AI Music
PRIVACY POLICY
Last updated September 29, 2026
INTRODUCTION
This Privacy Policy explains how Comapps LLC (“we,” “us,” “our” or the “Company”) collects, uses, shares and protects personal information when you use the AI Music mobile application (the “App”), our websites (including https://musicgen.space and its subdomains), and related services (collectively, the “Services”). It also explains the rights you have in relation to your personal information and how to exercise them.
Capitalised terms not defined here have the meaning given in our Terms and Conditions of Use (the “Terms”). In particular, “Input Content” means the Source Tracks, Voice Recordings, Photographs and Prompts you provide for processing; “Output Content” means the audio tracks and videos generated for you; and “Voice Data” and “Face Data” have the meaning given in Section 4.
The App is a creative tool: it generates music from your Prompts and lets you perform material in your own voice. This Privacy Policy is not part of the Terms. If you do not agree with this Privacy Policy, please do not use the Services.
1. WHO IS RESPONSIBLE FOR YOUR DATA
1.1. Controller. Comapps LLC, 700 North Fairfax St, Ste 614, Alexandria, VA 22314, USA, is the controller of your personal information for the purposes of the EU and UK General Data Protection Regulation (“GDPR”) and the business responsible under US state privacy laws. The App may be made available through app stores or other channels by us or by our affiliates. In all cases Comapps LLC is the controller of your personal information; any affiliate involved in distributing the App acts on our behalf and under our instructions.
1.2. Privacy contact. For all privacy questions and requests: legal@comapps.co. Full contact details are in Section 16.
2. WHAT INFORMATION WE COLLECT
2.1. Information you provide to us
•Account information. Email address and password (or the identifier provided by your sign-in provider), and your confirmation that you are at least 18 years old. Some features of the App can be used without an account; in that case the information below is linked to your device rather than to an account.
•Input Content, Voice Data and Face Data. The audio tracks you upload (“Source Tracks”), the recordings of your own voice you make through the App (“Voice Recordings”), the photographs you upload (“Photographs”) and the text you enter (“Prompts”). Photographs may contain a face. How we process Voice Data and Face Data is described in Section 4.
•Questionnaire responses. If you start on our website, you may answer a short onboarding questionnaire about your preferences and how you intend to use AI Music. We use your answers to personalise the experience and to recommend a plan.
•Purchase information. When you buy a subscription or Coins, our payment providers (Section 7) collect your payment details. We receive limited information about the transaction — date, amount, currency, payment method type and the last four digits of your card — but never your full card number.
•Communications. Information you provide when you contact customer support by email or through the “Write to us” form on our website, respond to surveys or give feedback, including the content of your messages and any attachments. If you contact us to locate a subscription without access to the email you used at purchase, you may give us details such as the last four digits of the payment card, the name on the card, and the date and amount of a charge; we use these only to find the transaction in our payment records.
•Rights complaints. If you submit a copyright notice or a complaint concerning voice, name, image, likeness or performance under Section 14 of the Terms, we collect the information you include in it, such as your name, contact details, your authority to act and a description of the content.
2.2. Information we collect automatically
•Device and technical information. Device model and manufacturer, operating system and version, language, time zone, app version, browser type, IP address and approximate location derived from it (country or region), and device or advertising identifiers (such as IDFA/IDFV on iOS or Advertising ID on Android) where you have permitted their use.
•Usage information. How you use the App and websites: features used, screens viewed, generation requests and their outcome, Coins spent, session length, crashes and diagnostic logs, and the pages of our websites you visit, including how you arrived at them (referring URL, campaign).
•Cookies and similar technologies. On our websites we use cookies and pixels, and in the App software development kits (SDKs), as described in Section 6.
•Support interactions. When you contact support by email or through the website form, we keep a record of the conversation, including the date and time we received each message.
•Coin balance. Your Coin balance is stored on your device and may also be recorded in our systems. We do not guarantee that it remains available after you delete your account, uninstall the App or reset your device (see the Terms, Section 7.9).
2.3. Information from other sources
•App stores. When you purchase through the Apple App Store or Google Play, we receive transaction and subscription status information (for example, that a purchase, renewal, cancellation or refund has occurred) but not your payment details.
•Payment providers. Our payment providers send us confirmation of payments, refunds and disputes.
•Advertising and attribution partners. We may receive information about which advertisement led you to install the App or visit our website, to measure the effectiveness of our marketing.
