Privacy Policy

1. Data we collect

We collect only the data needed to run the Service:

• Account data from the sign-in provider you choose (Google or Facebook): your name, email address, profile picture and the provider's account identifier. We do not receive or store your password, and we do not keep the provider's access tokens after sign-in.
• Account ID: a short code we assign to your account so that our support team can identify it.
• Usage data: the Suno links or song IDs you submit, track details returned for them (title, artist, cover image address, duration, file size), your download history, the formats you save and your credit balance and transactions.
• Payment data: order and transaction identifiers, amount, currency and status received from PayPal or Stripe. Card and bank details are entered on the payment provider's page and are never received by us.
• Technical data: IP address, a device identifier stored in a cookie, browser type and request logs. These are used for security, fraud prevention and to apply free-credit limits.

2. How we use your data

We use personal data to:

• create and secure your account and keep you signed in;
• retrieve the tracks you request and deliver the files to you;
• process payments, refunds and payment disputes, and keep accurate credit records;
• prevent abuse, such as creating multiple accounts to obtain additional free credits;
• answer your support requests;
• comply with legal, tax and accounting obligations.

3. Who we share data with

We do not sell personal data and do not use it for advertising. We share data only with service providers that help us run the Service:

• Google and Facebook, to sign you in;
• PayPal and Stripe, to process payments;
• a third-party audio processing service, which receives the Suno link you submit and a random internal identifier of your account in order to prepare the audio file;
• hosting, network and security providers that operate our servers.

4. Cookies

We use only cookies that are necessary for the Service. We do not use advertising or analytics cookies.

• Session cookie: keeps you signed in, for up to 7 days of inactivity.
• csrfToken: protects your account against cross-site request forgery.
• deviceId: identifies your browser to apply free-credit limits, for up to 400 days.
• NEXT_LOCALE: remembers your language choice, for up to one year.
• Temporary cookies set during sign-in with Google or Facebook.

5. How long we keep data

Account and usage data are kept while your account is active. Payment and credit records are kept for as long as required for accounting, tax, fraud prevention and payment disputes. Security logs are kept for a limited period. When you ask us to delete your account, we follow the process on our Data deletion page.

6. Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal data, and to object to or restrict certain processing. To exercise these rights, contact us through the Support page and include your Account ID. You may also lodge a complaint with your local data protection authority.

7. Security

Connections to the Service are encrypted, session cookies cannot be read by scripts, and access to personal data is limited to what is needed to operate the Service. No method of transmission or storage is completely secure, but we work to protect your data.

8. International transfers

Our service providers may process data in countries other than your own. Where required, we rely on appropriate safeguards for such transfers.

9. Children

The Service is not intended for children under 16, and we do not knowingly collect personal data from them.

10. Changes to this policy

We may update this policy from time to time. The date at the top of this page shows when it was last changed. Significant changes will be announced on the Service.

11. Contact

For any question about this policy or your data, contact us through the Support page.