Privacy Policy
Effective date: 1 July 2026
Last updated: 1 July 2026
-------------------------------------------
1. Introduction
This Privacy Policy explains how Optivex OÜ, trading as Valeniar Originals, collects, uses, stores, shares and protects personal data when you use:
• the Valeniar Originals website at valeniaroriginals.com;
• the Valeniar Originals mobile applications for iOS and Android;
• Valeniar Originals accounts, subscriptions and related services;
• newsletters, marketing communications and social-media features;
• customer support and other communications with us.
In this Privacy Policy, these services are collectively called the “Services.”
Optivex OÜ is the controller responsible for personal data processed through the Services unless otherwise stated.
Controller details
Optivex OÜ, trading as Valeniar Originals
Registry code: 17308541
Harju maakond, Haabersti linnaosa
Tiskrevälja tn 59-12
13516 Tallinn
Estonia
Email: support@valeniaroriginals.com
For privacy requests, use the subject line:
Privacy Request – Valeniar Originals
Data protection contact
Optivex OÜ has not appointed a Data Protection Officer. Based on the nature and current scale of our processing activities, we do not currently consider such an appointment mandatory under Article 37 of the GDPR. We periodically review this assessment as our Services and data-processing activities develop. Privacy enquiries and requests may be sent to support@valeniaroriginals.com.
2. Scope
This Privacy Policy applies to personal data processed through the Valeniar Originals website, mobile applications, subscriptions, accounts, communications and connected services.
It does not govern third-party websites, applications, app stores or social-media platforms that operate under their own privacy policies.
Examples include Apple, Google, Stripe, Meta, TikTok, Reddit, YouTube and X.
3. Age requirement
Valeniar Originals is intended only for persons who are 18 years of age or older.
The Services may contain mature romantic themes and age-restricted content. We do not knowingly collect personal data from anyone under 18.
If we learn that a person under 18 has created an account or provided personal data, we may:
• suspend or delete the account;
• remove associated personal data;
• request information needed to verify age;
• take other reasonable steps required by law.
A parent, guardian or other person who believes that someone under 18 has provided personal data may contact us at support@valeniaroriginals.com.
4. Personal data we may collect
The exact information collected depends on the features you use and the permissions you grant.
4.1 Account and identity information
When you create or use an account, we may collect:
• name;
• email address;
• account identifier;
• username or profile name;
• authentication identifiers and tokens provided by third-party authentication services;
• login method;
• country, language or region;
• age confirmation;
• account creation date;
• account status;
• communication preferences.
Optivex OÜ does not collect, store or process user passwords. Password-based authentication, where available, is handled entirely by third-party authentication service providers under their own security procedures and privacy terms.
4.2 Social sign-in information
When you sign in using Google Sign-In or Sign in with Apple, we may receive information authorised by you and supplied by the provider, such as:
• name;
• email address;
• provider-specific user identifier;
• profile image, where authorised;
• authentication token;
• whether Apple has provided a private relay email address.
The provider may also process information about the sign-in under its own privacy policy.
4.3 Subscription and purchase information
When you purchase or manage a subscription, we may collect or receive:
• product or subscription selected;
• purchase date;
• subscription status;
• renewal date;
• expiry date;
• trial status;
• currency;
• transaction or receipt identifier;
• app-store account region;
• refund, cancellation or payment-failure status;
• entitlement information;
• promotional offer or discount information.
RevenueCat is used to manage subscription status, purchase records, paywalls and access entitlements across platforms.
4.4 Payment information
Payments may be processed by:
• Stripe;
• Apple App Store;
• Google Play;
• another payment provider displayed at checkout.
We generally do not receive or store complete card numbers, card security codes or full payment-account credentials.
Payment providers may process information such as:
• billing name;
• billing address;
• payment method;
• card type;
• partial card number;
• transaction amount;
• payment status;
• fraud-prevention information;
• tax-related information;
• device and network information.
