your consent and its limits. By requesting a certificate you state that you understand and accept that: (i) the anchor is public, permanent and irreversible; (ii) NARMIA cannot undo it once confirmed; (iii) NARMIA is not responsible for the availability, operation or continuity of the Bitcoin network or the OpenTimestamps calendars, which are third-party infrastructure outside our control; and (iv) you should not request a certificate over a file whose fingerprint you do not want permanently anchored. That decision is yours to make before it is issued.

8. Your rights

Under applicable law, you may exercise the following rights over your personal data:

• Access: request a copy of the data we hold about you.
• Rectification: correct inaccurate or incomplete data.
• Deletion: request the deletion of your account and your associated data, with the scope and the exception described in sections 7 and 7.1.
• Objection and restriction: object to certain processing or request that we restrict its use.
• Portability: request your data in a structured format, where applicable.

You can exercise these rights by writing to soporte@narmia.ai or admin@koralead.com. We will respond within the timeframes established by applicable law.

9. Cookies

NARMIA uses cookies and similar technologies for the operation of the platform, session authentication, and usage analysis. For more detail on which cookies we use and how to manage them, see our Cookie Policy.

10. Security

We implement reasonable technical and organizational security measures to protect your data and your audio files against unauthorized access, loss, or alteration. However, no system is completely infallible, so we cannot guarantee absolute security.

11. Minors

NARMIA is not directed at minors under 18 years of age. If you become aware that a minor of that age has provided us with personal data without the corresponding consent, contact us so we can proceed with its deletion.

12. International transfers

Some of our infrastructure and processing providers may be located outside your country of residence. In those cases, we adopt the necessary measures to ensure that your data receives an adequate level of protection, in accordance with applicable law.

13. Regulatory framework

NARMIA endeavors to comply with data-protection frameworks applicable to its users, including (as applicable) the European Union's General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other local personal-data protection regulations, such as Law No. 19,628 on the Protection of Private Life in Chile.

14. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in the service or in applicable regulations. We will publish the date of the last update at the top of this document. Continued use of NARMIA after an update implies acceptance of the changes.

15. Contact

If you have questions, requests, or concerns about this Privacy Policy or the handling of your data, write to us at:

• soporte@narmia.ai (product support)
• admin@koralead.com (legal, privacy, or formal-notice inquiries)

KORALEAD, LLC — 990 Biscayne Blvd, Ste. 501-16, Miami, FL 33132, USA.