1. What we process
The studio handles four kinds of personal data, and only to produce what you asked for:
- Audio — the songs and vocal recordings you upload, and the stems, conversions and renders we produce from them.
- Voice — the dataset recordings and the trained model built from them, together with the consent record described in the Voice Data & Consent Policy.
- Lyrics — lyric text you supply or that is transcribed from your audio, and the timings we compute for it.
- Images — storyboard reference art and panels generated for your project.
We also store the minimum account data needed to run the service: an email address, a display name, and a hash of your access token (never the token itself).
2. Where it is stored
Files are stored either in Cloudflare R2 object storage or, on a self-hosted installation, on that machine's disk. Database records live in the installation's database. Choosing self-hosting means the operator of that installation is the controller of the data on it.
3. Who else processes it
Paid stages send your audio to the provider for that stage — Replicate (voice model training and conversion), Modal (stem separation and lyric alignment), and DeepInfra (storyboard images). Stripe handles payment. These providers process the data only to perform that step.
4. How long we keep it
Until you delete it. There is no separate expiry: a project's files remain until you delete the project, and a voice dataset and model remain until you delete the voice profile on the voice page. Deletion removes the stored files as well as the database rows.
5. Your choices
You can export your project deliverables at any time, delete individual files, delete a voice profile, or close your account. To request account closure or ask what we hold about you, write to legal@example.invalid. Depending on where you live you may also have rights to a copy of your data, to correct it, or to object to a particular use; we will honour those requests.
6. Cookies and sessions
We use a single signed session cookie to keep you signed in, and an anti-forgery cookie on the sign-in form. We do not run advertising trackers.
7. Contact
Privacy questions and rights requests: legal@example.invalid.