1. Introduction
This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI music generation service. Please read this policy carefully.
2. Information We Collect
2.1 Information You Provide
- Account Information: Email address, display name, password (hashed)
- Profile Information: Avatar, bio, social media links (optional)
- Payment Information: Processed by Stripe (we do not store full credit card numbers)
- Generation Content: Text prompts, lyrics, style tags, and generated audio files
2.2 Automatically Collected Information
- Usage Data: Generation history, play counts, likes, credit usage
- Device Information: Browser type, operating system, IP address
- Cookies: Session cookies, authentication tokens, preferences
- Log Data: Access times, API requests, error logs
2.3 Public Content
- Songs you make public in the gallery
- Song titles, descriptions, and metadata
- Your display name and profile information (for public songs)
3. How We Use Your Information
3.1 Service Provision
- Process your music generation requests
- Manage your account and subscription
- Store and deliver your generated content
- Track credit usage and billing
3.2 Communication
- Send service notifications (generation complete, credits low)
- Upgrade prompts when your songs become popular
- Account security alerts
- Updates to Terms of Service or Privacy Policy
- Marketing emails (with opt-out option)
3.3 Improvement & Analytics
- Analyze usage patterns to improve the service
- Monitor system performance and reliability
- Develop new features and models
- Prevent fraud and abuse
3.4 Legal Compliance
- Comply with legal obligations
- Enforce our Terms of Service
- Respond to DMCA takedown notices
- Protect our rights and safety
4. Data Retention
4.1 Tier-Based File Retention
- Free Tier: Generated audio files deleted after 7 days
- Pro Tier: Files retained for 30 days
- Creator Tier: Files retained for 30 days
4.2 Engagement-Based Protection
Songs with 10+ plays or 3+ likes are automatically preserved indefinitely, regardless of tier, to prevent viral content from being deleted.
4.3 Account Data
- Active Accounts: Retained while account is active
- Deleted Accounts: Most data deleted within 30 days, some retained for legal/billing purposes up to 7 years
- Backups: May persist in backups for up to 90 days
4.4 ComfyUI/Processing Data
Temporary files created during generation are automatically cleaned from processing servers.
5. Information Sharing
5.1 We DO NOT Sell Your Data
We do not sell, rent, or trade your personal information to third parties for their marketing purposes.
5.2 Third-Party Service Providers
- Stripe: Payment processing (see Stripe's Privacy Policy)
- PostgreSQL Hosting: Database storage
- Email Service: Transactional emails and notifications
- Analytics: Aggregated usage statistics (anonymized)
5.3 Public Gallery
When you make songs public:
- Song audio, title, description become publicly accessible
- Your display name and profile avatar are shown
- Play counts and like counts are visible
- Songs may appear in search engines
5.4 Legal Requirements
We may disclose information if required by law, subpoena, court order, or to protect rights and safety.
6. Data Security
6.1 Security Measures
- Passwords hashed with industry-standard algorithms
- HTTPS encryption for all data transmission
- Secure database with access controls
- Regular security audits and updates
- JWT tokens for authentication
6.2 Limitations
No method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
7. Your Privacy Rights
7.1 GDPR Rights (EU Users)
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate data
- Erasure: Request deletion of your data ("right to be forgotten")
- Portability: Export your data in machine-readable format
- Restriction: Limit how we process your data
- Objection: Object to processing for marketing purposes
7.2 CCPA Rights (California Users)
- Know what personal information is collected
- Know whether personal information is sold or disclosed
- Opt-out of sale of personal information (we don't sell data)
- Access your personal information
- Request deletion of personal information
- Non-discrimination for exercising privacy rights
7.3 Exercising Your Rights
To exercise these rights:
- Email: privacy@yourdomain.com
- Account Settings: "Download My Data" or "Delete Account"
- We will respond within 30 days
8. Cookies & Tracking
8.1 Essential Cookies
- Authentication: JWT tokens to maintain login sessions
- Preferences: Theme selection, language settings
8.2 Analytics Cookies
- Aggregated usage statistics
- Feature usage tracking
- Error logging
8.3 Your Choices
You can disable cookies in your browser, but this may affect service functionality. Essential cookies are required for the service to work.
9. Children's Privacy
Our service is not intended for children under 13. We do not knowingly collect information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.
Users ages 13-17 must have parental consent to use the Service.
10. International Data Transfers
Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for international transfers in compliance with applicable laws.
11. AI Training & Model Improvement
11.1 What We Use
We may use aggregated, anonymized data about generation patterns to:
- Improve prompt interpretation
- Optimize model selection
- Enhance feature recommendations
11.2 What We DON'T Use
- We do not train AI models on your generated music
- We do not share your prompts or lyrics with third parties for training
- Your content remains yours
12. Email Communications
12.1 Transactional Emails (Cannot Opt-Out)
- Generation completion notifications
- Account security alerts
- Billing and payment receipts
- Terms of Service updates
12.2 Marketing Emails (Can Opt-Out)
- New feature announcements
- Upgrade promotions
- Tips and tutorials
You can unsubscribe from marketing emails via the link in each email or in Account Settings.
12.3 Upgrade Notifications
When your free-tier song becomes popular (10+ plays), we will send a one-time notification suggesting an upgrade. This can be disabled in Settings.
13. Changes to Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via:
- Email notification
- In-app banner
- Update to "Last Updated" date
Continued use after changes constitutes acceptance of the updated policy.
14. Contact Us
For privacy-related questions or to exercise your rights:
Privacy Officer
Email: privacy@yourdomain.com
Address: [Your Business Address]
Response Time: Within 30 days