1. Scope and controller
Ksumiyo is a global AI music service. This Privacy Policy explains how Ksumiyo handles personal data when you use the website, studio, blog, account features, and music generation tools from any country.
The controller for this website is: [Legal operator name], [legal address]. Contact: [email protected].
2. What data Ksumiyo processes
Ksumiyo may process the following categories of data:
- Account data, such as email, display name, and profile image.
- Consent choices for privacy, marketing, and analytics.
- Referral data, such as referral codes, referral claim records, credited bonus song counts, and related account IDs.
- Music generation inputs, including prompts, lyrics, selected vibe, Designer settings, BPM, duration, language, and related technical job IDs.
- Generated track metadata, including prompt ID, request ID, browser session ID, Track DNA, generation status, generated audio filename, and browser-saved library data.
- Sharing-related events, such as copying a share caption, opening a share dialog, downloading audio for sharing, or opening third-party platform links, if analytics is enabled.
- Technical data, such as IP address, device/browser data, timestamps, security logs, and backend request logs.
- Analytics events if you allow analytics cookies.
3. Why Ksumiyo processes data
- To provide AI music generation and track playback/downloads.
- To save your account, profile, and consent choices.
- To operate referral links, referral claim checks, and promotional song credits.
- To protect the service from abuse, spam, excessive usage, and security threats.
- To keep generation records that help debug failures, respond to rights or platform questions, enforce Music Rules, and improve reliability.
- To understand product usage and improve Ksumiyo, where analytics consent is granted.
- To help users share generated music through browser sharing, downloads, caption copy tools, and third-party platform links.
- To comply with legal obligations and respond to lawful requests.
4. Legal bases and regional rights
Depending on your location and the feature used, processing may be based on contract necessity, consent, legitimate interests in operating and securing the service, or legal obligations. Analytics and marketing communications are based on consent where required. Additional local privacy rights may apply under laws such as the GDPR, UK GDPR, CCPA/CPRA, or similar privacy laws.
5. Services and recipients
Ksumiyo uses service providers for hosting, authentication, analytics, database/storage, and backend music generation. These may include Cloudflare, Firebase/Google services, Google Analytics, Sanity, and the private Ksumiyo backend. Ksumiyo may use private and third-party AI generation infrastructure as part of the generation stack. Data is shared only as needed to operate, secure, and improve the service.
If you choose to open or share to a third-party platform such as YouTube, Instagram, WhatsApp, or another service, that platform's own privacy terms apply to what you do there.
Advertising and advertising privacy choices
Ksumiyo is preparing to offer Google AdSense advertising. During review, ad requests are paused. Google scripts may load to display our published consent message; loading a consent service still involves network requests and technical information such as your IP address and browser details.
When advertising is enabled, Google and the advertising partners listed in the consent message may process device identifiers, cookies, IP addresses, browsing interactions and consent records to deliver, personalize and measure advertising and prevent fraud. Cookies or device storage and personalized advertising require consent where applicable. Partner-specific purposes and legal bases are shown in the message; eligible legitimate-interest processing includes options to object. Rejecting advertising consent does not prevent you from generating a song.
Use Advertising privacy settings at the bottom of each page to reopen Google's applicable message and change or withdraw your choices. If the message is unavailable, contact [email protected]. Analytics privacy settings are separate, as is permission to feature your songs publicly. Withdrawing consent does not invalidate processing already lawfully performed.
See how Google uses information from partner sites, Google's Privacy Policy andcookie informationfor provider processing, retention and available controls. Other partners' policies are linked from the consent message. Do not treat a consent choice as permission to reuse your prompts or lyrics for unrelated marketing.
6. International transfers
Some providers may process data outside your country. Where required, Ksumiyo relies on appropriate safeguards such as adequacy decisions, standard contractual clauses, or provider data-processing terms.
7. Retention
Account and consent data is kept while your account is active. Security and backend logs are kept only as long as reasonably needed. Browser library data may remain on your device until you clear it. Generation data may be retained to provide the service, debug failures, prevent misuse, respond to rights or platform questions, and improve reliability. Ksumiyo may retain prompt IDs, prompts, Track DNA, generated audio filenames, timestamps, and status records for these purposes.
8. Your rights
Depending on your location, you may have rights to access, correct, delete, restrict, object to processing, request portability, withdraw consent, opt out of certain processing, and complain to a regulator or data protection authority.
9. Children
Ksumiyo is not intended for children under the age required to consent to online services in their country. Do not use Ksumiyo if you are not old enough to agree to these terms.
10. Contact
Privacy requests should be sent to [email protected].