3. HOW AND WHY WE USE YOUR INFORMATION
The table below sets out the purposes for which we process personal information, the categories of information involved, and the legal basis we rely on where the GDPR or UK GDPR applies.
Purpose | Information used | Legal basis (GDPR/UK GDPR) |
Generate the Output Content you request | Input Content, including Voice Data and Face Data, and Prompts | Your explicit consent to the processing of Voice Data and Face Data (Art. 6(1)(a) and, where applicable, Art. 9(2)(a)); performance of our contract with you |
Create and manage your account; authenticate you | Account information, device identifiers | Performance of a contract |
Process payments, subscriptions and Coins; send receipts and renewal notices; locate your subscription when you ask us to | Purchase information, account information, details you provide to identify a transaction | Performance of a contract; legal obligation (tax and accounting) |
Provide customer support and respond to requests, including cancellation and refund requests | Communications, account and purchase information | Performance of a contract; legitimate interest in resolving issues |
Detect and prevent the upload and processing of content that violates our Terms, such as sexual or explicit imagery | Photographs you upload | Legitimate interest in protecting users and the Services and in preventing illegal content; legal obligation |
Review reports and rights complaints we receive about content that may violate our Terms or the rights of others, and act on them | Input Content, Output Content, account and communications information, information in the complaint | Legitimate interest in enforcing our Terms and protecting the rights of users and third parties; legal obligation |
Operate, secure and improve the Services; fix bugs; understand how features are used | Device, usage and diagnostic information (not Input Content, Voice Data, Face Data or Output Content) | Legitimate interest in maintaining and improving the Services |
Measure and optimise our advertising; show you relevant ads on third-party platforms | Device and advertising identifiers, usage events, website visits | Your consent (cookies, SDKs and advertising identifiers); where consent is not required, legitimate interest |
Send you service communications (subscription, payment, changes to terms) | Email address | Performance of a contract; legal obligation |
Send you marketing emails | Email address, usage information | Your consent, which you may withdraw at any time |
Prevent fraud, abuse and violations of our Terms; resolve disputes; keep evidence of consents and requests | Account, device, usage and purchase information; consent and request records | Legitimate interest in protecting the Services and users; legal obligation; establishment and defence of legal claims |
Comply with law and respond to legal requests | Any of the above as required | Legal obligation |
3.1. We do not use your Input Content, Voice Data, Face Data or Output Content for advertising, marketing, profiling, analytics about you, or to train machine learning models — our own or anyone else’s. They are used only to generate the content you request and, for Photographs, to run the automated content checks described in Section 4.2. Your Voice Data is never used to generate content for another user.
3.2. Apart from the automated checks on uploaded Photographs described in Section 4.2, we do not review Input Content in advance. We may review content when we receive a report or complaint, or where we otherwise have reason to believe it violates our Terms.
3.3. Where we rely on legitimate interests, we have assessed that our interests are not overridden by your rights. You may object at any time (Section 13).
4. VOICE DATA AND FACE DATA
4.1. What we process. When you record your voice in the App and use it to generate content, we process that recording and information derived from it that describes the characteristics of your voice (“Voice Data”). When you upload a Photograph containing a face to generate a video, we process the Photograph and information derived from it describing elements of the image, including the position, orientation and topology of a face where one is present (“Face Data”). Voice Data and Face Data are together referred to as “Voice and Face Data.” Depending on where you live, some of this data may be treated as a biometric identifier or biometric information under applicable law; to the extent it is, the safeguards in this Section apply. We use Voice and Face Data solely to generate the Output Content you request and, for Photographs, to run the automated content checks described in Section 4.2.
4.2. Purpose limitation. We do not use Voice and Face Data to identify or authenticate any person, to verify identity, to match against any database, to build a profile or a voice library of our own, to track anyone across apps or services, for advertising, or to train AI models. Your Voice Data is never used to generate content for another user.
Automated content checks. We apply automated checks to uploaded Photographs in order to detect content prohibited by our Terms, such as sexual or explicit imagery, and to prevent its processing. These checks are carried out for us by OpenAI, as described in Section 5. They are automated and limited: they do not identify anyone, and they do not verify the age or the identity of any person shown in an image. Voice Recordings and Source Tracks are not checked. Apart from these checks we do not review uploads in advance.
