This policy explains what personal data SongAI collects, why, and the choices you have. The controller is Alperen Ciftlikci, Türkiye. Contact: aimusicgenerator.app@gmail.com.
1. Data we collect
- Account data: your email address, and the name and profile picture provided by Google if you sign in with it.
- Content: the descriptions, titles, styles and lyrics you enter, and the songs, lyrics and cover art generated for you.
- Library data: favorites, playlists, song titles and your settings (such as language).
- Credit and purchase records: credit balance and history, plan, billing country and the purchase identifiers Dodo Payments shares with us. We never see or store your card details.
- Reports you submit about content.
- Technical data: IP address, browser type and security logs collected by our hosting and authentication providers to run and protect the Service.
2. Why we use it
We do not sell your data and we do not use it for advertising.
- To provide the Service: sign you in, generate your songs, store your library (contract).
- To manage credits, purchases and subscriptions (contract, legal obligations for tax and accounting).
- To prevent abuse — for example rate limits, free-credit limits and content moderation (legitimate interest).
- To answer your support requests (contract / legitimate interest).
3. AI processing
Songs, lyrics and cover art are created by third-party AI music generation services. When you ask for a song or for AI lyrics, our servers send them only what that request needs:
- For a song: your description or your lyrics, the title, and the genre, mood, style, song language and vocal choice you picked.
- For AI lyrics: your short idea (up to 200 characters) and the genre, mood and language.
- Random technical identifiers so the service can hand the result back to us. Requests come from our servers, so the services do not receive your name, email address, payment details or IP address.
3.1 Why, who and how long
- Purpose and legal basis: we send this only to create what you ask for — that is the Service itself (performance of our contract with you). Before anything is sent, our servers check it automatically for real artist names and known copyrighted lyrics (Terms, section 6).
- Who: third-party AI music generation services — a main service and a backup that is used only when the main one is unavailable. They may process data outside your country (section 4).
- How long: the services return the finished files to us and we copy them to our own storage straight away; you never get a link to their copies, and the temporary download links they give us expire (after about two weeks for our main service). The services keep and handle what they receive under their own terms. We keep your input and results with your songs until you delete them, and everything is deleted when you delete your account (section 6).
- AI training: we do not use your descriptions, lyrics or songs to train AI models, and we do not sell them or give them to anyone for that purpose. We do not control how the AI services handle the requests they receive under their own terms.
- You decide what you enter: please do not put sensitive personal information about yourself or other people into descriptions or lyrics.
4. Who processes your data
Where your data is stored: in the United States, on Google Cloud (Firebase, region us-central1) — your account, library, credit records and generated files. If you live elsewhere, your data is transferred there; some of the services above may also process data outside your country. Where required, transfers are protected by the European Commission's Standard Contractual Clauses or equivalent safeguards.
- Google Firebase / Google Cloud (United States, region us-central1): hosting, authentication, database, file storage and serverless functions.
- Third-party AI music generation services: they process the request data described in section 3 only to create your songs, lyrics and covers. Your data may be processed outside your country.
- Dodo Payments (Dodo Payments Inc. and its group companies), our Merchant of Record and reseller: checkout, payment, invoicing, taxes and subscription management. Dodo Payments processes your payment details as an independent controller under its own privacy policy (dodopayments.com/legal/privacy-policy).
- Google, if you choose to sign in with it.
- Google Analytics (only if you accept analytics cookies): aggregated usage statistics.
5. Cookies and local storage
Strictly necessary storage keeps you signed in, remembers your language, theme and cookie choice, and completes email-link sign-in on your device. With your consent only, we use Google Analytics (via Firebase) to measure how the site is used, with IP anonymization and no advertising features. Analytics stays off until you accept in the cookie banner, and you can change your choice any time in Settings. We do not use advertising cookies.
6. How long we keep data
We keep your account data and library until you delete your account. When you delete your account we immediately and permanently delete your profile, songs, files, playlists, generation history, credit history and reports you submitted.
Lossless (WAV) files made for Studio downloads are kept while your account is on Studio and deleted 30 days after your Studio plan ends; your songs and their regular audio files stay until you delete them.
To stop repeated free-credit claims we keep a one-way hash of your email address (not the address itself) after deletion. Purchase records that tax law requires us to keep are retained by us or our payment provider for the legally required period.
7. Your rights
Depending on where you live (for example under the GDPR or Türkiye's KVKK), you can ask to access, correct, export or delete your data, object to or restrict processing, and withdraw consent. You can delete your account and data yourself in Settings, or email aimusicgenerator.app@gmail.com. You also have the right to complain to your local data protection authority.
8. Security
Your library is private to your account and protected by access rules on our servers. Credits and plans can only be changed by our servers, never by the app in your browser. Generated files are stored in our own storage, never shared through the generation services' links.
9. Children
The Service is not intended for children under 16 and we do not knowingly collect their data.
10. Changes
We will post updates here and notify you of material changes before they take effect.