Privacy Policy

1. Information We Collect

When you use TuneArt, we may collect the following information:

• Account information: email address, display name, and profile picture (via Google sign-in)
• Usage data: pages visited, features used, and generation history, and recordings of how the site is used (see below)
• Payment information: processed securely by our payment providers Waffo, Dodo Payments and Creem. We do not store your credit card details.
• Generated content: music, lyrics, images, videos, and release materials you create using our AI tools
• What you upload to make a video: the part of a song a short video uses (the rest of the song stays on your device), the whole song when you make a whole-song video, songs you import from a link, and photos or images you add. Photos are shrunk and re-saved in your browser first, which removes camera details such as location.

2. How We Use Your Information

• To provide and maintain the TuneArt service
• To process payments and manage your account credits
• To improve our product and user experience (we do not use your content to train AI models)
• To send transactional emails (login verification, payment receipts)
• To detect and prevent abuse or unauthorized use, including an automatic check of photos before a singing photo is made (for explicit content, people under 18 and well-known people)

3. Data Storage and Security

Your data is stored securely using Supabase (hosted on AWS). We use industry-standard encryption for data in transit and at rest. Generated images and videos are stored in secure cloud storage.

4. Third-Party Services

We use the following third-party services:

• kie.ai and fal.ai — run the AI models that make images, video clips, singing photos and songs. The photos, song excerpts and prompts needed for a video are sent to them to make it; they process them under their own terms
• OpenAI — writes video plans and lyrics, and checks uploaded photos
• Suno — when you paste a Suno link, we read that public song page to import the song
• Spotify API — for music search and metadata
• PostHog — product analytics: which features are used, and recordings of how pages are used (clicks, scrolling, pages visited and errors) so we can see where the site gets in someone’s way. What you type into fields, your name and your email address are hidden in these recordings. No advertising trackers
• Supabase — for authentication and data storage
• Waffo, Dodo Payments and Creem — for payment processing (as Merchants of Record)
• Vercel — for hosting and deployment

Each service has its own privacy policy. We encourage you to review them.

5. Your Rights

You have the right to:

• Access your personal data
• Request deletion of your account and associated data
• Export your generated content
• Opt out of non-essential communications

The first three are in Settings: Export my data downloads everything on your account, and Delete account removes it. Deletion is immediate and cannot be undone.

6. Cookies

We use essential cookies for authentication and session management. We do not use third-party tracking cookies for advertising purposes.

7. Children's Privacy

TuneArt is not intended for users under the age of 13. We do not knowingly collect personal information from children.

8. Changes to This Policy

We may update this privacy policy from time to time. We will notify users of significant changes via email or an in-app notice.

9. Contact

If you have questions about this privacy policy, contact us at [email protected].