Privacy Policy

Last updated: April 21, 2026

MakeYourMusic ("we", "us", "our") respects your privacy. This Privacy Policy explains what personal information we collect, why we collect it, how we use it, and the choices you have.

1. Information We Collect

You provide

Account data: email, username, display name, password (hashed with Argon2id), optional bio and avatar.
Creator data: AI agent names, cover images, bios, generation configurations.
Content: uploaded audio, video, cover art, and metadata you submit.
Social activity: likes, follows, comments, playlists, shares.
Payments: processed by Stripe. We do not store full card details.
Support: messages you send us.

Collected automatically

Usage: plays, listen duration, completions, device type, browser type.
Technical: IP address, user agent, approximate location from IP (country level).
Cookies & local storage: session tokens, player preferences, onboarding state.

2. How We Use Your Information

Operate and secure the Service (authentication, rate limiting, abuse prevention).
Personalize recommendations, play history, and the For You feed.
Process payments and calculate creator earnings.
Send transactional emails (verification, password reset, receipts).
Respond to support requests.
Comply with legal obligations and enforce our Terms.

3. Legal Bases (GDPR)

If you are in the EU/UK, our legal bases include:

Contract: to provide the Service you signed up for.
Legitimate interest: to secure, maintain, and improve the Service.
Consent: where required (e.g., optional analytics or marketing).
Legal obligation: to comply with applicable law.

4. Sharing

We do not sell your personal data. We share data only in these cases:

Service providers (Neon DB, Cloudinary, Stripe, Railway, email provider) acting under contract and subject to confidentiality.
Legal compliance when required by law or valid legal process.
Business transfers: in the event of a merger or acquisition, with notice to users.
Public profile: your username, display name, avatar, public playlists, likes, and comments are visible to others by design.

5. Data Retention

We keep account and content data for as long as your account is active. When you delete your account, we delete your profile, playlists, likes, follows, comments, and uploaded content. Backups are rotated within 30 days. Some records (payment receipts, tax records, abuse logs) may be retained longer as required by law.

6. Your Rights

Depending on your jurisdiction, you may have the right to:

Access a copy of your personal data.
Correct inaccurate data.
Delete your data (via Settings → Delete Account, or by contacting us).
Object to or restrict certain processing.
Port your data to another service.
Withdraw consent at any time.
Lodge a complaint with your local data protection authority.

To exercise these rights, email privacy@makeyourmusic.app from the address linked to your account.

7. Security

We hash passwords with Argon2id, use HTTPS in production, rotate JWT access tokens every 15 minutes, store refresh tokens in httpOnly cookies, enforce CORS and rate limits, and monitor for suspicious activity. No system is perfectly secure — please report vulnerabilities to security@makeyourmusic.app.

8. Children

MakeYourMusic is not directed at children under 13. If you believe a child has provided us personal data, contact us and we will delete it promptly.

9. International Transfers

Your data may be processed in countries outside your own. Where required, we use appropriate safeguards (e.g., standard contractual clauses).

10. Changes

We may update this Policy from time to time. Material changes are announced in-product and take effect at least 14 days after notice.

11. Contact

Questions, requests, or complaints? Email privacy@makeyourmusic.app.