Privacy Policy

Solos Music (“we”, “us”) is the data controller for your personal information processed through the Service. Reach us at [email protected] for any privacy question or to exercise your rights.

• Account data - your email, display name, hashed password (or OAuth provider ID for social sign-in), profile picture if you upload one.
• Generation data - the prompts, lyrics, style tags, and reference audio you submit; the songs the model returns; the version history of your studio sessions.
• Voice samples - if you opt into voice persona cloning, the audio sample you record or upload and the resulting voice persona ID.
• Billing data- we don't store your card. Stripe handles checkout and only sends us a customer ID, the subscription status, and the last four digits of the card on file.
• Usage data - request timestamps, which generations you ran, how many credits you used. Used for billing reconciliation and abuse prevention.
• Device data - IP address, browser user-agent, and basic session telemetry. Kept for at most 90 days unless tied to a security investigation.

• Run the Service - generate songs, keep your library, send notifications you opted into.
• Bill you correctly - reconcile credits, process subscription payments, refund failed generations.
• Keep the platform safe - detect abuse, prevent fraud (e.g. multi-account exploitation of the free tier), respond to security incidents.
• Improve the product- aggregate, de-identified usage patterns help us prioritize what to build next. We don't train AI models on your generations or voice samples.

We share data only with vendors strictly required to run the Service, and only the minimum each vendor needs to do its job. Current key processors:

• Suno and similar AI music providers - the prompt, lyrics, and reference audio you submit, so they can render the requested generation.
• Stripe - billing email, country, and transaction amount for payment processing.
• Cloud storage and hosting - song files, voice samples, session snapshots. Stored in encrypted buckets with access limited to our service accounts.
• Email infrastructure - your address, so we can send the verification email and the notifications you opted into.

We don't sell your personal data, period. We don't share it with advertising networks. If we're ever required to disclose data by lawful process we'll notify you unless legally prohibited.

• Account data and generations - kept while your account is active. Deleted within 30 days of account deletion (90 days for backup tapes).
• Voice samples and personas - deleted on request from the Voices page or on full account deletion. Note: the upstream voice provider (Suno) may retain its own internal voice ID even after we delete the entry on our side; we cannot force that deletion.
• Billing records - kept for 7 years to satisfy tax and accounting requirements.
• Logs and security telemetry - 90 days, unless attached to an open investigation.

Depending on where you live, you may have the right to:

• Access a copy of the personal data we hold about you.
• Correct inaccurate information.
• Delete your account and associated personal data (with the retention exceptions above).
• Restrict or object to certain processing, including withdrawing consent for marketing emails.
• Receive a portable export of your generations and account data.
• Lodge a complaint with your local data protection authority.

Email [email protected] to exercise any of these. We'll respond within 30 days.

We use a small number of strictly necessary cookies and localStorage entries to keep you signed in, remember your theme and language, and keep your audio queue persistent across tabs. We don't use third-party tracking cookies or fingerprinting. There's no consent banner because there's nothing to consent to beyond what's needed to run the app.

Solos Music operates globally. Your data may be processed in countries other than where you live. Where required by law (e.g. GDPR), we rely on Standard Contractual Clauses or equivalent safeguards with our processors.

Solos Music isn't directed at children under 13 (or the higher minimum age of digital consent in your jurisdiction). If you believe a child has registered an account, contact us and we'll delete it.

We'll update this page when our practices change. Material changes are announced via email or in-app at least 14 days before they take effect.