Privacy Policy

1. Overview

Gafana AI ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal data.

By using our services, you consent to the data practices described in this policy.

2. Data We Collect

Account Data

• Email address (via Google OAuth)
• Display name and profile picture
• Subscription plan and credit balance

Usage Data

• Generated songs, lyrics, and cover art
• Prompts and descriptions submitted for AI generation
• Credit transactions and usage history

Technical Data

• IP address, browser type, and device information
• Pages visited and interaction patterns

3. How We Use Your Data

• To provide and improve our AI music generation services
• To manage your account, credits, and subscription
• To communicate service updates and important notices
• To ensure platform security and prevent abuse

4. Third-Party Services

We use the following third-party services to operate our platform:

• Supabase — Database and authentication (EU hosting available)
• Google OAuth — Authentication (sign-in with Google)
• Stripe — Payment processing (we do not store your payment details)
• Netlify — Hosting and serverless functions

5. Data Storage & Security

Your data is stored securely using Supabase with row-level security (RLS) policies. All data transfers are encrypted via HTTPS.

We implement industry-standard security measures to protect your personal information. However, no method of electronic transmission or storage is 100% secure.

6. Your Rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the following rights:

• Right of access — request a copy of your personal data
• Right to rectification — correct inaccurate personal data
• Right to erasure — request deletion of your personal data
• Right to data portability — receive your data in a structured format
• Right to object — object to the processing of your personal data

7. Cookies

We use essential cookies for authentication and session management. We do not use tracking or advertising cookies.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through the platform.