Privacy Policy for iLoveSong.ai

This Privacy Policy explains how CHANPI LTD, trading as iLoveSong.ai ("we", "us", or "our"), collects, uses, shares, retains, and protects personal information. We act as the controller for the processing described here except where a separately identified provider acts independently. This policy is intended for users worldwide, and regional rights apply where relevant law covers your use.

1. Information we collect
We may collect account and identity information; plan, billing, transaction, and limited payment-method information; prompts, lyrics, uploaded audio, images, voice recordings, generated music and other creator content; usage, device, cookie, IP, approximate-location, crash, and security information; and support communications.

Payment providers process full card or bank credentials. We generally receive transaction identifiers, status, card brand, and last four digits rather than full card numbers.

Voice features may process recordings, verification phrases and results, derived voice features, identifiers, language, duration, and security logs. Depending on the feature and applicable law, some voice information may be sensitive or biometric information.

2. Uses and legal bases
We use information to provide accounts and requested outputs, process subscriptions and credits, authenticate users, support and secure the Service, prevent fraud and abuse, comply with law, enforce our Terms, analyse operational performance, improve the product experience without training on User Content, and send Service or permitted marketing communications.

Where UK or EEA law applies, legal bases include performance of a contract, legitimate interests in operating and securing the Service, legal obligations, and consent where required for marketing, non-essential cookies, or sensitive processing. Consent may be withdrawn without affecting earlier lawful processing.

3. No model training on User Content
We do not use, and do not permit processors acting on our behalf to use, User Content to train or fine-tune general-purpose, foundation, or third-party generative AI models. User Content includes prompts, lyrics, uploaded files, audio, images, voice recordings, generated music and other outputs.

Providers may process User Content transiently only to provide requested results, perform safety and abuse checks, troubleshoot, or support users. We may analyse aggregated or de-identified operational metrics that do not contain User Content. Any future training use requires a separate explanation and explicit opt-in consent. Refusing consent will not remove unrelated features.

4. Sharing
We share information as reasonably necessary with hosting and storage providers; AI music, audio, voice, image, and video processors; payment and fraud-prevention providers; authentication, email, analytics, monitoring, and support providers; professional advisers; and authorities when legally required.

Processors acting for us are restricted to contracted purposes and appropriate confidentiality, security, data-protection, and no-training terms for User Content. Payment or other providers may act independently for their fraud, tax, legal, or compliance processing under their own notices.

5. International transfers
Information may be processed in multiple countries. Where UK or EEA transfer rules apply, we use an adequacy decision, approved contractual clauses, the UK International Data Transfer Agreement or Addendum, or another lawful safeguard, with supplementary measures where appropriate.

6. Retention
We retain account information while an account is active and for a reasonable period afterward for restoration, security, disputes, and legal obligations. Transaction records are kept as required by accounting, tax, fraud, and payment rules. Creator content is retained until deletion, account closure, or feature expiry, subject to backups and legal exceptions. We delete or de-identify information when no longer reasonably needed.

7. Cookies
We use necessary technologies for login, security, preferences, checkout, and core functions. We may use analytics or performance technologies where permitted and request consent for non-essential technologies where required. Blocking technologies may affect functionality.

8. Your rights
Depending on location, you may request access, correction, deletion, restriction, portability, or a copy; object to processing; withdraw consent; opt out of certain marketing or legally defined sale, sharing, or targeted advertising; and appeal or complain. Rights are subject to lawful exceptions and applicability thresholds.

UK users may complain to the Information Commissioner's Office at ico.org.uk. EEA users may complain to their local supervisory authority. Submit requests to [email protected]; we may verify identity and authority before acting and will not discriminate for exercising a privacy right.

9. Children
The Service is not directed to children under 13. A higher local minimum age applies where required. Minors may use the Service only with legally required consent and supervision. Contact us if a child provided information without proper authorisation.

10. Security
We use administrative, technical, and organisational safeguards designed to protect information. No online system is absolutely secure. Protect your credentials and notify us of suspected misuse.

11. Automated processing
Automated systems generate content, detect abuse, allocate usage, and support security decisions. We do not make solely automated decisions with legal or similarly significant effects unless permitted by law and accompanied by required safeguards.

12. Changes and contact
We may update this policy and will provide additional notice of material changes where required. Privacy questions and rights requests may be sent to [email protected].