4.5 Listening and content-usage information
When you use the Services, we may collect:
• audiobooks, stories or chapters opened;
• listening history;
• listening progress;
• completion status;
• playback position;
• playback duration;
• favourites;
• saved items;
• followed tags or categories;
• searches;
• collection or genre preferences;
• recently played content;
• interactions with recommendations;
• downloads or offline availability status;
• audio track or language selected;
• timestamps associated with activity.
This information may be used to:
• resume playback;
• synchronise activity across devices;
• maintain favourites and saved items;
• provide personalised recommendations;
• understand which content is useful or popular;
• improve the Services.
4.6 Technical and device information
We and our providers may collect:
• IP address;
• device type;
• device model;
• operating system;
• browser type;
• application version;
• language settings;
• time zone;
• screen dimensions;
• mobile network or internet-service provider;
• device or application identifiers;
• advertising identifiers, where permitted;
• cookie identifiers;
• session identifiers;
• push-notification token;
• crash logs;
• diagnostic information;
• performance information;
• referring page or campaign;
• approximate location inferred from IP address;
• date and time of access;
• security and authentication events.
We do not currently collect precise GPS location. If a future feature requires precise location data, we will provide appropriate notice and request permission before collecting it.
4.7 Communications and support information
When you contact us, we may collect:
• your name;
• email address;
• telephone number, if provided;
• account details;
• message contents;
• attachments;
• screenshots;
• support history;
• technical details needed to investigate the request;
• records of our response.
4.8 Newsletter and marketing information
When you subscribe to marketing communications, we may collect:
• email address;
• name, if supplied;
• consent date and source;
• campaign or signup source;
• newsletter preferences;
• delivery status;
• opens and clicks, where permitted;
• unsubscribe status;
• interactions with promotional messages.
4.9 Survey, review and feedback information
We may collect information when you:
• submit an app rating;
• write a review;
• answer a survey;
• participate in testing;
• report a problem;
• provide feedback;
• participate in a promotion or competition.
4.10 Social-media information
When you interact with Valeniar Originals through social media, we may receive:
• public profile information;
• username;
• comments;
• messages;
• reactions;
• shares;
• campaign engagement;
• information you make publicly available;
• advertising or conversion data where tracking is enabled and consent is obtained.
Relevant platforms may include:
• Instagram and Facebook;
• TikTok;
• YouTube;
• Reddit;
• X;
• other social platforms linked from the Services.
4.11 Information from integrations and partners
We may receive information from service providers involved in:
• app hosting;
• content delivery;
• authentication;
• subscriptions;
• payments;
• analytics;
• advertising;
• email delivery;
• automation;
• customer support;
• media playback;
• crash reporting;
• push notifications;
• app-store distribution.
5. How we collect personal data
We may collect personal data:
Directly from you
For example, when you:
• create an account;
• subscribe;
• make a purchase;
• contact support;
• join a newsletter;
• update your preferences;
• submit feedback;
• use search, favourites or listening features.
Automatically
For example, through:
• cookies;
• software development kits;
• analytics technologies;
• pixels;
• tags;
• local storage;
• log files;
• device identifiers;
• app events;
• crash-reporting tools.
From third parties
For example, from:
• Apple;
• Google;
• Stripe;
• RevenueCat, for subscription management, paywalls, purchase verification and access entitlements;
• app stores;
• authentication providers;
• analytics providers;
• advertising platforms;
• social-media platforms;
• Audiorista, operated by Pubfront ApS;
• technical-service providers.
6. Purposes and legal bases
We process personal data only where we have an appropriate legal basis.
6.1 Providing the Services
We process account, subscription, playback and support information to:
• create and maintain accounts;
• authenticate users;
• provide access to content;
• save listening progress;
• maintain favourites;
• manage subscriptions;
• provide paid features;
• deliver support;
• fulfil purchases.
Legal basis: performance of a contract or steps taken at your request before entering into a contract.
6.2 Processing payments and subscriptions
We process transaction, receipt and entitlement information to:
• process purchases;
• verify subscription status;
• manage renewals;
• restore purchases;
• prevent duplicate access;
• handle cancellations and refunds;
• maintain accounting records.
