Privacy Policy

1. Collection and purposes

We process account identifiers, profile details, uploaded media, prompts, task results, payment references and necessary security and usage logs to provide the service, maintain accounts, handle payments and prevent abuse. Firebase handles authentication; Stripe may process payments; infrastructure and AI providers receive the data needed for their tasks, potentially in other countries. We do not receive your full card details from Stripe. Use the contact channel on our website to request access, correction or deletion, subject to legal retention duties. Back up important files; account closure can end access, while limited records may be retained for legal, billing or security purposes. Non-essential tracking requires consent where applicable.

• Account: email, login identifiers, display name and avatar.
• Creation: prompts, music, images, lyrics, settings and outputs.
• Tasks: job identifiers, status, errors and credit usage.
• Transactions: order references, plan, amount, currency and payment status.
• Technical and communications: necessary access logs, device details and support messages you submit.

2. Legal bases and necessity

Where law requires a legal basis, processing relies on performing the service contract, legal duties, legitimate security and anti-abuse interests, or consent for a particular purpose. Reading this policy is not blanket consent to all processing.

Account identifiers and task inputs may be necessary for requested functions. Withholding them may prevent those functions. Optional profile data should not be required for unrelated features. New unexpected purposes require further notice and consent where legally necessary.

3. Media, voices and sharing

Obtain necessary permission before uploading another person’s voice, likeness or personal data. Avoid unnecessary sensitive information. Content you choose to publish or share may be saved or forwarded by recipients; check permissions before sharing.

4. Providers, AI processing and transfers

Authentication, hosting, storage, inference and payment providers should receive only data necessary for their tasks. Prompts, images, audio and job identifiers may reach generation providers whose retention and processing practices can differ; review relevant disclosures before use.

Servers and providers may be outside your country with different legal protections. Applicable contractual and security safeguards must be used where required. This policy does not guarantee that every provider deletes data or excludes training; additional training purposes require specific disclosure of purpose, basis and available choices.

5. Cookies and choices

Necessary cookies support sign-in and language preferences. Non-essential analytics or advertising tracking requires prior consent where legally required. Manage cookies in your browser; blocking necessary cookies may prevent sign-in.

6. Disclosures and business changes

Necessary disclosures may respond to valid legal process, accounting duties, security investigations or protection of legal rights. We review legality and scope where permitted.

Necessary records may transfer with a merger, reorganization or asset sale, subject to continuing data-protection duties. Material purpose changes require notice and other legal steps. Publicly shared content must be distinguished from private processing inputs.

7. Retention, security and rights

We retain information only as needed for services, legal duties and disputes, then delete or anonymize it; backup cleanup may take longer. We use reasonable access controls and safeguards but cannot guarantee absolute security. Applicable rights may include access, correction, deletion, portability, restriction, objection and withdrawal of consent without affecting earlier lawful processing.

8. Exercising rights and handling requests

Identify your account, requested right and affected records. We may verify identity proportionately to prevent unauthorized disclosure; do not send passwords, full payment details or unrelated identity documents.

We respond within applicable legal deadlines and explain necessary extensions. Legal retention, disputes or security needs may limit deletion; we explain limitations where permitted. You may complain to a competent data-protection authority. Refusing optional marketing does not prevent essential service notices.

9. Children, changes and contact

The service is for adults aged 18 or older. Do not submit sensitive data about children. Contact us about inappropriate collection. Material changes will be notified as required by law. Send privacy requests through the contact channel published on our website and provide only information needed to verify the request.