Privacy Policy

1. Information We Collect

We collect the following types of information:

• Account information: Email address, display name, and authentication provider (Google or email/password) when you sign up.
• Usage data: Generated concepts, songs, albums, art prompts, and render jobs associated with your account.
• Payment information: Processed securely by Stripe. We do not store credit card numbers.
• Technical data: Browser type, IP address, and basic analytics to improve the Service.

2. How We Use Your Information

• To provide, maintain, and improve the Service.
• To process payments and manage your subscription.
• To communicate with you about your account, updates, and support requests.
• To enforce our Terms of Service and prevent misuse.

3. Chrome Extension

The SongSmith Chrome extension interacts with Suno.com on your behalf. The extension communicates only with the SongSmith webapp and Suno.com. It does not collect browsing history, inject content into other websites, or transmit data to third parties. The extension requires permissions only for suno.com tabs and to communicate with the SongSmith webapp.

4. Data Storage & Security

Your data is stored in Google Cloud Firestore with Firebase Authentication. Media files (audio, images, video) are stored in Cloudflare R2. We use industry-standard security practices including encrypted connections (HTTPS/TLS), Firebase security rules, and server-side authentication for all API routes.

5. Third-Party Services

We use the following third-party services:

• Firebase — Authentication and database
• Stripe — Payment processing
• Cloudflare R2 — File storage
• OpenRouter — AI model access (concepts, lyrics, descriptions)
• Suno — Music generation (via your own account)

Each service has its own privacy policy. We encourage you to review them.

6. Data Retention

Your content is retained for the duration specified by your subscription tier (7 days for Free, 30 days for Hobby/Pro, 90 days for Studio). Account data is retained until you request deletion. You may request deletion of your account and all associated data at any time by contacting us.

7. Your Rights

Depending on your jurisdiction, you may have the right to: access your personal data, request correction or deletion, object to processing, request data portability, and withdraw consent. To exercise these rights, contact us at the address below.

8. Cookies

We use essential cookies for authentication (Firebase session). We do not use third-party advertising or tracking cookies.

9. Changes to This Policy

We may update this policy from time to time. We will notify registered users of material changes via email. Continued use of the Service after changes constitutes acceptance.

10. Contact

For privacy-related questions or requests, please contact us.