Privacy Policy

2. This website

Hosting

This website is hosted by Netlify, Inc., 512 2nd Street, Suite 200, San Francisco, CA 94107, USA. When you open a page, Netlify processes connection data including your IP address in server log files. The legal basis is Art. 6 (1) (f) GDPR, our legitimate interest in providing a secure and reliable website.

Fonts

Web fonts are served from our own domain. No font request is made to a third-party provider while you browse this site.

Local storage

We store a single value in your browser to remember that you dismissed the cookie notice. It contains no identifier, is never transmitted to us, and can be removed by clearing site data in your browser.

Contacting us

If you write to aistudio@soneth.app, we process your email address, your message and any details you choose to include in order to answer you. The legal basis is Art. 6 (1) (b) GDPR for pre-contractual requests and Art. 6 (1) (f) GDPR otherwise. We keep the correspondence for as long as it is needed to handle your request and to meet statutory retention duties.

3. Using Soneth AI Studio

The sections below describe the processing that takes place when you use the product itself. They apply once you have an account; browsing this overview page does not trigger any of it.

Account, workspace and content

We process your account data (email address, profile information, authentication factors and devices), your workspace and membership data, and the content you create or upload: prompts, lyrics, parameters, audio, reference material, covers, videos, projects, comments and metadata. The legal basis is Art. 6 (1) (b) GDPR, performance of the contract.

Supabase

Database, authentication and file storage are provided by Supabase, Inc., 970 Toa Payoh North #07-04, Singapore 318992. Production data is held in an EU region. Access is restricted by row-level policies that mirror your workspace roles, and file access uses short-lived signed URLs rather than public links.

Generation infrastructure

Music generation runs on Soneth-managed GPU infrastructure operated on Google Cloud Platform (Google Cloud EMEA Limited, Velasco, Clanwilliam Place, Dublin 2, Ireland). The data sent to a generation worker is limited to what the job needs: prompt, lyrics, parameters and any reference audio you supplied. Account identifiers are not required by the worker to render audio, and job logs are kept content-free.

Additional compute providers may be added to increase capacity or reduce cost. A new provider only carries production traffic after it has passed a documented privacy and security review, and this policy is updated before that happens.

AI providers for text and images

Assistant features (style suggestions, lyric help, metadata proposals) and cover art generation use platform-managed third-party AI providers, currently OpenAI, L.L.C. (1455 3rd Street, San Francisco, CA 94158, USA) and OpenRouter, Inc. (USA). Only the content required for the specific request is transmitted. Transfers to the USA are based on the EU standard contractual clauses.

All provider access is managed by Soneth. You do not connect your own provider accounts and you never supply provider API keys, so no provider relationship is created between you and these companies.

Training

We do not use your private content to train foundation models. Adapters and models you train yourself are trained on the datasets you provide, remain scoped to you or your workspace, and record their rights position alongside the training run.

Payments

Web payments and subscriptions are processed by Stripe (Stripe Payments Europe Ltd., The One Building, 1 Grand Canal Street Lower, Dublin 2, Ireland). Card details are handled by Stripe directly; we receive only the information needed to provide and manage your plan, credits and invoices. Purchases made through a mobile app store are processed by that store and validated against your entitlement.

Notifications

To deliver push notifications about job completion, reviews and mentions, we use Firebase Cloud Messaging (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). A device token is generated for this purpose. You can disable push notifications in the product or in your device settings at any time.

Operational telemetry

We record technical events needed to run the service: job states, errors, quotas, cost accounting, permission changes and moderation decisions. These records exist to keep the platform correct, auditable and affordable. There is no advertising tracking in Soneth AI Studio and no advertising identifiers are processed.

4. Publishing and community

Content is private by default. Making something visible to your workspace, to an unlisted link or to the public is always an explicit action. Public content, your public profile and community interactions such as follows, likes and play counts are visible to others by design.

External review links can be time-limited and password-protected. Revoking a link disables the share, its signed URLs and the associated caches. Personalised recommendations are transparent and can be switched off without losing access to any other part of the product.

5. Retention

Account and content data is kept while your account exists. Deleting content or your account starts a defined deletion lifecycle with a short restore window, after which the data is removed from primary storage and from backups on their normal rotation. Billing records are kept for the statutory retention periods under German law.

6. Your rights

You have the right to access your data, to have it corrected or deleted, to restrict processing, to data portability, and to object to processing based on legitimate interest. Where processing is based on consent, you can withdraw it at any time with effect for the future.

Data export and deletion are built into the product as self-service features. You can also contact us at aistudio@soneth.app. You additionally have the right to lodge a complaint with a supervisory authority, for example the Berlin Commissioner for Data Protection and Freedom of Information.

7. Age

Soneth AI Studio is not intended for children under 13, and we do not knowingly collect their data. Users under 18 need the consent of a parent or legal guardian, and purchases require you to be 18 or to have that consent.

8. Related documents

See also the Terms of Service and the legal notice. Soneth Music Studio is a separate product with its own privacy policy.