Privacy Policy

1. Information we collect

We collect the following categories of information:

• Account information. Your email address and, optionally, a display name and avatar. Authentication is handled by Supabase; if you sign in with a third-party provider (OAuth), we receive the basic profile data that provider shares.
• Production content. The sessions, song sections, chord progressions, tracks, MIDI notes, bookmarks, branches, and preferences you create in the Service.
• Audio and captures. Audio recordings, rhythm taps, and text descriptions you upload, along with any transcriptions or analysis derived from them.
• AI conversations. The messages you exchange with the AI producer, including their content and related metadata.
• Billing information.If you subscribe, our payment processor Stripe collects your payment details. We receive a Stripe customer ID, subscription status, and billing period — we do not store full card numbers.
• Usage and technical data. Token-usage logs (model, endpoint, input/output token counts), rate-limit counters, log data, and aggregate analytics about how the Service is used.

2. How we use your information

• to provide, operate, and maintain the Service and your account;
• to generate AI suggestions, arrangements, audio, and responses based on your sessions and prompts;
• to process subscriptions and payments;
• to send transactional emails such as password resets and account notices;
• to enforce usage limits, prevent abuse, and secure the Service;
• to understand usage and improve features, performance, and reliability;
• to comply with legal obligations.

We do not sell your personal information, and we do not use the content of your sessions or conversations to train our own models.

3. Service providers we share data with

We share data with the following processors only as needed to run the Service:

• Supabase — database, authentication, and file storage.
• Anthropic (Claude)— processes your prompts and session context to generate AI responses.
• ElevenLabs — generates audio from your requests.
• Stripe — payment processing and subscription management.
• Resend — delivery of transactional email.
• Vercel — hosting and product analytics.
• Upstash — rate limiting.

Each provider processes data under its own terms and privacy policy. We may also disclose information if required by law or to protect our rights and the safety of our users.

4. Data retention

We keep your information for as long as your account is active or as needed to provide the Service. When you delete content or your account, we delete the associated data within a reasonable period, except where we must retain it to comply with legal, accounting, or security obligations. Backups are purged on a rolling schedule.

5. Your rights and choices

• Access and portability. You can view and export your sessions and content from within the Service.
• Correction and deletion. You can edit your profile and delete your content or account at any time.
• Privacy rights.Depending on where you live (for example under the GDPR or California’s CCPA/CPRA), you may have rights to access, correct, delete, or restrict processing of your personal information, and to object to certain processing. To exercise these rights, email hi@shak-tech.com.

6. Security

We use industry-standard measures to protect your data, including encryption in transit, scoped access controls, and private, user-scoped storage buckets for your audio and exports. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

7. International transfers

Our providers may process and store data in the United States and other countries. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses) for international transfers.

8. Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it.

9. Changes to this Policy

We may update this Policy from time to time. If we make material changes, we will provide reasonable notice and update the effective date above.

10. Contact

Questions or privacy requests? Email hi@shak-tech.com.