Legal basis: performance of a contract and compliance with legal obligations.
6.3 Operating, securing and improving the Services
We may process technical and usage information to:
• operate the website and applications;
• fix errors;
• diagnose crashes;
• prevent abuse;
• maintain security;
• measure performance;
• understand service usage;
• improve navigation, content and functionality;
• develop new features.
Legal basis: legitimate interests in operating, protecting and improving the Services, or consent where required.
6.4 Personalising the listening experience
We may use listening history, favourites, searches and category interactions to:
• resume playback;
• recommend stories;
• organise content;
• tailor collections;
• improve relevance.
Legal basis: performance of a contract, legitimate interests or consent, depending on the activity and applicable law.
6.5 Marketing and newsletters
We may process contact and engagement information to:
• send newsletters;
• announce new releases;
• communicate offers;
• promote collections;
• measure campaign performance;
• maintain suppression lists.
Legal basis: consent. Where permitted by applicable law, we may send marketing concerning similar Valeniar Originals services to existing customers, subject to a clear right to opt out.
You may withdraw marketing consent at any time by using the unsubscribe option or contacting us.
6.6 Analytics
Where consent is required, we may use analytics only after you have agreed to the relevant cookies or technologies.
Analytics may help us understand:
• visitor numbers;
• traffic sources;
• popular pages and stories;
• device categories;
• campaign effectiveness;
• app stability;
• playback behaviour;
• conversion paths.
Legal basis: consent where required, and legitimate interests for strictly necessary operational measurements where permitted.
6.7 Advertising and conversion measurement
Where enabled and permitted, we may use advertising technologies to:
• measure advertisements;
• attribute subscriptions or visits;
• create advertising audiences;
• limit repeated advertising;
• understand campaign performance;
• show more relevant promotions.
Legal basis: consent.
6.8 Legal compliance and protection
We may process information to:
• comply with tax, accounting and consumer-protection obligations;
• respond to lawful authorities;
• establish or defend legal claims;
• investigate fraud or misuse;
• enforce our terms;
• protect users, the public and our Services.
Legal basis: legal obligation and legitimate interests.
7. Cookies and similar technologies
The website and applications may use cookies, pixels, tags, SDKs, local storage, device identifiers and similar technologies.
7.1 Necessary technologies
These may be used for:
• security;
• authentication;
• account sessions;
• payment flow;
• language or privacy preferences;
• load balancing;
• fraud prevention;
• essential website operation.
These technologies may operate without consent where permitted because they are required to provide a service requested by the user.
7.2 Functional technologies
These may remember:
• language;
• playback settings;
• account preferences;
• display choices;
• saved sessions.
7.3 Analytics technologies
These may measure:
• visits;
• page views;
• application events;
• listening behaviour;
• traffic sources;
• technical performance;
• errors;
• campaign effectiveness.
7.4 Advertising technologies
With consent, these may be used for:
• advertising attribution;
• audience measurement;
• remarketing;
• cross-site or cross-app advertising;
• conversion tracking.
7.5 Cookie consent
Where legally required, non-essential analytics and advertising technologies will be restricted until consent is provided.
Users should be offered meaningful options to:
• accept all;
• reject non-essential technologies;
• manage preferences;
• withdraw or change consent later.
More information about the technologies we use, their providers, purposes and retention periods is available in our Cookie Policy at valeniaroriginals.com/cookie-policy and through our cookie-preference panel.
8. Analytics, advertising and tracking providers
Depending on configuration and consent, Valeniar Originals may use:
Google Analytics and Google Tag Manager
These services may process:
• page and screen views;
• events;
• session information;
• device and browser information;
• approximate location;
• campaign source;
• cookie and device identifiers.
Google Tag Manager may be used to control and deploy approved tags.
Meta Pixel and Meta technologies
These may process information about visits, advertising interactions and conversions for measurement, attribution and audience creation.