4.3. Consent. Voice Recordings you make are stored on your device and are not transmitted to us at the time you make them. Before a Voice Recording is transmitted to us for the first time, and, where applicable, before you first upload a Photograph containing a face, the App shows you a separate notice (which may cover both a Voice Recording and a Photograph where they are provided together) describing what is collected, why, how long it is retained and the categories of providers with whom it is shared (listed in Section 5), and asks you to select “I agree”. Because the App cannot generate content without processing your recordings and Photographs, if you do not agree, the corresponding content-generation features are not available and no Voice and Face Data is processed. If you have already purchased a subscription and do not agree, you may request a refund as described in the Terms. You may withdraw your consent at any time by deleting the relevant recordings in the App or by contacting legal@comapps.co; withdrawal does not affect processing carried out before withdrawal. We keep a record of your consent, including the version of the notice shown to you and the date and time of your acceptance, linked to your account or, if you use the App without an account, to your device.
4.4. Voice and Face Data retention and deletion schedule
We retain Voice and Face Data only for as long as is necessary to generate and deliver the Output Content you requested. Specifically:
•Voice Recordings are stored on your own device. A recording is transmitted to our servers only when you start a generation that uses it, only for the time required to produce that Output Content, and is deleted from our servers as soon as the generation is complete. We do not retain a copy of your recording after generation.
•Photographs and derived Face Data are deleted from our servers as soon as the Output Content has been generated and delivered.
•Source Tracks are transmitted to our servers only for the time required to produce the Output Content you requested and are deleted from our servers as soon as the generation is complete.
•If for any reason a generation does not complete, the transmitted recording, Photograph or Source Track and any derived data are permanently deleted no later than thirty (30) days after transmission.
•Voice and Face Data is deleted earlier if you delete the relevant recording, withdraw your consent, or delete your account, upon verification of the request.
•We do not keep backup copies of Input Content, Voice Data or Face Data.
•Third-party providers that receive Input Content are described in Section 5, together with their own retention periods, which we cannot shorten.
4.5. No sale or disclosure. We do not sell, lease, trade or otherwise profit from Voice and Face Data. We disclose it only to the providers listed in Section 5, which process it on our behalf solely to deliver the Services, and where required by law. We obtain your consent, as described in Section 4.3, before making any such disclosure.
4.6. Security. We protect Voice and Face Data using at least the same standard of care we apply to other confidential and sensitive information, including encryption in transit and access controls.
4.7. Recordings and photographs of other people
You may record only your own voice, and you may not record another person’s voice, including by playing back a recording of it. You are responsible for the Photographs you upload: by uploading a Photograph you confirm that you have the right to do so and the permission of any other person shown in it. No Voice Recording, Photograph or other Input Content may relate to a person under 18. Apart from the automated checks described in Section 4.2, we do not review uploads in advance.
If you believe your voice, image or likeness has been used in the Services without your permission, contact us at legal@comapps.co with enough detail to identify the content (see Section 14.7 of the Terms). We will investigate, remove the content and any Voice and Face Data and Output Content derived from it, and may suspend or close the account responsible.
4.8. Deleting recordings yourself. You can delete any Voice Recording from your device at any time from within the App. Voice Recordings are not backed up by us or synced to any cloud storage: deleting or reinstalling the App removes them permanently.
4.9. App Store disclosures
For users of the iOS App, and in line with Apple’s guidelines on face data:
•What we collect: Photographs you upload that contain a face, and information derived from them during processing (Section 4.1); recordings of your voice you choose to send for generation.
•Why: to generate the content you request, and to run the automated content checks described in Section 4.2. Voice and Face Data is not used for identification, authentication, tracking, advertising or model training.
•Storage and retention: deleted as soon as the content is generated; in any event within 30 days (Section 4.4).
•Sharing: with the AI processing providers described in Section 5, solely to generate your content; never sold.
•Consent: obtained before your first upload and withdrawable at any time (Section 4.3).
5. AI SERVICE PROVIDERS
5.1. To generate Output Content we use our own models running on infrastructure we contract, and, for some features, third-party AI providers. When a third-party provider is used, the relevant Input Content is transmitted to that provider over encrypted connections solely to generate the requested content, and the result is returned to the App. Uploaded Photographs are also transmitted to OpenAI for the automated content checks described in Section 4.2.
