Music Genie Privacy Policy
Last updated: February 23, 2026
1. Introduction
Music Genie ("we," "our," or "us") respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you use our AI music generation platform.
2. Information We Collect
Account Information: Email address, name, and password when you create an account.
Payment Information: Processed securely through Stripe. We do not store your credit card details.
Content: Videos you upload for music generation (processed and deleted within 24 hours).
Usage Data: How you interact with our service, including features used and generation history.
Device Information: Browser type, IP address, and device type for security and analytics.
3. How We Use Your Information
- To provide and improve our AI music generation service
- To process payments and manage your subscription
- To send important service updates and notifications
- To respond to your support requests
- To analyze usage patterns and improve our platform
- To detect and prevent fraud or abuse
4. Data Storage and Security
Your data is stored on secure servers with encryption at rest and in transit. Uploaded videos are processed in memory and deleted within 24 hours. Generated music is stored until you delete it or close your account.
4.1 Generation Record Retention
For each music generation, we retain the following records for dispute support and service improvement purposes:
Generation Metadata: Timestamp, generation ID, user account ID, and selected parameters (mood, tempo, style). Retained for the lifetime of your account plus 2 years.
Audio Fingerprint: A technical hash of the generated audio for copyright verification. Retained for 7 years to support dispute resolution.
Generated Audio Files: Stored until you delete them or close your account. You can delete individual tracks at any time from your library.
Source Video Analysis: Extracted features (timing, pacing, emotion scores) used for generation. Retained for 90 days, then automatically deleted. Original video files are deleted within 24 hours.
Why We Retain Generation Records
- To provide evidence of algorithmic origin if you receive a copyright claim
- To support dispute resolution with platforms (YouTube, TikTok, Twitch, etc.)
- To improve our AI models and service quality
- To comply with legal obligations
You can request deletion of your generation records by contacting [email protected]. Note that deleting generation records may limit our ability to support copyright dispute resolution for those tracks.
5. Data Sharing
We do not sell your personal data. We share data only with trusted service providers who are contractually bound by data processing agreements:
Stripe, Inc. - Payment processing (PCI-DSS compliant). Stripe processes payment data under their own privacy policy.
Amazon Web Services (AWS) - Cloud hosting and data storage. Data is encrypted at rest and in transit.
PostHog, Inc. - Product analytics. You can opt-out via our cookie settings or by contacting us.
SendGrid (Twilio) - Transactional email delivery for account notifications.
Cloudflare, Inc. - CDN and security services (DDoS protection, SSL).
Each provider processes data only as instructed by Music Genie and is bound by data processing agreements. We may also share data with law enforcement when legally required.
5.1 International Data Transfers
When we transfer personal data outside the European Economic Area (EEA), UK, or Switzerland, we ensure appropriate safeguards through:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- Data processing agreements with all service providers
- Additional technical and organizational security measures
You may request a copy of our Standard Contractual Clauses by contacting [email protected].
6. Your Rights
You have the right to:
- Access your personal data
- Correct inaccurate data
- Delete your account and data
- Export your data
- Opt out of marketing communications
7. Children's Privacy (COPPA)
Music Genie is not intended for users under 13 years of age (or 16 in the European Economic Area). We do not knowingly collect personal information from children under these ages.
Parental Rights
Parents or guardians of children under 13 have the right to:
- Request access to personal information collected from their child
- Request deletion of their child's personal information
- Refuse further collection from their child
- Receive information about our data collection practices
If you believe we have inadvertently collected information from a child under the applicable age, contact [email protected] immediately. We will verify the request and delete such information within 48 hours.
8. Legal Basis for Processing (GDPR)
For users in the European Economic Area, we process personal data under the following legal bases:
- Contract Performance: Account creation, service delivery, payment processing
- Consent: Marketing emails, analytics tracking (withdrawable at any time)
- Legitimate Interest: Fraud prevention, service improvement, security
- Legal Obligation: Tax compliance, law enforcement cooperation
To withdraw consent or exercise your GDPR rights, contact [email protected].
9. Data Breach Notification
In the event of a data breach affecting your personal information, we will:
- Notify affected users within 72 hours via email
- Provide details of the breach and data involved
- Outline remediation steps being taken
- Report to relevant supervisory authorities as required by GDPR
10. AI and Automated Processing
Music generation uses proprietary AI algorithms to analyze your video content. This processing:
- Analyzes visual elements, pacing, and emotional tone
- Does NOT store or use your videos for AI model training
- Generates unique music based on algorithmic composition
- Does not involve human review unless explicitly requested
You have the right to request human review of AI-generated outputs by contacting [email protected].
11. Cookies
We use essential cookies to keep you logged in and remember your preferences. We use analytics cookies (PostHog) to understand how our platform is used. You can disable cookies in your browser settings.
Do Not Track Signals: Some browsers transmit "Do Not Track" (DNT) signals. We currently do not respond to DNT signals. You can opt out of analytics tracking via our cookie consent banner.
12. California Privacy Rights (CCPA/CPRA)
California residents have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):
- Right to Know: Request what personal information we collect, use, and disclose
- Right to Delete: Request deletion of your personal information
- Right to Opt-Out: Opt-out of the sale or sharing of personal information
- Right to Correct: Request correction of inaccurate personal information
- Right to Limit Use of Sensitive Personal Information: Direct us to limit the use of sensitive personal information to purposes necessary to perform services
- Right to Opt-Out of Automated Decision-Making: Opt-out of profiling in furtherance of decisions that produce legal or similarly significant effects
- Non-Discrimination: We will not discriminate against you for exercising your privacy rights
We do not sell your personal information. To exercise your California privacy rights, contact [email protected].
Categories of Personal Information Collected
- Identifiers (email, name, IP address)
- Commercial information (subscription history, payment records)
- Internet activity (page views, feature usage)
- Geolocation data (derived from IP address)
- Professional information (if provided in account profile)
We have not sold personal information in the preceding 12 months.
13. Contact Us
For privacy-related questions or requests, contact us at [email protected]
Data Protection Officer (DPO)
For GDPR-related inquiries, our Data Protection Officer can be reached at [email protected].
We will respond to all data subject requests within 30 days. Complex requests may require an additional 60 days, in which case we will inform you of the extension.
Right to Lodge a Complaint
If you are not satisfied with how we handle your personal data or your privacy request, you have the right to lodge a complaint with your local data protection supervisory authority. You can find your supervisory authority at edpb.europa.eu.