TikTok Pixel and TikTok technologies
These may process website events, campaign interactions and conversion information for advertising measurement and attribution.
Squarespace Analytics
Squarespace may provide traffic and website-performance analytics.
Firebase
Depending on the enabled modules, Firebase may support:
• authentication;
• analytics;
• application infrastructure;
• push notifications;
• crash reporting;
• performance monitoring;
• remote configuration;
• application messaging.
Social-media tracking
Where links, embeds, pixels, share buttons or social-media widgets are used, platforms including Meta, TikTok, YouTube, Reddit and X may receive information about interactions.
A simple external link generally operates differently from an embedded player, advertising pixel or tracking widget. The active configuration should therefore be reflected in the cookie banner and cookie inventory.
Apple App Tracking Transparency
On Apple devices, where Valeniar Originals or its advertising partners engage in tracking as defined by Apple, the application will request permission through Apple's App Tracking Transparency framework before tracking takes place. If permission is not granted, we will not access the device's advertising identifier or use information collected through the application for tracking across applications or websites owned by other companies.
9. Service providers and recipients
We may share personal data with service providers only where reasonably necessary for the purposes described in this Privacy Policy.
Providers may include:
Website and application infrastructure
• Squarespace, for website hosting and website functionality;
• Audiorista, operated by Pubfront ApS, for application creation, content management, user features and app distribution;
• Firebase / Google, for application infrastructure, authentication, analytics, messaging, crash reporting or related functions;
• Mux, for media processing, hosting, delivery or playback analytics;
• content-delivery and cloud-infrastructure providers.
Authentication
• Google Sign-In;
• Sign in with Apple;
• email-login providers.
Payments and subscriptions
• Stripe;
• RevenueCat, for subscription management, paywalls, purchase verification and access entitlements;
• Apple App Store;
• Google Play;
• other checkout providers shown to you.
Email and communications
• Google Workspace, for business email administration and customer-support communications;
• Mailgun, for transactional emails, authentication messages, password resets and other service-related email delivery;
• push-notification providers;
• customer-support providers;
• newsletter-delivery providers.
Analytics and advertising
• Google Analytics;
• Google Tag Manager;
• Meta;
• TikTok;
• Squarespace Analytics;
• Firebase Analytics;
• app-store analytics;
• campaign-measurement providers.
Automation and integrations
• Zapier, for automating approved workflows and transferring information between connected services where required for account administration, customer support, email delivery, subscriptions or other operational processes;
• webhook providers;
• operational integrations selected by Valeniar Originals.
Professional and legal recipients
We may disclose information to:
• accountants;
• auditors;
• lawyers;
• insurers;
• financial institutions;
• tax authorities;
• regulators;
• courts;
• law-enforcement authorities where legally required.
Business transfers
Personal data may be disclosed as part of:
• a merger;
• acquisition;
• restructuring;
• financing;
• sale of assets;
• insolvency;
• transfer of the Valeniar Originals business.
Any recipient would be required to handle personal data consistently with applicable law.
10. International transfers
Some service providers may process or access personal data outside Estonia, the European Economic Area, Switzerland or the United Kingdom.
Where required, we rely on safeguards such as:
• an adequacy decision;
• Standard Contractual Clauses approved by the European Commission;
• contractual data-protection terms;
• supplementary security measures;
• another lawful transfer mechanism.
You may contact us to request additional information about applicable transfer safeguards.
11. Data retention
We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy, including legal, accounting, security and dispute-resolution requirements.
We apply the following retention periods:
Account information
Retained while the account remains active and for up to 24 months after account closure, unless longer retention is required by law, necessary to resolve disputes, or required for fraud prevention and security.
Listening history, favourites and progress
Retained while the account is active.
Following account deletion, this information will generally be deleted or anonymised within 90 days, subject to backups, fraud prevention and legal obligations.
Subscription and transaction records
Retained for the duration of the subscription and generally for up to 7 years after the relevant financial year, where required for accounting, taxation, audits or legal claims.
Support communications
Generally retained for up to 3 years after the support matter is closed.
