Privacy Policy

1. Who we are

Afro Music Lab is operated by Amy Molina Dappay, who acts as the data controller for personal data processed through the Service. Contact: dappayamy@gmail.com.

2. Personal data we collect and why

• Account data (email address, login credentials, authentication identifiers, sign-in provider such as Google) — to create and secure your account and sign you in. Legal basis: performance of a contract.
• Subscription and membership status (plan, status, renewal dates, and identifiers supplied by our payment provider) — to grant access to paid features and manage renewals and cancellations. Legal basis: performance of a contract.
• Studio content you create or upload (audio files, project settings, lyrics, notes, glossary terms, comments, share links) — to provide the studio, store your work and generate exports. Legal basis: performance of a contract.
• Prompts and inputs to AI features (creative briefs, lyric drafts, extracted audio measurements, chosen language) — sent to our AI processing provider to return the analysis or suggestions you request. Legal basis: performance of a contract.
• Preferences (language and locale, keyboard shortcuts, studio settings) — to personalise the interface. Legal basis: performance of a contract.
• Support messages — to answer your questions. Legal basis: legitimate interests in supporting customers.
• Usage, device and log data (IP address, browser and device identifiers, pages viewed, error reports) — for security, fraud prevention, debugging and improving the product. Legal basis: legitimate interests.

Card and billing details are collected and processed directly by Paddle as Merchant of Record; we never receive or store full payment card numbers.

3. Who we share data with

• Merchant of Record — Paddle.com, for the sale of the subscription, payments, subscription management, invoicing, tax compliance and refunds.
• Service providers and subprocessors, including our hosting, database and authentication infrastructure provider, and our AI model gateway provider that processes the text and audio measurements you submit to AI features.
• Collaborators you choose, when you create a share link or invite someone to a project — they see only what that link exposes.
• Professional advisers (legal, accounting) where necessary.
• Authorities, where required by law or to protect legal rights.

We do not sell personal data.

4. International transfers

Our providers may process data outside your country, including outside the UK and EEA. Where that happens, transfers are protected by appropriate safeguards such as standard contractual clauses or an adequacy decision.

5. Cookies and local storage

We use strictly necessary cookies and browser storage to keep you signed in, remember your language and studio preferences, and store project drafts locally in your browser. Our payment provider sets cookies needed to run checkout. We do not use advertising cookies. You can clear or block cookies in your browser settings, but sign-in and the studio may stop working.

6. Retention

We keep account and subscription records for as long as your account is active and for as long as needed to meet legal, tax and accounting obligations. Studio content is kept until you delete it or close your account. When data is no longer needed, it is deleted or anonymised.

7. Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict or port your personal data, to object to processing based on legitimate interests, and to withdraw consent. If you are in the UK or EEA you may also lodge a complaint with your supervisory authority. Email dappayamy@gmail.com and we will respond within one month.

8. Security

We apply appropriate technical and organisational measures, including encryption in transit, access controls, row-level database security, and restricted administrative access. No system is perfectly secure, so please use a strong, unique password.

9. Children

The Service is not directed at children under 16. We do not knowingly collect their personal data.

10. Changes and contact

We may update this notice; the date above shows the latest version. Questions or requests: dappayamy@gmail.com.