Privacy Policy

1. Introduction

HARMIO ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered music generation platform ("Service").

Please read this Privacy Policy carefully. By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, do not use our Service.

2. Information We Collect

2.1 Information You Provide

We collect information that you voluntarily provide to us:

• Account Information: Email address, password, display name, and profile information
• Payment Information: Billing details processed through secure third-party payment processors (we do not store full credit card details)
• User Content: Music prompts, lyrics, generated tracks, and any other content you create or upload
• Communication Data: Messages, feedback, and support inquiries you send to us

2.2 Information Automatically Collected

When you access our Service, we automatically collect:

• Usage Data: Features used, time spent, actions taken, generation history
• Device Information: IP address, browser type, operating system, device identifiers
• Log Data: Access times, pages viewed, errors, and other system activity
• Cookies and Tracking: Session identifiers, preferences, and analytics data

2.3 Information from Third Parties

We may receive information from:

• OAuth Providers: Google, and other authentication services you use to sign in
• Payment Processors: Transaction confirmations and payment status
• Analytics Services: Aggregated usage statistics and performance metrics

3. How We Use Your Information

We use the collected information for:

• Service Provision: Operating, maintaining, and improving the Service
• Account Management: Creating and managing your account, authentication, and preferences
• Music Generation: Processing your prompts and generating AI-powered music
• Payment Processing: Handling transactions, billing, and credit management
• Communication: Sending updates, notifications, and responding to inquiries
• Analytics: Understanding usage patterns and improving features
• Security: Detecting fraud, abuse, and protecting user accounts
• Legal Compliance: Meeting legal obligations and enforcing our Terms of Service
• Marketing: Sending promotional materials (with your consent, where required)

4. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), we process your data based on:

• Consent: You have given explicit permission for specific processing activities
• Contract: Processing is necessary to fulfill our Terms of Service
• Legal Obligation: We must comply with applicable laws
• Legitimate Interests: Processing benefits our business operations while respecting your rights

5. How We Share Your Information

We may share your information with:

5.1 Service Providers

• Cloud hosting and storage providers
• Payment processors (Paystack, Stripe, etc.)
• Email service providers
• Analytics platforms
• AI and machine learning service providers

5.2 Legal Requirements

We may disclose your information if required to:

• Comply with legal obligations, court orders, or government requests
• Enforce our Terms of Service
• Protect the rights, property, or safety of HARMIO, users, or others
• Prevent fraud or security threats

5.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

5.4 With Your Consent

We may share your information for other purposes with your explicit consent.

6. Data Retention

We retain your information for as long as necessary to:

• Provide the Service and maintain your account
• Comply with legal, tax, or regulatory requirements
• Resolve disputes and enforce agreements
• Improve our Service and develop new features

When you delete your account, we will delete or anonymize your personal information within 90 days, except where retention is required by law or legitimate business purposes.

7. Data Security

We implement appropriate technical and organizational measures to protect your information:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication mechanisms
• Secure data centers and infrastructure
• Employee training on data protection

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

8. Your Privacy Rights

8.1 General Rights

You have the right to:

• Access: Request copies of your personal information
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your personal information
• Portability: Receive your data in a structured, machine-readable format
• Objection: Object to processing of your personal information
• Restriction: Request limitation of processing

8.2 GDPR Rights (EEA Users)

Additional rights for EEA residents:

• Right to withdraw consent at any time
• Right to lodge a complaint with a supervisory authority
• Right to object to automated decision-making and profiling

8.3 CCPA Rights (California Users)

California residents have additional rights:

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to opt-out of the sale of personal information
• Right to non-discrimination for exercising CCPA rights

To exercise these rights, contact us at privacy@HARMIO.com. We will respond within 30 days.

9. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Essential Cookies: Required for authentication and basic functionality
• Analytics Cookies: Understand usage patterns and improve the Service
• Preference Cookies: Remember your settings and preferences
• Marketing Cookies: Deliver relevant advertisements (with consent)

You can control cookies through your browser settings. Note that disabling cookies may affect Service functionality.

10. Third-Party Services

Our Service may contain links to third-party websites or integrate with third-party services. We are not responsible for the privacy practices of these external services. We encourage you to review their privacy policies.

Third-party services we use include:

• Google OAuth for authentication
• Paystack for payment processing
• Supabase for database and authentication
• AI service providers for music generation

11. Children's Privacy

Our Service is not intended for children under the age of 13 (or 16 in the EEA). We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately, and we will take steps to delete such information.

12. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

For EEA users, we rely on:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions for certain countries
• Your explicit consent where applicable

13. AI and Machine Learning

Our Service uses artificial intelligence to generate music. Important considerations:

• Your prompts and generated content may be used to improve our AI models
• Generated music may be similar to content created for other users
• We implement measures to prevent the AI from memorizing or reproducing copyrighted content
• You can opt-out of having your data used for AI training by contacting us

14. Do Not Track Signals

Our Service does not currently respond to "Do Not Track" (DNT) signals from browsers. We may implement DNT functionality in the future and will update this policy accordingly.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last Updated" date
• Sending an email notification (for significant changes)
• Displaying a notice on the Service

Your continued use of the Service after changes indicates acceptance of the updated Privacy Policy.

16. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

17. Your Consent

By using our Service, you consent to this Privacy Policy and agree to its terms. If you do not agree, please discontinue use of the Service.