Records connected to disputes, payment issues, safety or legal claims may be retained longer.
Marketing information
Retained until consent is withdrawn or the information is no longer required.
A minimal suppression record may be retained to ensure that an unsubscribed address is not added back to marketing lists unintentionally.
Consent records
Generally retained for the duration of the relevant processing and up to 3 years afterward, where necessary to demonstrate compliance.
Analytics information
Retained according to the settings configured with each analytics provider, normally using the shortest practical period consistent with genuine business needs.
Where configurable, identifiable or pseudonymous analytics data is retained for up to 14 months.
Advertising identifiers
Retained according to the advertising platform’s configured settings and only while valid consent remains in place.
Security and technical logs
Normally retained for between 30 days and 12 months, depending on their purpose.
Logs required for fraud, abuse or legal investigations may be retained longer.
Backups
Deleted data may remain in encrypted or access-restricted backups for up to 90 days before being overwritten, unless technical or legal requirements justify a longer period.
Legal claims
Relevant information may be retained until the applicable limitation period has expired and related proceedings have ended.
We may anonymise information instead of deleting it. Properly anonymised information may be retained because it no longer identifies an individual.
12. Account deletion
Users may request account deletion:
• through the account-deletion function available within the mobile application;
• through the account-deletion page at valeniaroriginals.com/delete-account; or
• by emailing support@valeniaroriginals.com.
The request should be sent from the email address associated with the account whenever possible.
We may need to verify identity before completing the request.
Deleting a Valeniar Originals account may not automatically cancel an Apple App Store or Google Play subscription. Users may need to cancel recurring subscriptions separately through the relevant app-store account.
Following deletion, we may retain limited information where required for:
• tax and accounting;
• payment records;
• fraud prevention;
• legal claims;
• security;
• regulatory compliance;
• enforcing an exclusion or age restriction.
13. Marketing communications
We send marketing emails and newsletters only where we have an appropriate legal basis.
Marketing messages may include:
• new releases;
• featured romance audiobooks;
• collection announcements;
• subscription offers;
• product news;
• launch information;
• surveys;
• promotional campaigns.
You may unsubscribe at any time by:
• selecting the unsubscribe option in the message;
• changing available account preferences;
• contacting support@valeniaroriginals.com.
Unsubscribing from marketing does not prevent necessary service messages, including:
• account notices;
• purchase receipts;
• subscription updates;
• security alerts;
• privacy or terms updates;
• support responses.
14. Push notifications
With permission, the mobile applications may send push notifications concerning:
• new releases;
• listening reminders;
• subscription information;
• saved or followed content;
• offers;
• service announcements.
Push notifications may require a device token to be shared with a notification provider.
You may disable push notifications through your device settings or application preferences.
Disabling push notifications does not necessarily disable email marketing.
15. App permissions
The application may request device permissions where required for specific features.
Depending on implementation, these may include:
• notifications;
• media or audio controls;
• network access;
• storage or download access;
• device identifiers;
• other permissions clearly displayed before access.
We will not intentionally request access unrelated to a genuine application function.
You may manage permissions through your device settings, although disabling a permission may affect the relevant feature.
16. Automated processing and recommendations
Valeniar Originals may use automated systems to:
• recommend content;
• order collections;
• continue playback;
• detect technical problems;
• identify suspected fraud or abuse;
• personalise marketing where consent has been provided.
We do not currently intend to make decisions based solely on automated processing that produce legal or similarly significant effects on users.
If that changes, we will provide appropriate information and rights required by law.
17. Your data-protection rights
Depending on your location and applicable law, you may have the right to:
• obtain confirmation that we process your personal data;
• access your personal data;
• correct inaccurate or incomplete information;
• request deletion;
• restrict processing;
• object to processing based on legitimate interests;
• object to direct marketing;
• withdraw consent;
• receive certain information in a portable format;
• request transfer to another controller where technically feasible;
• complain to a supervisory authority;
• receive information about international transfer safeguards;
• request human review where applicable automated decisions have significant effects.