5.2. Providers we use. The following providers may receive Input Content, depending on the feature you use:
Provider | Role and Input Content received | Location | Data handling commitments | Retention by the provider |
Skywork AI Pte. Ltd. (Mureka) | Music generation from text; receives Prompts | Singapore | Does not use our inputs or outputs to develop or improve its services; assigns rights in output to us | Outputs retained by the provider for up to one month; inputs processed for security screening |
OpenAI | Automated checking of uploaded Photographs for content prohibited by our Terms; deriving a text description and song lyrics (Prompt) from a Photograph to generate music based on it; receives Photographs | USA / EU (Ireland) | Does not train on API data; processes data only to provide the service | Retains inputs and outputs for up to 30 days for abuse monitoring, then deletes them |
Vast.ai, Inc. | Provides the secure GPU infrastructure on which we run our own voice and video models; receives Voice Recordings, Source Tracks, Photographs and Prompts. No data is sent to any model vendor | USA | Infrastructure only, under a data processing agreement; does not access or use our data | Input Content is not retained there after generation |
5.3. Our requirements. The providers listed above process Input Content only to generate the content you request and, in the case of OpenAI, to carry out the automated content checks described in Section 4.2, and are not permitted to use it to develop or improve their own services. Some providers keep inputs and outputs in their own abuse-monitoring or security logs for the limited period shown in the table; we are not able to shorten that period, including when you delete your account.
5.4. Automatic routing. The App selects the provider for each request automatically, based on the feature you use. Data is transmitted only when you start a generation.
5.5. Withdrawing consent. If you do not wish your Input Content to be processed by these providers, do not use the AI features, or withdraw your consent as described in Section 4.3. AI features are not available without this processing.
5.6. Changes to providers. We update this Section when our providers change. Before a new provider receives Voice and Face Data, we will update this Privacy Policy and obtain any consent required by law.
6. COOKIES, SDKs AND TRACKING TECHNOLOGIES
6.1. What we use. On our websites we use cookies and pixels; in the App we use software development kits (SDKs). These technologies collect device and usage information for the purposes below.
Category | Purpose | Providers | Can you refuse? |
Strictly necessary | Operate the site and App, keep you signed in, process payments, prevent fraud | Our own systems; payment providers (Section 7) | No — required for the Services to work |
Analytics and crash reporting | Understand how the Services are used, fix problems, improve features | Product-analytics and crash-reporting providers | Yes |
Attribution | Measure which advertisement or campaign led you to install or visit | Mobile attribution provider | Yes |
Advertising | Measure ad performance and show relevant ads on third-party platforms | Advertising platforms (social media and search) | Yes |
Communications | Send and track service and marketing emails | Email delivery provider | Marketing: yes. Service emails: no |
Support | Provide customer support and keep records of conversations | Customer-support platform | No — required to provide support |
6.2. Consent. Where required by law — including for visitors from the European Union, the United Kingdom and those US states whose laws require it — we ask for your consent before non-essential cookies, pixels or SDKs are activated, and they remain inactive until you agree. On iOS, advertising identifiers are used only if you allow tracking when prompted by the operating system.
6.3. Your choices. You can change or withdraw your cookie choices at any time using the cookie settings link on our website; adjust tracking permissions in your device settings; opt out of interest-based advertising through the industry tools of your region (such as youradchoices.com or youronlinechoices.eu); and opt out of marketing emails using the unsubscribe link in any such email.
6.4. Global Privacy Control and Do Not Track. We honour Global Privacy Control (GPC) signals sent by your browser as a request to opt out of the sale or sharing of personal information under US state laws. Our websites do not currently respond to “Do Not Track” browser signals, because no common industry standard for such signals has been adopted.
6.5. Communications with us. When you contact support by email or through the “Write to us” form, the conversation is stored in our support system, together with the time we received it, so that we can assist you and keep a record. When you use our website questionnaire, your responses are recorded to personalise your experience.
