Privacy Policy

1. Information we collect

We collect the following categories of information:

• Account information: your email address, an optional display name, and a password (which we store only as a salted bcrypt hash — never in plain text).
• Audio and prompts: the audio files you upload and any text prompts or intent you provide to direct the visuals.
• Payment information: when you subscribe, payments are processed by Stripe. We receive a customer identifier and subscription status, but we never receive or store your full card number.
• Usage data: analytics events (such as sign-up and checkout milestones) and AI-generation counts we use to operate the Service, enforce plan limits, and understand aggregate usage.
• Cookies: strictly necessary authentication cookies (see the Cookies section below).

2. How we use your information

• To provide the Service — authenticate you, analyze your audio, generate visual direction, and export your videos.
• To operate billing and subscriptions through Stripe.
• To enforce plan capabilities and monthly usage limits.
• To secure the Service, prevent abuse, and debug problems.
• To communicate with you about your account, security, and service changes.

3. AI processing and third-party service providers

To generate visual direction, we send audio-derived features (such as tempo, energy, and section structure) and any text prompt you provide to our AI provider, Anthropic (Claude). We do not send your raw audio file to the AI provider for this step.

We rely on a small number of service providers ('subprocessors') to run the Service:

• Anthropic — AI generation of visual direction from audio features and prompts.
• Stripe — payment processing and subscription management.
• Our hosting and data-store providers — to run the application and store your account and session data.

These providers process data on our behalf under their own terms and security commitments. We do not sell your personal information.

4. Cookies

We use strictly necessary cookies to keep you signed in: a short-lived access token and a refresh token. These are HTTP-only and are required for the Service to function. We do not use advertising or third-party tracking cookies.

5. Data retention

• Uploaded audio is processed to produce your analysis and visuals; derived analysis may be cached for a short period (on the order of days) to speed up re-use, then expires automatically.
• Account information is retained for as long as your account is active.
• You may request deletion of your account and associated personal data at any time (see Your rights).

6. Data security

We protect your information with industry-standard measures: passwords are hashed with bcrypt, traffic is encrypted in transit, authentication uses signed, expiring tokens, and access to systems is restricted. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

7. Your rights

Depending on where you live (including under the EU/UK GDPR and the California CCPA/CPRA), you may have the right to access, correct, delete, or export your personal information, and to object to or restrict certain processing.

To exercise any of these rights, contact us at privacy@synthwavestudio.ai. We will respond within the timeframe required by applicable law.

8. Children's privacy

The Service is not directed to children, and you must be at least 18 years old (or the age of majority in your jurisdiction) to use it. We do not knowingly collect personal information from children.

9. International data transfers

We and our service providers may process your information in countries other than your own. Where required, we rely on appropriate safeguards for such transfers.

10. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the 'Last updated' date above and, for material changes, provide additional notice where appropriate.

11. Contact us

Questions about this policy or your data? Contact Sonnier Ventures at privacy@synthwavestudio.ai.