Withdrawing consent does not affect processing lawfully carried out before withdrawal.
Some rights are subject to legal conditions and exceptions.
To exercise a right, contact:
Use the subject:
Privacy Request – Valeniar Originals
We may ask for reasonable verification to protect the account and personal data from unauthorised access.
18. Complaints
You may contact us first so that we can try to resolve your concern.
You also have the right to lodge a complaint with the Estonian supervisory authority:
Estonian Data Protection Inspectorate
Andmekaitse Inspektsioon
Tatari 39
10134 Tallinn
Estonia
You may also contact the competent supervisory authority in the EEA country where you live, work or believe an infringement occurred.
19. Security
We use reasonable technical and organisational measures designed to protect personal data against:
• unauthorised access;
• accidental loss;
• alteration;
• improper disclosure;
• misuse;
• destruction.
Measures may include:
• encrypted transmission;
• access controls;
• authentication;
• role-based permissions;
• logging;
• backups;
• provider security reviews;
• restricted administrative access;
• software updates;
• contractual confidentiality and data-processing obligations.
No online system can guarantee absolute security.
You are responsible for maintaining the confidentiality of your login information and for notifying us if you suspect unauthorised account access.
20. Data breaches
Where a personal-data breach occurs, we will assess its nature, scope and likely risk.
Where required by law, we will:
• notify the relevant supervisory authority;
• notify affected individuals;
• document the incident;
• take reasonable steps to limit harm;
• work with relevant service providers.
21. Third-party links and embedded content
The Services may contain:
• links to social profiles;
• embedded videos;
• app-store links;
• share buttons;
• external websites;
• embedded media;
• third-party checkout pages.
These third parties may collect information when their content loads or when you interact with it.
Their processing is governed by their own privacy notices.
We are not responsible for third-party privacy practices that we do not control.
22. Do Not Track and privacy signals
Some browsers or devices send Do Not Track or similar signals.
Because there is not always a uniform technical standard for such signals, the Services may not respond to every signal automatically.
Where applicable law requires recognition of a supported opt-out preference signal, we will take reasonable steps to honour it.
Users may also use our cookie-preference controls to reject non-essential tracking.
23. United States privacy disclosures
Residents of certain US states may have additional rights under applicable state privacy laws, including, where applicable, the California Consumer Privacy Act as amended by the California Privacy Rights Act. These rights apply only where the relevant law and statutory thresholds apply to Optivex OÜ.
These may include rights to:
• know what categories of personal information are collected;
• access personal information;
• correct information;
• request deletion;
• obtain portable data;
• opt out of targeted advertising;
• opt out of certain sharing or sale;
• limit certain uses of sensitive personal information;
• appeal a denied request;
• receive equal service without unlawful discrimination.
Valeniar Originals does not intend to sell personal information for money.
Some advertising or analytics disclosures may be considered “sharing,” “targeted advertising” or a “sale” under particular state laws even where no money is exchanged. Where required, suitable consent or opt-out controls will be provided.
Requests may be submitted to:
24. European and UK users
For users in the EEA, United Kingdom or Switzerland:
• Optivex OÜ is generally the controller;
• providers may act as processors, independent controllers or both, depending on the service;
• legal bases are described in Section 6;
• international transfers are described in Section 10;
• rights are described in Section 17.
You may request additional information about relevant processor arrangements and international safeguards.
25. Changes to this Privacy Policy
We may update this Privacy Policy to reflect:
• new features;
• new service providers;
• changes in processing;
• changes in law;
• security improvements;
• business changes.
The updated version will be posted with a revised “Last updated” date.
Where changes materially affect your rights or how personal data is used, we may provide additional notice through:
• the website;
• the application;
• email;
• an account notification;
• a consent request.
26. Contact us
Questions, concerns and privacy requests may be sent to:
Optivex OÜ, trading as Valeniar Originals
Registry code: 17308541
Harju maakond, Haabersti linnaosa
Tiskrevälja tn 59-12
13516 Tallinn
Estonia