Security and data

What data Live Ambience keeps, where it lives and how we protect it, described exactly as it works today.

Where your data lives

The website, the database, the files you upload and the live audio relay all run on Cloudflare (Workers, Workers KV and Durable Objects). Cloudflare stores and replicates the data across its global network; we don't pin it to a specific country or region. We don't use any other servers to store customer data.

What we store

• Your account: the administrator's name, email and company, your plan, and a record of what you agreed to when you signed up (text, version, date, IP address and browser).
• Stores and screens: name, city (for time and weather), username, last connection and the audio outputs the player reports.
• Your content: music, images, videos, menus, web pages and message text. The voices generated from that text are kept for 30 days.
• Logs: sign-ins and security changes (date, email and IP address; the latest 300 are kept) and the payments Paddle reports, with their receipts.
• Email: messages you send to our inboxes, plus a copy of the automatic emails the system sends, without codes or passwords, which is deleted automatically after 90 days.
• Visits: public pages are counted per day, without our own cookies or personal data. Cloudflare also keeps technical server logs (requests and errors) for a few days.

Passwords and access

• Passwords (yours and each screen's) are stored with PBKDF2-SHA256, 100,000 iterations and a unique salt for each one: nobody can read them, not even us.
• Signing in to My account takes your password plus a code sent by email that expires after 10 minutes.
• Sessions last 12 hours and live in a protected cookie (HttpOnly, Secure and SameSite=Strict). You can be signed in on up to 3 devices; signing in on a fourth closes the oldest session.
• After several failed attempts, sign-in is blocked for a few minutes.
• Each screen gets its own access key, and the server only keeps a fingerprint (hash) of it. From My account you can change a screen's password or invalidate a store's USB stick.
• The Live Ambience team signs in to the internal panel with a password and an email code.

Encrypted connections

The whole site runs over HTTPS only, with HSTS (browsers refuse an unencrypted version) and a content policy that blocks scripts from other sites. Live audio is encrypted in transit too, and only your account's players can listen to it, through a signed address that expires.

Payments

Payments are handled by Paddle (Paddle.com Market Ltd), our merchant of record: Paddle charges you, issues the invoice and takes care of taxes. Card details are entered in Paddle's checkout and never touch our servers. We only receive the subscription status and the receipts.

In each store

• The player keeps the music, images, videos and menus assigned to it on the store's computer, inside the browser, so it can keep running offline, along with its access key. It doesn't store your password.
• The USB stick file contains that store's access key. If you lose a stick, invalidate it from My account; screens that are already connected keep working.
• The Central doesn't record anything: it sends the live audio to the relay, which passes it on to your stores without storing it.

Music

Live Ambience does not sell, provide or license music. Each business uses its own music tracks or tracks licensed for commercial use, and is responsible for that license. See the Terms and conditions for details.

Service providers we use

• Cloudflare: website, database, files, live audio relay, incoming email and voice generation (Workers AI).
• ElevenLabs, through Cloudflare Workers AI: turns message text into speech. It only receives that text.
• Paddle: payments, invoicing and taxes.
• Resend: sending email (sign-in codes, welcome emails and alerts).
• Open-Meteo: weather for each city. It only receives the city name or its coordinates.
• Google: ad measurement (Google Ads), on public pages only; never in My account or on the players.

We don't sell data or use it for third-party advertising.

Getting a copy or deleting your data

From My account you can delete stores, tracks, images, videos, menus and messages at any time. To get a copy of your data or delete your whole account, email us at info@liveambience.com and we'll take care of it. When an account is deleted, we erase its data except anything the law requires us to keep (such as payment receipts, which Paddle also keeps).

Certifications

Live Ambience doesn't currently hold security certifications of its own (such as ISO 27001 or SOC 2). If your company needs a security questionnaire filled in, get in touch.

Found a problem?

If you spot something that looks like a security issue, email us at info@liveambience.com and we'll look into it.

Last updated: October 26, 2026. See also: Privacy policy · Terms and conditions