7. WHO WE SHARE INFORMATION WITH
7.1. Service providers. We share personal information with the following companies, which provide services to us:
Provider / category | Service | Location | Information shared |
Google LLC (Google Cloud, Firebase) | Cloud hosting, authentication, crash reporting | USA / EU | Account, device, usage, Input and Output Content (hosting) |
Vast.ai, Inc. | Secure GPU infrastructure on which we run our own AI models | USA | Voice Recordings, Source Tracks, Photographs, Prompts — deleted after generation |
AI providers in Section 5 | AI content generation and text processing | As stated in Section 5 | Prompts (Mureka); Photographs (OpenAI, for content checks and to derive a description and lyrics) |
Payment processors for website purchases | Payment processing for subscriptions bought on our website | USA / UK / EU | Email, payment details (collected directly by the payment provider), transaction data |
Apple Inc. / Google LLC (App Store, Google Play) | In-app purchases and subscriptions | USA | Purchase and subscription status; see also 7.2 |
Customer-support platform | Customer support (email and website form) | USA / EU | Email, support conversations, account and purchase information needed to help you |
Email delivery provider | Receipts, renewal notices, marketing emails | EU | Email address, subscription events, email engagement |
Product-analytics and crash-reporting providers | Product analytics | USA / EU | Device and usage information |
Mobile attribution provider | Install attribution | USA / EU | Device identifiers, install and campaign events |
Advertising platforms | Advertising measurement and delivery | USA | Device and advertising identifiers, usage events |
7.2. App stores and refunds. If you request a refund for a purchase made through the Apple App Store or Google Play, we may share the following information with Apple or Google to help them assess the request, as permitted by their policies: the time elapsed since installation and your total usage time; whether the purchased subscription or Coins were consumed and to what extent; whether an introductory offer was used; your account tenure and prior refund history; and an anonymous account identifier. We do not share your recordings, Photographs, generated content or Voice and Face Data for this purpose.
7.3. Legal and safety. We may disclose personal information where required by law, court order or governmental request; to enforce our Terms; to respond to copyright notices and rights complaints; to detect and prevent fraud or abuse; or to protect the rights, property or safety of any person.
7.4. Business transfers. If we are involved in a merger, acquisition, financing, reorganisation, or a sale or transfer of all or part of our business or assets, including an individual application together with the related user accounts and subscriptions, personal information may be transferred as part of that transaction. We will notify you as described in Section 15 and, where the law requires your consent to the transfer of Voice and Face Data, we will obtain it separately.
7.5. Aggregated information. We may share information that has been aggregated or de-identified so that it cannot reasonably be used to identify you.
7.6. Sale and sharing. We do not sell personal information for money. Where you consent to advertising cookies and SDKs (Section 6), our use of them constitutes “sharing” of personal information for cross-context behavioural advertising, and may constitute a “sale,” as those terms are defined under certain US state laws. Where you do not consent, or you opt out as described in Sections 6.3, 6.4 and 14, we do not share your personal information for these purposes. We never sell or share Input Content, Voice and Face Data or Output Content for any purpose.
8. HOW LONG WE KEEP INFORMATION
Information | Retention period |
Voice Recordings, Source Tracks, Photographs, Voice and Face Data, Prompts (Input Content) | Deleted from our servers as soon as the Output Content has been generated; if a generation does not complete, no later than 30 days after transmission (Section 4.4). Voice Recordings otherwise remain on your device until you delete them |
Output Content | Stored on our servers for 30 days after generation so that you can download it, or until you delete your account, whichever is earlier; copies you have downloaded remain on your device |
Account information | For the life of your account. Deleted when you delete your account, except for information reasonably necessary to prevent fraud or abuse, protect security, resolve disputes, preserve evidence or enforce the Terms, which is retained only for as long as that purpose requires. We may delete accounts that have been inactive for at least 24 months, after notifying you by email |
Purchase and transaction records | 7 years from the transaction, to comply with tax, accounting and payment-network requirements |
Support conversations, including the date and time each message was received | 3 years from the last message, to handle follow-up questions, disputes and chargebacks, and to evidence when cancellation and refund requests were received |
Rights complaints and copyright notices, and our records of action taken | 3 years from closure of the complaint, or longer while a claim or dispute is pending, to evidence our handling of the complaint and our repeat-infringer policy |
Analytics and usage data | Up to 24 months, then aggregated or deleted |
Consent and acknowledgement records (Voice and Face Data consent, acceptance of the Terms and of automatic-renewal terms, cookie choices, arbitration opt-out, acknowledgement of the account-deletion notice, and the deletion request itself) | At least three (3) years, or one (1) year after your subscription ends, whichever is longer; longer where required by law or while a claim or dispute is pending. After account deletion these records are kept in minimal form under a pseudonymous identifier, used only as evidence and for no other purpose |
Server and security logs | Up to 12 months |
8.1. When the applicable retention period ends we delete or irreversibly anonymise the information.
9. HOW WE PROTECT INFORMATION
9.1. We use technical and organisational measures appropriate to the sensitivity of the information, including encryption in transit and access controls. Access to Input Content and Voice and Face Data is restricted to systems and personnel that need it to provide the Services.
