1. Scope and controller
Ksumiyo is a global AI music service. This Privacy Policy explains how Ksumiyo handles personal data when you use the website, studio, blog, account features, and music generation tools from any country.
The controller for this website is: [Legal operator name], [legal address]. Contact: [email protected].
2. What data Ksumiyo processes
Ksumiyo may process the following categories of data:
- Account data, such as email, display name, and profile image.
- Consent choices for privacy, marketing, and analytics.
- Music generation inputs, including prompts, lyrics, selected vibe, Designer settings, BPM, duration, language, and related technical job IDs.
- Generated track metadata and browser-saved library data.
- Technical data, such as IP address, device/browser data, timestamps, security logs, and backend request logs.
- Analytics events if you allow analytics cookies.
3. Why Ksumiyo processes data
- To provide AI music generation and track playback/downloads.
- To save your account, profile, and consent choices.
- To protect the service from abuse, spam, excessive usage, and security threats.
- To understand product usage and improve Ksumiyo, where analytics consent is granted.
- To comply with legal obligations and respond to lawful requests.
4. Legal bases and regional rights
Depending on your location and the feature used, processing may be based on contract necessity, consent, legitimate interests in operating and securing the service, or legal obligations. Analytics and marketing communications are based on consent where required. Additional local privacy rights may apply under laws such as the GDPR, UK GDPR, CCPA/CPRA, or similar privacy laws.
5. Services and recipients
Ksumiyo uses service providers for hosting, authentication, analytics, database/storage, and backend music generation. These may include Cloudflare, Firebase/Google services, Google Analytics, Sanity, and the private Ksumiyo backend. Data is shared only as needed to operate, secure, and improve the service.
6. International transfers
Some providers may process data outside your country. Where required, Ksumiyo relies on appropriate safeguards such as adequacy decisions, standard contractual clauses, or provider data-processing terms.
7. Retention
Account and consent data is kept while your account is active. Security and backend logs are kept only as long as reasonably needed. Browser library data may remain on your device until you clear it. Generation data may be retained to provide the service, debug failures, prevent misuse, and improve reliability.
8. Your rights
Depending on your location, you may have rights to access, correct, delete, restrict, object to processing, request portability, withdraw consent, opt out of certain processing, and complain to a regulator or data protection authority.
9. Children
Ksumiyo is not intended for children under the age required to consent to online services in their country. Do not use Ksumiyo if you are not old enough to agree to these terms.
10. Contact
Privacy requests should be sent to [email protected].