Privacy Policy

1. Information we collect

• Account data: verified Google email, provider subject, display name, profile image, locale, timezone, and session records.
• Creation data: prompts, lyrics, styles, exclusions, settings, generated output, project metadata, and generation receipts.
• Uploaded audio: file, filename, type, size, ownership confirmation, and a private storage identifier.
• Preference data: likes, dislikes, associated style tags, and an inferred taste profile.
• Transaction data: plan, point ledger, Stripe customer or subscription identifiers, payment status, and billing events. We do not store complete card numbers.
• Technical data: IP address, device and browser details, logs, request timing, security signals, cookies, and approximate location inferred from network information.

2. How we use information

We use information to authenticate accounts, provide generation and storage, process purchases, calculate point balances, continue pending actions after sign-in, personalize future generations, prevent abuse, secure the service, diagnose failures, comply with law, respond to rights requests, and improve reliability. We do not sell personal information for money. We do not use private uploaded audio for advertising.

3. Service providers and international processing

We disclose the minimum necessary data to providers that support Google identity, Stripe payments, OpenAI language intelligence, audio generation, Cloudflare delivery and storage, monitoring, support, and legal compliance. Data may be processed in the United States and other countries where these providers operate. Provider processing is governed by contracts and their own policies.

4. Retention

We retain account and creation data while your account is active and as needed to provide the service. Session records expire according to their configured term. Uploads and generated audio remain until deleted, account closure, or a legal/safety hold. Payment and consent records may be retained for tax, accounting, fraud, and legal limitation periods. Backups and security logs expire on controlled schedules.

5. Your choices and rights

Depending on your location, you may request access, correction, deletion, portability, restriction, or objection; withdraw consent where processing depends on consent; and appeal a denied request. You may sign out, stop submitting feedback, keep tracks private, remove eligible content, and manage billing through the customer portal. We verify requests to protect the account. Contact privacy@g-music.us.

6. Security and children

We use encrypted transport, hashed session tokens, least-privilege secrets, private object storage, server-side authorization, signed webhooks, and audit records. No system is perfectly secure. G‑Music is not directed to children under 13, and we do not knowingly collect their personal information.

7. US state and international notices

Residents of jurisdictions with specific privacy rights may exercise them without discrimination. We do not knowingly “sell” or “share” personal information for cross-context behavioral advertising. Where required, our legal bases include contract performance, legitimate interests in service security and improvement, consent, and compliance with legal obligations. You may complain to your local data protection authority.

8. Changes and contact

We will post revisions with a new effective date and provide additional notice for material changes. Genesis Evo Technology LLC is the controller for this service. Write to the address above or email privacy@g-music.us.