9.2. No system is completely secure. If we become aware of a personal data breach that is likely to result in a risk to your rights, we will notify you and the competent authorities as required by applicable law.
10. INTERNATIONAL TRANSFERS
10.1. We are based in the United States, and our service providers are located in the United States, the European Union, the United Kingdom and Singapore (Sections 5 and 7). Your information may therefore be transferred to and processed in countries other than your own.
10.2. Where personal information is transferred from the EEA, the United Kingdom or Switzerland to a country that has not been recognised as providing an adequate level of protection, we put in place the safeguards available for that transfer, such as the European Commission’s Standard Contractual Clauses and the UK International Data Transfer Addendum, or the EU–US Data Privacy Framework where the provider is certified. To ask which safeguards apply to a particular provider, contact legal@comapps.co.
11. DELETING YOUR ACCOUNT
11.1. You can delete your account at any time from within the App. When you do, we delete or de-identify your Input Content, Output Content, Voice and Face Data, usage analytics linked to your account and other personal information from our systems, except for: (a) records we must keep by law, such as transaction and tax records; (b) information reasonably necessary to prevent fraud or abuse, protect security, resolve disputes, preserve evidence or enforce the Terms, including the consent and acknowledgement records described in Section 8, retained only for as long as that purpose requires; (c) any backup copies of account records, which are isolated from ordinary use and deleted under our backup schedule; and (d) where you have an active subscription purchased on our website that you have not cancelled, the billing information held by our payment provider that is necessary to administer that subscription. We do not keep backup copies of your recordings, Photographs or generated content. Deletion is permanent and cannot be undone.
11.2. Deleting your account does not cancel your subscription. Your subscription is managed separately, and you will continue to be charged until you cancel it. Before you confirm deletion, we ask you to confirm that you understand this. Where you have an active subscription purchased on our website that you have not cancelled, our payment provider retains the billing information necessary to administer it. See Section 7.7 of the Terms for how to cancel.
11.3. Your Coin balance is stored on your device and may also be recorded in our systems. We do not guarantee that Coins will remain available after account deletion; see Section 7.9 of the Terms. Information stored only on your device, including Voice Recordings, is under your control and is removed when you delete the App’s data.
12. CHILDREN
12.1. The Services are intended solely for adults aged 18 and over. We do not knowingly collect personal information, including Voice and Face Data, from anyone under 18 years of age, and we do not knowingly process the voice or image of any person under 18. Our Terms prohibit recording, uploading or processing the voice or image of any person under 18. Apart from the automated checks described in Section 4.2, we do not review uploads in advance, and those checks do not verify the age or identity of any person heard in a recording or shown in an image; we rely on the representations you make under our Terms. If we learn that we have collected personal information from a person under 18, or that the voice or image of a person under 18 has been processed, we will delete it and may close the associated account.
12.2. If you believe a person under 18 has provided us with personal information, or that the voice or image of a person under 18 has been processed by the Services, contact us at legal@comapps.co.
12.3. Objection by a parent or guardian. If you are the parent or legal guardian of a person whose voice or image has been processed by the Services and you did not consent to that processing, contact us at legal@comapps.co with enough detail to identify the content. We will delete it, any Voice and Face Data derived from it and any Output Content generated from it, and we may suspend or close the account responsible. We act on such a request without requiring you to show that the processing breached our Terms.
13. YOUR RIGHTS
13.1. Depending on where you live, you have some or all of the following rights in relation to your personal information: to access it and receive a copy; to correct it; to delete it; to restrict or object to its processing; to receive it in a portable format; to withdraw consent at any time (without affecting processing before withdrawal); not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects; and to lodge a complaint with a supervisory authority.
13.2. Recordings and generated content. You may delete Voice Recordings from your device in the App at any time. Input Content transmitted for generation and Voice and Face Data are deleted automatically as described in Section 4.4; Output Content stored on our servers is deleted after 30 days or when you delete your account. You may also request deletion at any time by contacting legal@comapps.co.
