Privacy Policy

This Privacy Policy explains how NETINNOVATE LTD, trading as EasyMusic.AI ("EasyMusic", "we", "us", or "our"), collects, uses, shares, retains, and protects personal information in connection with the Service. We act as the controller of personal information for the processing described here, except where a separately identified provider acts as an independent controller.

This policy is written for users worldwide. Regional privacy rights apply where the relevant law covers your use of the Service.

1. Information we collect
Account and identity information: email address, account identifier, authentication details, profile information, country or region, and information you choose to provide.

Transaction information: plan, price, currency, tax status, billing country, payment status, invoice and transaction identifiers, and limited payment-method details such as card brand and last four digits. Payment providers process full card or bank credentials; we generally do not receive or store full card numbers.

Creator content: prompts, lyrics, titles, tags, uploaded audio or images, generated music and other outputs, editing history, sharing settings, and related metadata.

Voice information: voice recordings, verification phrases and results, derived voice features, voice-persona identifiers, provider request identifiers, duration, language, and security logs. Depending on how a feature is used and the law that applies, some voice information may be sensitive or biometric information.

Usage and device information: pages and features used, generation events, credit activity, dates and times, referral information, IP address, browser, device and operating-system information, cookie or similar identifiers, approximate location derived from IP, crash data, and security logs.

Communications: support requests, feedback, survey responses, and messages or attachments you send us.

2. How we use information and our legal bases
We use information to provide accounts, generate requested content, process subscriptions and credits, authenticate users, deliver support, maintain and secure the Service, prevent fraud and abuse, comply with law, enforce our Terms, analyse operational performance, improve the product experience without training on User Content, and communicate Service or marketing updates.

Where UK or EEA data-protection law applies, our legal bases include performance of a contract when we provide requested features and purchases; legitimate interests in operating, securing, supporting, and improving the Service; legal obligations relating to tax, accounting, fraud, and lawful requests; and consent where required for marketing, non-essential cookies, or sensitive voice processing. You may withdraw consent at any time, without affecting processing already carried out lawfully.

We do not use consent as the basis for processing when the Service cannot reasonably be provided without that processing and another lawful basis applies.

3. No model training on User Content
We do not use, and do not permit processors acting on our behalf to use, User Content to train or fine-tune general-purpose, foundation, or third-party generative AI models. User Content includes prompts, lyrics, uploaded audio or images, voice recordings, generated music and other outputs, and related creative files.

Providers may process User Content transiently only to return the feature or output you request, perform safety and abuse checks, troubleshoot failures, or provide support. We may analyse aggregated or de-identified operational metrics that do not contain User Content. If we ever propose to use User Content for model training, we will first provide a separate explanation and obtain your explicit opt-in consent. Refusing consent will not remove access to unrelated Service features.

4. Voice and sensitive information
We process voice information only for the purposes described at collection, such as speaker verification, creating or applying a requested voice persona, preventing impersonation and abuse, troubleshooting, and support. You must have authority to provide every recording you submit.

Where law requires affirmative or explicit consent for sensitive or biometric processing, we will request it through the relevant feature. Refusing or withdrawing that consent may prevent use of the voice feature but does not prevent use of unrelated parts of the Service. We do not authorise use of voice features for covert identification, surveillance, or non-consensual impersonation.

5. How we share information
We share information only as reasonably necessary with categories of recipients such as cloud hosting and storage providers; AI music, audio, and voice-processing providers; payment and fraud-prevention providers; authentication, email, analytics, monitoring, and customer-support providers; professional advisers; and public authorities when legally required.

Providers acting on our behalf are permitted to process information only for contracted purposes and subject to appropriate confidentiality, security, data-protection, and no-training restrictions for User Content. Stripe and some other providers may act as independent controllers for parts of their payment, fraud, or compliance processing under their own privacy notices.

We may disclose information when necessary to protect users, investigate abuse, establish or defend legal claims, comply with a lawful request, or complete a merger, financing, reorganisation, or sale subject to appropriate safeguards. We do not disclose personal information merely because it is requested informally by a third party.

6. International transfers
We operate and use providers in multiple countries, so information may be processed outside your country of residence, including in countries with different data-protection laws. Where UK or EEA transfer rules apply, we use a recognised adequacy decision, approved contractual clauses, the UK International Data Transfer Agreement or Addendum, or another lawful safeguard, together with supplementary measures where appropriate. You may contact us for more information about applicable safeguards.

7. Retention
We retain account information while an account is active and for a reasonable period afterward to handle restoration, security, disputes, and legal obligations. Transaction and tax records are retained for the period required by applicable accounting, tax, anti-fraud, and payment rules. Creator content is retained until you delete it, close the account, or the applicable feature expires it, subject to backups and legal exceptions. Security, consent, and abuse-prevention records may be kept longer where reasonably necessary to demonstrate compliance or protect the Service.

Retention is determined by the amount, nature, and sensitivity of the information; the purpose for which it was collected; technical backup cycles; legal limitation periods; and whether the purpose can be achieved with aggregated or de-identified data. We delete or de-identify information when it is no longer reasonably needed.

8. Cookies and similar technologies
We use necessary technologies for login, security, preferences, checkout, and core functionality. Where permitted, we may use analytics or performance technologies to understand use of the Service. We request consent for non-essential technologies where required. Browser controls can block some technologies, but doing so may affect functionality.

9. Your rights
Depending on where you live, you may have rights to request access, correction, deletion, restriction, portability, or a copy of personal information; object to certain processing; withdraw consent; opt out of certain marketing; and appeal or complain about our response. These rights can be subject to lawful exceptions.

UK users may complain to the UK Information Commissioner's Office at ico.org.uk. EEA users may complain to the supervisory authority where they live or work. Users elsewhere may contact their local privacy regulator where applicable.

Submit a request to support@easymusic.ai. We may verify your identity and authority before acting. We will not discriminate against you for exercising a privacy right.

10. Children
The Service is not directed to children under 13. If the minimum age for consenting to online data processing is higher where you live, that higher age applies. Minors may use the Service only with any consent and supervision required by local law. If you believe a child provided information without proper authorisation, contact us so we can investigate and delete it where appropriate.

11. Security
We use administrative, technical, and organisational measures designed to protect information, including access controls, transport encryption, monitoring, and provider reviews where appropriate. No online service can guarantee absolute security. You are responsible for protecting your credentials and notifying us of suspected account misuse.

12. Automated processing
The Service uses automated systems to generate content, detect abuse, allocate credits, and support fraud and security decisions. We do not make a solely automated decision that produces a legal or similarly significant effect on an individual unless permitted by law and accompanied by required safeguards. Contact us if you want information about or human review of an applicable decision.

13. Changes to this policy
We may update this policy as the Service or law changes. We will post the revised version and update its date. We will provide additional notice before a material change where required. Changes do not reduce rights that have already accrued under applicable law.

14. Contact
Privacy questions and rights requests may be sent to support@easymusic.ai. Our registered business details and address appear above.