Privacy Policy

Byte Nimble Inc., [Registered address, set NEXT_PUBLIC_LEGAL_ADDRESS] (we, us or our) provides the AI Song Generator website and Studio (the Service) and is responsible for the personal information described in this policy. Under European data protection law, we are the controller. You can contact us about privacy at [email protected]. If we appoint a representative in the EU or the UK, their details will be listed here.

We collect information you give us, information created when you use the Service, and a limited amount of information from the companies we work with, such as payment status from our payment provider.

We use personal information only for the purposes below. For users in the EU, the EEA and the UK, each purpose is followed by its legal basis under data protection law.

When you submit a request, our servers send the inputs it needs, such as your prompt, lyrics, style text and any reference media, to our AI generation provider, Kie.ai, which runs the models and returns the results. We copy completed files to our own storage straight away. According to its documentation, the provider keeps generated files for about two weeks and request logs for about two months, and it may use its own sub-processors to run the models.

Before a request is sent, we check it automatically on our own servers to enforce our Acceptable Use Policy: text is screened for real artist names and prohibited content, uploaded images and video frames are scanned for adult content and for whether they show a person, and uploaded audio is compared with audio fingerprints of recordings removed for copyright. These checks use open-source models that run on our own infrastructure, so no third party receives your content for them. A refused request is not charged, and you can ask a person to review any automated decision by contacting us.

We do not sell your content, and we do not use your prompts, lyrics, uploads or generated tracks to train AI models. The free demos on our website work differently: what you enter there goes directly to a third-party Hugging Face Space under its own terms and Hugging Face's, not through our servers.

We share personal information only with the service providers below, which process it on our behalf under contracts that require them to protect it; with authorities where the law requires; with the public, when you choose to publish a track; and with a buyer or successor if the Service changes hands. We do not sell personal information and do not share it for cross-context behavioral advertising.

We are based in the United States, and our providers may process information in the United States, the European Union and other countries. When we transfer personal information from the EU, the EEA or the UK, we rely on adequacy decisions (such as the EU-US Data Privacy Framework for certified companies), standard contractual clauses or other approved safeguards. You can ask us for details of the safeguards that apply to a provider.

We keep personal information only as long as we need it for the purposes above, then delete or anonymize it.

Wherever you live, you can access, correct, export and delete your information, and opt out of marketing emails, using the tools below or by contacting us.

Residents of California and other US states with consumer privacy laws have the right to know what personal information we collect and how we use and disclose it, to access, correct and delete it, to receive a portable copy, and to opt out of its sale, its sharing for targeted advertising and certain profiling. We do not sell personal information, do not share it for targeted advertising, do not use it for profiling that has legal or similarly significant effects, and do not use sensitive personal information to infer characteristics about you. We have not done so in the past 12 months.

In the past 12 months we collected these categories, for the purposes in section 3, from you, your device and our service providers, and disclosed them to the service providers in section 5 for business purposes: identifiers (such as email address and IP address); customer records and commercial information (plan, purchases, credit transactions); internet activity (usage of the Service); approximate geolocation derived from IP address; audio and visual information (your content, voice recordings and photos you upload); and sensitive personal information limited to account sign-in credentials and, if you provide them, voice recordings used for a custom voice, which we use only to provide the features you request.

We treat browser signals such as Global Privacy Control as a request to opt out of optional analytics. We will not discriminate against you for using your rights. You can use an authorized agent with your written permission, and we may ask you to verify your identity. If we decline your request, you can appeal by replying to our decision; if we deny the appeal, you can contact your state attorney general. California residents can also ask, once a year, for information about disclosures for direct marketing purposes; we make none.

You also have the right to restrict or object to processing based on legitimate interests, to withdraw consent at any time without affecting earlier processing, and not to be subject to decisions based solely on automated processing that significantly affect you; you can always ask a person to review an automated moderation decision. You can complain to the data protection authority where you live or work, or in the UK to the Information Commissioner's Office.

Voice recordings and photos of people can be sensitive. We process them only to create the voice or video you asked for, never to identify anyone, and we do not use face or voice recognition. You can revoke a saved voice at any time: we then stop using it and remove it from your account. Its recordings are deleted when you delete them or your account. Our AI provider does not currently offer a way to delete a voice created on its side; it handles that data under its own retention rules, and we will not use the voice again. Photos you upload stay in your private storage, visible only to you, until you delete them or your account.

The Service is intended for adults aged 18 and over. We do not knowingly collect personal information from children under 13, or from anyone under 18. If you believe a child has given us personal information, contact us and we will delete it.

We protect information with encryption in transit, least-privilege access controls, private storage for your files with short-lived download links, audit logs for administrative actions and regular backups. No system is perfectly secure; if a breach affects your personal information, we will notify you and the authorities as the law requires.

We update this policy when our practices or providers change, and the date on this page shows the latest version. For material changes, we will tell you in advance by email or in the Service.

Byte Nimble Inc., [Registered address, set NEXT_PUBLIC_LEGAL_ADDRESS]. Email: [email protected], with 'Privacy request' in the subject line.