13.3. How to exercise your rights. Some rights can be exercised directly in the App (deleting recordings, deleting your account). For anything else, email legal@comapps.co. A request sent to our customer support will also be treated as a request under this Section and passed to the same team. We will respond within one month (GDPR/UK GDPR) or 45 days (US state laws), extendable where the law permits, and will tell you if we need more time. We may need to verify your identity before acting on a request; we will ask only for the information necessary to do so.
13.4. Authorised agents. You may make a request through an authorised agent. We will need to verify the agent’s authority and your identity.
13.5. Complaints. We would prefer to resolve any concern directly, but you have the right to complain to the data protection authority in your country of residence, place of work or where the alleged infringement occurred. In the EU, a list of authorities is at edpb.europa.eu; in the UK, the Information Commissioner’s Office at ico.org.uk.
13.6. No discrimination. We will not deny you services, charge different prices or provide a different level of service because you exercised your privacy rights.
14. ADDITIONAL INFORMATION FOR US RESIDENTS
14.1. This Section supplements the rest of this Privacy Policy for residents of California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon and other US states with comprehensive privacy laws.
14.2. Categories of personal information
In the preceding 12 months we have collected the following categories of personal information, from the sources and for the purposes described in Sections 2 and 3: identifiers (email, device and advertising identifiers, IP address); commercial information (purchases, subscriptions, Coins); internet or network activity (usage, website visits, interactions with ads); geolocation (approximate, from IP); audio and visual information (voice recordings you make, audio tracks and photographs you upload, which may contain faces); inferences (feature preferences from questionnaire responses); and sensitive personal information (account credentials).
We disclose these categories to the service providers listed in Section 7 for business purposes. We “share” identifiers and internet activity with advertising partners (Section 7.6). We do not sell personal information for money and do not sell or share audio or visual information, Voice and Face Data or Output Content.
14.3. Sensitive personal information
We use sensitive personal information only to provide the Services you request and to secure your account, and for the purposes permitted without a right to limit under applicable law. We do not use it to infer characteristics about you. You may nonetheless request that we limit its use by contacting legal@comapps.co.
14.4. Your rights and how to exercise them
You have the right to know, access, correct and delete your personal information; to opt out of the sale or sharing of personal information and of targeted advertising; to limit the use of sensitive personal information; to opt out of profiling in furtherance of decisions that produce legal or similarly significant effects (we do not engage in such profiling); and not to be discriminated against for exercising these rights. To opt out of sale, sharing or targeted advertising, use the cookie settings on our website, enable Global Privacy Control in your browser, disable ad tracking in your device settings, or email legal@comapps.co with the subject “Opt-Out”. For all other requests, email legal@comapps.co. We will verify your request as described in Section 13.3.
14.5. Appeals
If we decline to act on your request, you may appeal by replying to our decision email or writing to legal@comapps.co with the subject “Privacy Appeal” within 30 days. We will respond within 45 days (60 days where permitted). If your appeal is denied, you may contact your state Attorney General; for Virginia residents, the Office of the Attorney General at oag.state.va.us.
14.6. California-specific disclosures
Shine the Light (Civil Code §1798.83): California residents may request, once per calendar year, information about personal information we disclosed to third parties for their direct marketing purposes. We do not disclose personal information to third parties for their own direct marketing. To make a request, email legal@comapps.co. Do Not Track: see Section 6.4. Financial incentives: we do not offer financial incentives in exchange for personal information.
15. CHANGES TO THIS POLICY
15.1. We may update this Privacy Policy from time to time. The date of the current version is shown at the top.
15.2. If we make a material change — for example, using personal information for a new purpose, sharing it with a new category of recipients, or changing how Voice and Face Data is processed — we will notify you in advance by email where we hold your email address and otherwise in the App, and where the law requires it we will ask for your consent. Changes that reduce your rights do not apply retroactively to information collected before the change.
16. HOW TO CONTACT US
Privacy requests and questions: legal@comapps.co
Complaints concerning voice, name, image, likeness or performance: legal@comapps.co (see Section 14.7 of the Terms)
Copyright notices: dmca@comapps.co (see Section 14 of the Terms)
General support: support@aimusic.zendesk.com, or the “Write to us” form at https://musicgen.space
Postal address: Comapps LLC, 700 North Fairfax St, Ste 614, Alexandria, VA 22314, USA