Privacy Policy

The controller responsible for personal data processed through MusicAny is:

This Policy applies to musicany.io and the related MusicAny accounts, applications, creative tools, support, and purchase flows (the “Service”). It does not govern a third-party website or service that publishes its own privacy notice.

Depending on the feature you use, we may process:

• Account data: name, email address, authentication identifiers, language, and account settings.
• Transaction data: plan or credit purchase, amount, currency, tax location, transaction identifier, payment status, refunds, and chargebacks. MusicAny does not receive or store complete payment-card numbers.
• AI Input: prompts, text, lyrics, URLs, model choices, generation settings, and other instructions.
• Uploaded media: images, video, music, audio, and reference-voice recordings.
• Output and projects: generated or transformed music, audio, voices, images, video, and related project history.
• Voice-processing data: reference recordings and technical voice characteristics or representations required by the selected voice feature.
• Safety and integrity data: blocked requests, available automated classifications, reports, review decisions, fraud signals, and associated account and technical metadata.
• Device and usage data: IP address, browser, operating system, pages and features used, timestamps, referral information, diagnostics, and security logs.
• Communications: support messages, refund requests, abuse reports, appeals, feedback, and legal correspondence.

We receive data from you, your browser or device, connected sign-in services, payment providers, and the service providers needed to complete a request.

To complete a generation or transformation, we send the Input, relevant media, settings, and request metadata to the model or inference provider supporting the selected feature. The applicable models and providers are described in our AI Model and Content Disclosureand, where applicable, in the product interface.

Provider handling, logging, and model-improvement practices depend on the specific provider, service configuration, and contract. Do not submit confidential, personal, or protected material unless you are authorized to do so and are comfortable with the processing described for that feature.

A voice feature may analyze characteristics of a reference recording or create a technical voice representation to generate speech. MusicAny voice-generation tools are not designed to authenticate identity. Voice characteristics may be considered biometric or sensitive data in some jurisdictions even when they are not used for identification.

Only submit your own voice or media for which you hold documented, informed permission covering AI processing and the intended use. We process voice material to perform the requested feature, operate available safety controls, investigate abuse, and comply with law. Where applicable law requires explicit consent, consent is the legal basis for the regulated processing. Withdrawing consent may prevent further use of the relevant feature.

We disclose limited information only when reasonably necessary to the following categories of recipients:

• Payment services: the processor or merchant of record identified at checkout, which may include Stripe. Waffo Pancake applies only to a transaction whose checkout identifies Waffo Pancake as merchant of record.
• Account and infrastructure providers: services such as Supabase for authentication and database functions and Cloudflare, including Cloudflare R2, for network and media infrastructure.
• Authentication providers: Google or another sign-in provider when you choose that login method.
• AI and inference providers: the model and routing providers supporting the feature you select, as described in the AI Disclosure.
• Analytics and advertising providers: tools such as Plausible and Google where configured and legally permitted.
• Professional advisers and authorities: advisers, courts, regulators, law enforcement, or other parties where necessary to comply with law, respond to a valid request, or protect legal rights.
• Corporate transactions: a buyer, investor, or successor in connection with a proposed or completed financing, merger, acquisition, restructuring, or asset transfer, subject to appropriate confidentiality and legal safeguards.

We use necessary storage technologies for authentication, security, and core functionality. We may also use analytics or advertising technologies to understand Service use and measure campaigns. These technologies may receive online identifiers, device information, referral information, and interaction events.

Browser settings can block or delete cookies, although blocking necessary technologies may prevent parts of the Service from working. Where law requires a separate choice for non-essential technologies, we apply the choice made through the available consent mechanism. You may also contact us with a privacy or advertising-choice request.

We do not sell personal information for money. Some disclosures of online identifiers to advertising or measurement providers may be treated as “sharing,” targeted advertising, or a “sale” under certain privacy laws even where no money changes hands. Where those laws apply, you may request the applicable opt-out at [email protected] with the subject “Privacy Request.” You may also communicate a preference through a legally recognized browser-based signal, although availability depends on the browser, jurisdiction, and technologies in use.

We retain each category of personal data only for as long as reasonably necessary for the purposes described in this Policy, including providing the Service, maintaining account and project history, resolving disputes, preventing fraud and abuse, satisfying accounting or tax obligations, enforcing agreements, and complying with law.

Retention depends on the type of data, account status, user deletion choices, provider behavior, backup cycles, legal requirements, and whether a dispute or investigation is active. When data is no longer required, we delete, de-identify, or securely archive it as permitted by law. You may request deletion as described below; legal and operational exceptions may apply.

MusicAny and its providers may process personal data in the United States and other countries. Those countries may have privacy laws different from those where you live. Where required, we rely on legally recognized transfer safeguards, contractual protections, adequacy decisions, or another valid transfer mechanism.

We use reasonable administrative, technical, and organizational measures designed to protect personal data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Please use a unique password, protect your login credentials, and contact us if you suspect unauthorized account activity.

Depending on your location, you may have rights to know or access personal data, correct it, delete it, restrict or object to processing, receive a portable copy, withdraw consent, and opt out of certain sales, sharing, targeted advertising, or profiling. You may also have the right to appeal a refusal or complain to a privacy regulator.

Submit a request to [email protected]with the subject “Privacy Request.” Describe the right you wish to exercise and identify the relevant account. We may request information reasonably necessary to verify identity and authority. We will not unlawfully discriminate against you for exercising a privacy right.

MusicAny is intended for adults aged 18 or older. We do not knowingly permit children to create accounts or use voice-simulation features. If you believe a child has provided personal data, contact us so we can review and take appropriate action.

We may update this Policy when the Service, law, providers, or our practices change. We will publish the revised version and update the effective date. Where required by law, we will provide additional notice before a material change takes effect.